About Cloud Sandbox

Cloud Sandbox is a cloud technology that allows detecting complex threats on users' computers. Kaspersky Endpoint Security automatically sends files that require scanning to Cloud Sandbox for analysis. Cloud Sandbox executes these files in an isolated environment (sandbox) to detect malicious activity and then decides on the reputation of these files. Data about these files is then sent to KSN.

Kaspersky Endpoint Security for Windows allows enabling a separate counter for threats detected using Cloud Sandbox. You can use this counter to collect statistics when analyzing detected threats.

To use Cloud Sandbox technology, the following conditions must be met:

• Kaspersky Endpoint Security for Windows 11.10.0 or later is installed on the computer.
• Kaspersky Endpoint Security plug-in 11.10.0 or later is installed in Kaspersky Security Center.
• KSN support is enabled in Kaspersky Endpoint Security.
• To view the reports on alerts detected by Cloud Sandbox technology, Kaspersky Security Center 14 or later or Kaspersky Security Center Cloud Console is required (the Report on threats has a Cloud Sandbox column, which allows filtering threats detected using this technology).

For more information about enabling Cloud Sandbox, manually starting a file scan that uses this technology, and restrictions on the use of Cloud Sandbox technology, refer to the Cloud Sandbox section of the Kaspersky Endpoint Security for Windows Help.