- Go to Security Profiles > AntiVirus.
- Under APT Protection Options, enable Content Disarm and Reconstruction and select the Original File Destination.
If you enable FortiSandbox as the file destination, original files caught by the AntiVirus profile are archived on the FortiSandbox. The FortiSandbox administrator can retrieve the original files, but only for a short time.
If you enable either File Quarantine or Discard as the file destination, original files caught by the AntiVirus profile are lost. Only the disarmed content is made available.