Kaspersky Sandbox detects and automatically blocks advanced threats on client devices (workstations, computers, servers, also referred to as "workstations").
The solution is developed for corporate users.
The Kaspersky Sandbox solution consists of:
- The Kaspersky Sandbox application – the server part of the solution. Kaspersky Sandbox is installed on one or more servers in your corporate LAN. Servers can be combined into a cluster. On Kaspersky Sandbox servers, virtual images of Microsoft® Windows® operating systems are deployed for running the objects that need to be scanned. Kaspersky Sandbox analyzes the behavior of the objects to detect malicious activity and advanced threats in the corporate IT infrastructure.
- Endpoint Protection Platform applications (hereinafter also referred to as “EPP”): Kaspersky Endpoint Security for Windows version 11.2 or 11.3. Kaspersky Endpoint Security is installed on workstations in your corporate LAN and provides comprehensive protection of workstations from various threats, network and fraud attacks.
- The Kaspersky Endpoint Agent application version 3.7 (hereinafter also referred to as “KEA” part) installed as part of EPP. The Kaspersky Endpoint Agent application is installed on workstations and servers of your corporate LAN and provides communication between EPP and Kaspersky Sandbox, as well as automatic execution of Threat Response actions configured in Kaspersky Security Center policies.