Thread Info
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sandstorm minimum recommended file scan size

Reto Schelbert

Hi

 

Does anybody know what the recommended minimum file scan size value with usage of Sandstorm is?

 

 

Also when does the Warning appear then?

 

Can't find any information about this.

 

Thanks and Best Regards

Reto



This thread was automatically locked due to age.
  • 0

    Do you mean maximum file scan size? 

    As far as i know, it should be 10-20 mb max for sandstorm. 

    If you using a higher number, then the max scan size message appears. 

    __________________________________________________________________________________________________________________

    • 0 in reply to LuCar Toni

      Thanks for your answer BearPigMan :)

       

      Yes the maximum file scan size. Seems we get the warning still with a value between 10-20MB - maybe something else not working as intended.

      But thanks for sharing your values, there are rarely information about this in the docs.

       

    • 0

      The maximum size that is sent to Sandstorm is 10MB.

      In XG v15 the default value for "Do not scan files larger than" was 1 MB. 

      In XG v16 (or maybe v16.5) and later the default value for "Do not scan files larger than" is 30 MB.

      I'm not sure, but I think that during the upgrade if the value was below 10 MB we increased to be 10 MB (or maybe 30MB) and put that message in the Control Center.

       

      With the default settings (30 MB scan limit size).

      9 MB files are AV scanned and executables are sent to sandbox

      11-29 MB files are AV scanned

      31 MB files are not scanned at all

       

      You can google things like "computer virus size distribution".  The vast majority of malware is below 10MB.

       

      In order to fully utilize sandstorm the minimum value for "do not scan larger than" is 10MB.