Investigating network sandbox and AV alerts
The network AV solution is a crucial network security control that organizations implement to scan all files and URLs that are either transferred internally or sourced from external resources, such as emails and web servers. This solution scans files and URLs against malware signatures and bad URLs database before transmitting them to end users.
The network sandbox solution is a network security solution implemented in an organization’s network to render or execute and analyze the behavior of files and URLs, including those internally transferred and downloaded from external resources such as email and a web server in an isolated environment, before sending them to an end user. Sandbox technology will be discussed in detail later in Chapter 15, Malware Sandboxing – Building a Malware Sandbox.
Both devices can be deployed either as a standalone device or come with another security control, such as a Next-Generation Firewall...
