Domains Contacted During Installation
During the installation of MetaDefender Sandbox (previously known as OPSWAT Filescan Sandbox), the following domains will be contacted. Please note that this may change over time.
Domains | Purpose |
|---|---|
MetaDefender Cloud Reputation API | |
Microsoft Container Registry and repository for .NET packages - Used by the Powershell emulator | |
Repositories of Ubuntu and Debian packages (can be any regional or local mirror) - Used directly for Ubuntu installations and used in Docker containers for both Ubuntu and RHEL installs | |
Used for Docker installation and downloading base images for Sandbox components | |
Python package repositories - Used when building the Docker image for the Sandbox webservice component | |
Fedora’s geographically optimized mirror server that hosts Fedora packages | |
Used for downloading phishpedia package from artifact.sandbox-prod.metadefender.com - Required for phishing detection ML model | |
Used for downloading Google Chrome - Required for URL rendering in the Sandbox transform Docker container | |
Used for getting YARA rules from OPSWAT fsYara repository: https://github.com/filescanio/fsYara | |
Used for basic connectivity check | |
NTP and time servers | |
Google Public Key Infrastructure | |
Used for installing playwright in the Sandbox webservice docker image | |
RHEL package repository (can be any regional or local mirror) |
For convenience, the same domains are also listed here:
See the "Technical Datasheet" for a complete list of features: https://docs.opswat.com/filescan/datasheet/technical-datasheet