SANDSTORM questions

Hello Martin,

Sandstorm activity is logged in three places:

Dashboard:
- Under "Today’s Threat Status" Widget, there is a row that displays how many items have been detected a malicious

Advanced Protection:
- Under "Advanced Protection Statistics - Today" the summary information for today's sandstorm activity

Advanced Protection > Sophos Sandstorm > Sandbox Activity:
- Displays information for all sandstormed items


The Dashboard at most tales 5 mins to update.

The Advanced Protection summary sources information for 2 locations, some of which take at most 5 mins to update, others that take at most 30 seconds to update.
Items that take at most 5 mins to update: Suspicious files, Excluded by policy, Malicious, Clean.
Items that take at most 30 sec to update: Awaiting result, Sent for analysis, Average analysis time

The Sandbox Activity page is updated in real-time, technically speaking it has at most a 30 second delay.

Cheers,
Sumel

its not working for me either. I can happily download all kind of malware without any Sandstorm activity.. and yes i have enabled it in webfilter :)

Do you have installed the ide files?
community.sophos.com/.../74695

Maybe, this is wrong interpreted. I've installed the ide files and sandstorm is working for me as excpected. I've found only a reporting bug.

You keep refering to file(s), isn't there only one?
I cannot see what interpretation there could be :-)

Sorry, that was my mistake. It's only one file ;)

Here my sandbox activity.

Regards

mod

than you have to install the ide for BOTH web an mail other than stated. Ill try this and report back later.