Sandblast

[HUNT_LEE]

Hi all,

I understand that Sandblast is a technology to protect internal corporate users from file attachments, and it seems that it needs a dedicated device for it e.g. TE 2000X.

However, if I have an external facing web-server, and there will be public users from the Internet "uploading" files to this new web server.

Should I use Sandblast to protect the web server? Or is there another technology i should use to scan / filter malicious attachment being uploaded by users from the Internet to my Web-server?

Cheers,

Hunt

[Chris_Atkinson]

SandBlast technologies are also available as a Cloud service with API access.

For more information about the API please refer:

https://sc1.checkpoint.com/documents/TPAPI/CP_1.0_ThreatPreventionAPI_APIRefGuide/html_frameset.htm

[PhoneBoy]

You only need a dedicated appliance if for some reason emulation via cloud is not desirable.
In either case, integration via API may make sense for uploaded files.
You can use the API either with the cloud or a local Threat Emulation appliance.