Symantec Content Analysis And Sandboxing Overview
Content Analysis and Sandboxing monitors traffic to identify suspicious traffic and send it to a sandbox environment. The solution uses Symantec Proxy - their custom malware analyzer with dual sandboxing- to inspect traffic at multiple layers for more effective threat detection. The solution is able to identify indicators of compromise (IOCs) and share this information with endpoint technologies, ensuring that remediation can be targeted and effective. The platform’s alert prioritization means that admins are only alerted to genuine threats, rather than every unknown or suspicious piece of content, helping to reduce alert fatigue and improve response times.