If you are using several Kaspersky Sandbox servers, you can combine these servers into a cluster. You can add servers to the cluster or remove servers from the cluster.
One cluster can include at most 32 servers.
All servers in the cluster are peers regardless of which server was used as the base for creating the cluster. Processing the same object on any server in the cluster will yield the same result.
The Kaspersky Sandbox application balances load among the servers. Objects that Kaspersky Endpoint Agent sends for processing in Kaspersky Sandbox are processed on the least busy server.
To make the Kaspersky Sandbox cluster process objects from Kaspersky Endpoint Agent, at least one server that is part of the cluster during the integration of Kaspersky Endpoint Agent with Kaspersky Sandbox must be added to the Kaspersky Endpoint Agent.
Kaspersky Endpoint Agent application's list of Kaspersky Sandbox servers only displays the servers that you have added to the list. Nevertheless, objects can be processed by any server in the cluster thanks to load balancing. The current list of servers in the cluster is displayed in the web interface of Kaspersky Sandbox.
It is recommended to add all servers of the cluster to Kaspersky Endpoint Agent.
Kaspersky Endpoint Agent can connect to a different Kaspersky Sandbox server in the list if one of the following errors occurs:
When you delete a server from a cluster, the following object processing scenarios are possible:
For correct processing of objects, at least one server from the Kaspersky Sandbox cluster must be added to Kaspersky Endpoint Agent.
After creating the cluster, the Cluster management section of Kaspersky Sandbox web interface window displays the server table of the cluster, as well as server status monitoring data for the cluster:
Kaspersky Endpoint Agent certificates and network interfaces cannot be managed once the cluster is created.