Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 6 subscribers
  • Views 3678 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is this sandstorm web protection use case possible?

John Paul Hayes

Hi Folks, 

 

I need to be able to send files from our web application to sandstorm for analysis before sending on to a third party network share. 

Is there a method that would allow me to achieve this such as a API or a type of rule? 

 

--

Thanks in advance! 

JP



This thread was automatically locked due to age.
  • 0

    As far as my knowledge goes this is not possible. Sandstorm will work on downloading files to your UTM. 

    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

  • 0

    Hi JP,

    Like apijnappels says, you have to reach the web server via the UTM's Web Proxy.  If you have a DMZ, that should be straightforward.

    Even then, you can't be certain that the proxy will send it to Sandstorm.  To the extent that Sandstorm has never seen a nearly-identical file, I would expect that it would get sent.  Please let us know the result of your test.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML