01-20-2021 06:49 AM
When manually submitting files for analysis in Threat Grid you can opt to have them Private or Public. Are those submitted by the automatically from the FTD private or public or is this a setting one can choose? The worry is that company sensitive information might be submitted.
Solved! Go to Solution.
01-20-2021 09:41 AM
ThreatGrid file submissions are indeed the entire file. As you noted, it's the nature of the sandbox to launch the file and analyze the behavior. If your submissions use the "public option" the file signatures are subsequently used to populate the AMP/ThreatGrid databases for other customers' file submissions to be compared against. In no case are your files shared with anyone outside your organization.
If that level of security isn't sufficient, ThreatGrid can be purchased as an on-premise appliance. In that sort of setup, the appliance itself does all of the sandboxing and returns the disposition to you alone. the file never leaves your premises - even to go to your tenant instance in Cisco's cloud (as it would with the traditional ThreatGrid SaaS model) because there is no cloud-based component.
01-20-2021 08:33 AM
it only submit the signatures - not the content.
01-20-2021 08:57 AM
01-20-2021 09:41 AM
ThreatGrid file submissions are indeed the entire file. As you noted, it's the nature of the sandbox to launch the file and analyze the behavior. If your submissions use the "public option" the file signatures are subsequently used to populate the AMP/ThreatGrid databases for other customers' file submissions to be compared against. In no case are your files shared with anyone outside your organization.
If that level of security isn't sufficient, ThreatGrid can be purchased as an on-premise appliance. In that sort of setup, the appliance itself does all of the sandboxing and returns the disposition to you alone. the file never leaves your premises - even to go to your tenant instance in Cisco's cloud (as it would with the traditional ThreatGrid SaaS model) because there is no cloud-based component.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide