Guest Images
Guest images are virtual machine snapshots used to evaluate suspicious traffic for a variety of environments, applications, and files. They let you test traffic and software, analyze results, and detonate malware in a controlled environment where they cannot damage your assets. The number of virtual environments you can run depends on the appliance model you have.
Guest images are factory installed and tested on the Malware Analysis appliance. You can update guest images when updates become available, or you can set up automatic updates so you are always using the most recent guest images.
FireEye provides an updated set of guest images with each new release and strongly recommends you use the full set of guest images provided in each release without modifying the set.
![]() |
NOTE: Refer to the FireEye CLI Reference for information about how to enable or disable guest images. |