Adding Kaspersky Sandbox servers to the Kaspersky Endpoint Agent list

If you have enabled the integration with Kaspersky Sandbox, you can add Kaspersky Sandbox servers to the Kaspersky Endpoint Agent list.

You can add several Kaspersky Sandbox servers.

For a particular policy, add servers that are part of the same cluster. If servers belong to different clusters, the outcome is unpredictable.

All servers in the cluster are peers regardless of which server was used as the base for creating the cluster. Processing the same object on any server in the cluster will yield the same result.

The Kaspersky Sandbox application balances load among the servers. Objects that Kaspersky Endpoint Agent sends for processing in Kaspersky Sandbox are processed on the least busy server.

To make the Kaspersky Sandbox cluster process objects from Kaspersky Endpoint Agent, at least one server that is part of the cluster during the integration of Kaspersky Endpoint Agent with Kaspersky Sandbox must be added to the Kaspersky Endpoint Agent.

Kaspersky Endpoint Agent application's list of Kaspersky Sandbox servers only displays the servers that you have added to the list. Nevertheless, objects can be processed by any server in the cluster thanks to load balancing. The current list of servers in the cluster is displayed in the web interface of Kaspersky Sandbox.

It is recommended to add all servers of the cluster to Kaspersky Endpoint Agent.

Kaspersky Endpoint Agent can connect to a different Kaspersky Sandbox server in the list if one of the following errors occurs:

• Kaspersky Sandbox response timeout (connection timeout).
• Kaspersky Sandbox unavailable (error code 503 or 504).
• Self-diagnosis problem other than a license problem (error code 500).

When you delete a server from a cluster, the following object processing scenarios are possible:

• If there is still at least one server from the cluster with a current IP address or FQDN in the list of Kaspersky Sandbox servers in the Kaspersky Endpoint Agent application, Kaspersky Sandbox continues to process objects from Kaspersky Endpoint Agent.
• If no servers from the cluster remain in the list of Kaspersky Sandbox servers in the Kaspersky Endpoint Agent application, or if IP addresses or FQDNs of cluster servers are not current, Kaspersky Sandbox cannot receive and process objects from Kaspersky Endpoint Agent.

  For correct processing of objects, at least one server from the Kaspersky Sandbox cluster must be added to Kaspersky Endpoint Agent.

To add Kaspersky Sandbox servers to the Kaspersky Endpoint Agent list:

1. Open the Kaspersky Security Center Administration Console.
2. In the console tree, select the Policies folder.
3. Select the necessary policy and double-click it to open its properties.
4. Under Kaspersky Sandbox integration, select Connection settings.
5. Select the Enable Kaspersky Sandbox integration check box if it is not selected.
6. Under List of Kaspersky Sandbox servers, click Add.

   The Server properties window opens.

7. Enter the IP address or FQDN of the Kaspersky Sandbox server and the port used for connecting to the server.
8. Click Add.

   The added server is listed in the server table.

9. Repeat the steps to add each Kaspersky Sandbox server to the list.
10. In the upper right corner of the settings group, move the toggle switch from Unaffected by policy to Under policy.
11. Click OK.

Kaspersky Sandbox servers are added to the Kaspersky Endpoint Agent list.

See also Enabling and disabling integration with Kaspersky Sandbox Configuring a trusted connection of Kaspersky Sandbox with Kaspersky Endpoint Agent Configuring the response timeout of Kaspersky Sandbox and request queue settings

Page top