topic Sandblast in Firewall and Security Management

Sandblast

HUNT_LEE — Mon, 03 Feb 2020 03:13:40 GMT

Hi all,

I understand that Sandblast is a technology to protect internal corporate users from file attachments, and it seems that it needs a dedicated device for it e.g. TE 2000X.

However, if I have an external facing web-server, and there will be public users from the Internet "uploading" files to this new web server.

Should I use Sandblast to protect the web server? Or is there another technology i should use to scan / filter malicious attachment being uploaded by users from the Internet to my Web-server?

Cheers,

Hunt

Re: Sandblast

Chris_Atkinson — Mon, 03 Feb 2020 07:06:14 GMT

SandBlast technologies are also available as a Cloud service with API access.

For more information about the API please refer:

https://sc1.checkpoint.com/documents/TPAPI/CP_1.0_ThreatPreventionAPI_APIRefGuide/html_frameset.htm

Re: Sandblast

PhoneBoy — Thu, 06 Feb 2020 17:57:43 GMT

You only need a dedicated appliance if for some reason emulation via cloud is not desirable.
In either case, integration via API may make sense for uploaded files.
You can use the API either with the cloud or a local Threat Emulation appliance.