5
Feature Request - Sandboxing
Idea shared by Linda Pagillo - 4/18/2022 at 2:39 PM
Proposed
Hey SmarterTools team! I have customers asking if you guys are going to implement Sandboxing for SM. They want to be able to for example, test links received in emails in a safe environment without accidentally infecting their devices with malware etc...

Zach said he would add this feature request for us, but I'm also posting it here to see if there are any other SM users out there that would like to see this. 

Give it a thumbs up everyone ;) :)

Thanks!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 

7 Replies

Reply to Thread
0
Hello Linda,

While the idea seems great, I fail to immagine how this could be done.

I mean, a sandbox that is basically an environnement isolated from the rest of the client operating system and it need to exist at client side
This highly depends on the client operating system and the "sanboxing" options available. (Most probably a virtual machine on the client computer)

For example Windows provides a sandboxing environnement, but it would need the user to access the mail from the sandbox. I have some doubt about automatically starting a sandbox from the main OS while clicking on a link.

But maybe I don't fully understand the feature request.

Kind regards.

Sébastien Riccio
System & Network Admin

0
Hey Sebastien! You are understanding correctly :)

I'm not sure how it would be implemented either, but I wanted to ask if it was something that possibly could be done. 

I have a few customers who are concerned about it. They said almost every insurance policy asks if a company is doing sandboxing.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Kyle Kerst Replied
Employee Post
Might their reference to "sandboxing" be talking about sandboxing of incoming attachments and the like? In that case Cyren Premium Antispam does sandboxing I believe.
Kyle Kerst
Technical Support Specialist
SmarterTools Inc.
(877) 357-6278
www.smartertools.com
0
Hey Kyle! One of my customers in particular asked about URL isolation. For example, if an email comes in with a URL, they would want to test the link in isolated (sandbox) environment before actually opening it in the email just in case it contains a virus or malware that somehow made it through the AV scanners etc..
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Kyle Kerst Replied
Employee Post
That particular scenario should be covered by a combination of ClamAV/Cyren as they should both do URL scanning: 

https://www.cyren.com/tl_files/downloads/Cyren_DataSheet_SaaS_Sandboxing_2017_070617_web.pdf

For ClamAV I believe the config option you'd be looking for is: 

MailFollowURLs

With the proper mix of AV/AS setup though you can achieve that level of security. 
Kyle Kerst
Technical Support Specialist
SmarterTools Inc.
(877) 357-6278
www.smartertools.com
1
Thanks Kyle. I'm going to pass this on to them.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Kyle Kerst Replied
Employee Post
Very welcome :)
Kyle Kerst
Technical Support Specialist
SmarterTools Inc.
(877) 357-6278
www.smartertools.com

Reply to Thread