Kaspersky Anti Targeted Attack Platform Help

Kaspersky Anti Targeted Attack Platform

Print Support Send link

Configuring integration with the Sandbox component

You can connect one Sandbox component to multiple Central Node components.

The following procedure is used to configure the Sandbox component connection with the Central Node component:

Creating a request to connect to the Sandbox component
You can create a request in the program web interface under an administrator account. If you have several Central Node components installed on the server, you need to create a request for each server with the Central Node component that you want to connect to the Sandbox component. If the Central Node component is deployed as a cluster, you can create a request for connection from any server in the cluster.
Processing a connection request in the Sandbox web interface
You can accept or reject each request.

In this section

The table of servers with the Sandbox component is located on the Sandbox servers tab of the program web interface window.

The table contains the following information:

IP and name—IP address or fully qualified domain name of the server with the Sandbox component.
Certificate fingerprint—Certificate fingerprint of the server with the Sandbox component.
Authorization—Status of the request to connect to the Sandbox component.
Status—Status of the connection to the Sandbox component.

To create a request to connect to the server with the Sandbox component through the program web interface:

Select the Sandbox servers section in the window of the program web interface.
In the upper-right corner of the window, click the Add button.
This opens the Sandbox server connection window.
In the IP field, specify the IP address of the server with the Sandbox component to which you want to connect.
Click Get certificate fingerprint.
The workspace displays the fingerprint of the certificate of the server with the Sandbox component.
Compare the obtained certificate fingerprint with the fingerprint indicated in the Sandbox web interface in the KATA Authorization section in the Certificate fingerprint field.
If the certificate fingerprints match, perform the next steps of the instructions.

If certificate fingerprints do not match, confirming the connection is not recommended. Make sure the data you entered is correct.
In the Name field, specify the Sandbox component name that will be displayed in the web interface of the Central Node component.
This name is not related to the name of the host where the Sandbox is installed.
If you want to activate a connection with Sandbox immediately after connecting, select the Enable check box.
Click Add.

The connection request is displayed in the web interface of the Sandbox component.

To make a connection with the Sandbox component active or to disable it:

Select the Sandbox servers section in the window of the program web interface.
The table of servers with Sandbox components is displayed.
In the row containing the relevant server in the Status column, perform one of the following actions:
- If you want to activate a connection with the Sandbox component, set the toggle switch to Enabled.
- If you want to disable a connection with the Sandbox component, set the toggle switch to Disabled.
Click Apply.

The connection with the Sandbox component will become active or will be disabled.

To delete a connection with the Sandbox component:

Select the Sandbox servers section in the window of the program web interface.
This displays the table of computers on which the Sandbox component is installed.
Select the check box in the line containing the Sandbox component whose connection you want to delete.
In the upper-right corner of the window, click the Delete button.
In the confirmation window, click Yes.

The connection with the Sandbox component will be deleted.