Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 6 subscribers
  • Views 3678 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is this sandstorm web protection use case possible?

John Paul Hayes

Hi Folks, 

 

I need to be able to send files from our web application to sandstorm for analysis before sending on to a third party network share. 

Is there a method that would allow me to achieve this such as a API or a type of rule? 

 

--

Thanks in advance! 

JP



This thread was automatically locked due to age.
Parents
  • 0

    Hi JP,

    Like apijnappels says, you have to reach the web server via the UTM's Web Proxy.  If you have a DMZ, that should be straightforward.

    Even then, you can't be certain that the proxy will send it to Sandstorm.  To the extent that Sandstorm has never seen a nearly-identical file, I would expect that it would get sent.  Please let us know the result of your test.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Hi JP,

    Like apijnappels says, you have to reach the web server via the UTM's Web Proxy.  If you have a DMZ, that should be straightforward.

    Even then, you can't be certain that the proxy will send it to Sandstorm.  To the extent that Sandstorm has never seen a nearly-identical file, I would expect that it would get sent.  Please let us know the result of your test.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML