Cloud Sandbox

Cloud Sandbox is a technology that lets you detect advanced threats on a computer. Kaspersky Endpoint Security automatically forwards detected files to Cloud Sandbox for analysis. Cloud Sandbox runs these files in an isolated environment to identify malicious activity and decides on their reputation. Data on these files is then sent to Kaspersky Security Network. Therefore, if Cloud Sandbox has detected a malicious file, Kaspersky Endpoint Security will perform the appropriate action to eliminate this threat on all computers where this file is detected.

Important: For Cloud Sandbox to operate, you must enable the use of Kaspersky Security Network.

Note: If you are using Kaspersky Private Security Network, Cloud Sandbox technology is not available.

To enable the Cloud Sandbox:

1. In the main window of the Web Console, select Devices > Policies and profiles.
2. Click the name of the Kaspersky Endpoint Security for Mac policy.

   The policy properties window opens.

3. Select the Application settings tab.
4. Go to Detection and Response > Endpoint Detection and Response.
5. Turn on the Cloud Sandbox toggle switch.
6. Save your changes.

Whenever there is a threat, Kaspersky Endpoint Security activates the counter for threats detected using Cloud Sandbox in the main application window in the Threat detection section. Kaspersky Endpoint Security will also indicate the Cloud Sandbox threat detection technology in the Report on threats in the Kaspersky Security Center console.