Firewall multi-level security dynamic host-based sandbox generation for embedded url links

A method for protecting requesting devices from infectious content, the method comprising:

• intercepting a request for digital content hosted at a host computer, the intercepted request sent over a communication network from a requesting device;
• rendering the digital content retrieved from the host computer, wherein the digital content is rendered by an isolated browser of a sandbox system;
• generating a representation of the rendered digital content as rendered by the isolated browser instance;
• sending the generated representation to the requesting device instead of the requested digital content in response to the intercepted request;
• identifying that the retrieved digital content includes infectious content when at least one sandbox in the sandbox system is identified as infected;
• and
• sending a message to the requesting device indicating that the digital content includes the infectious content.

A non-transitory computer-readable storage medium having embodied thereon a program executable by a processor to implement a method for protecting requesting devices from infectious content, the method comprising:

• intercepting a request for digital content hosted at a host computer, the intercepted request sent over a communication network from a requesting device;
• rendering the digital content retrieved from the host computer, wherein the digital content is rendered by an isolated browser of a sandbox system;
• generating a representation of the rendered digital content as rendered by the isolated browser instance;
• sending the generated representation to the requesting device instead of the requested digital content in response to the intercepted request;
• identifying that the retrieved digital content includes infectious content when at least one sandbox in the sandbox system is identified as infected;
• and
• sending a message to the requesting device indicating that the digital content includes the infectious content.

A system for protecting requesting devices from infectious content, the system comprising:

• a firewall that intercepts a request for digital content hosted at a host computer, the intercepted request sent over a communication network from a requesting device;
• and
• a sandbox system comprising an isolated browser that renders the digital content retrieved from the host computer;
• generates a representation of the rendered digital content as rendered by the isolated browser instance;
• sends the generated representation to the requesting device instead of the requested digital content in response to the intercepted request;
• identifies that the retrieved digital content includes infectious content when at least one sandbox in the sandbox system is identified as infected;
• and
• sends a message to the requesting device indicating that the digital content includes the infectious content