Huawei Cloud Sandbox Guide

Logging In to Huawei Cloud Sandbox

You can access isecurity.huawei.com and log in to Huawei cloud sandbox, to view file detection results.

1. Open the browser on the security center platform.

   In the input box of the browser, enter isecurity.huawei.com to open the homepage of Huawei security center platform.

2. Click the login button in the upper right corner, enter Account and Password, and click Login.

   
   

   • The account is the cloud account used to configure the cloud sandbox on the FW. You can configure a cloud account on the FW to bind the FW with the cloud account. You can also choose My Device on the security center platform isecurity.huawei.com, click Add a Device on the Interactive Detection Device page, enter the ESN of the corresponding FW to bind the FW with the cloud account.

   • If no cloud account is available, click the Reguster button in the upper right corner on the homepage or login page of the security center platform to register an account, and then log in to the platform.

3. On the homepage of Huawei security center platform, click Cloud Detection to enter the Huawei Cloud Sandbox page.

Introduction to Huawei Cloud Sandbox Pages

Huawei cloud sandbox has three pages: DashBoard, Report, and UploadSample. Content on each page is described as follows:

DashBoard Page

The DashBoard page collects statistics on and displays file detection results from multiple dimensions, analyzes and summarizes the results, and provides threat processing suggestions. The DashBoard page falls into four blocks of content: query area, statistical charts, detection result summarization, and threat processing suggestions. The latter three display, analyze, and summarize the query results.

• Query

  You can filter existing data based on different time ranges (such as Last 24 hours, Last 7 days, Last 30 days, and Last 90 days) and sources (such as Manual, device ESN, and device alias). Click Query to display detection results of the corresponding time range and source.

  

• Statistical charts

  This area presents queried detection results from five different dimensions so that you can have a comprehensive understanding of malicious files on the current network.

  

  For detailed statistical chart information, see Table 1.

  Table 1 Statistical chart information

  Parameter	Description
  Proportion of Malicious Files (including High, Medium and Low Risk)	Proportion of malicious files by file type
  Number of Malicious Files (by Threat Type)	Number of files by threat type
  File Proportion	Proportions of files detected as high-risk, medium-risk, low-risk, and secure
  Number of Files Detected by Sandbox and Malicious Files (including High, Medium and Low Risk)	Total number of submitted files by file type and comparison of the number of malicious files by file type
  Trend of Malicious Files Detected by Sandbox (including High, Medium and Low Risk)	Number of high-risk, medium-risk, and low-risk files, and the trend of the total number of malicious files

  

  • On the dashboard presenting the file detection result percentages and malicious file type (high-risk, medium-risk, and low-risk files) percentages, click a diagram to jump to the Report page to view the list of the corresponding file detection reports.
  • You can enable the system to display or not display certain file types by setting the category tag. After you click the category tag, it becomes unavailable, and the page does not display the data of the corresponding category. If you click the category tag again, it becomes available, and the page displays the data of the corresponding category.
• Summary of Detection Results

  Detection results are summarized from multiple dimensions of the total number, threat level (secure, low-risk, medium-risk, and high-risk), and detection status (being detected and detection failed). You can have a good understanding of the security risks or threats confronting the networks of various devices.

  

• Threat Treatment Recommendation

  The threat processing suggestion area displays the total number of threats and number of increased or decreased malicious files within the given time range by malicious file type (such as virus, Trojan horse/botnet, and vulnerability exploitation), and gives corresponding threat processing suggestions.

  

Report

On the Report page, you can query and view file detection reports by setting search conditions, as shown in Figure 1.

Figure 1 Report

To view the details of a detection report, click the corresponding button in the Report column.For details about the Report page and page information, see Figure 2 and Table 2.

Figure 2 File detection report page

UploadSample

The cloud sandbox can detect both files sent by the FW and files manually submitted. As shown in Figure 3, you can manually submit file samples to the cloud sandbox for detection. You can submit only 1 file at a time and a maximum of 100 files a day, and the file is no smaller than 1 MB and no larger than 10 MB.

Figure 3 UploadSample