Sandstorm: Missing logs and scan results for mail samples

Question

Dear all, 
 
 i just updated to UTM 9.4 and recognized that the sandstorm componend does not have any log files, or am I missing something? 
 Additionally i cannot see any scan results under "Sandbox Activity" for files from email protection. 
 
 Regards 
 Basti

Tamas Bajaki · Answer

Hi Bastian, 
 Since Sandstorm serves as a part of the malware scan process in Email Protection, you can find its related log entries in /var/log/smtp.log. 
 Regarding your other question, since mails are treated as one coherent entity and releasing a single attachment is pointless, it was decided that files sent for Sandstorm scanning will not be displayed under Sandbox Activity page, but can be handled in the Mail Manager. This is further supported by the fact that while for files downloaded from web the source / IP can be easily determined and displayed, we can only show the connecting host for mails, which might differ from the original source. 
 Niriel~