Fortinet Document Library

Version:


Table of Contents

CLI Reference

6.0.6
Download PDF
Copy Link

system fortisandbox

Use this command to configure the FortiGate unit to use FortiSandbox.

History

The following table shows all newly added, changed, or removed entries as of FortiOS 6.0.2.

Command Description

set ssl-min-proto-version {default | SSLv3 | TLSv1 | TLSv1-1 | TLSv1-2}

Set the minimum SSL version that can be used for SSL/TLS-protected FortiSandbox sessions.

The default value is default which means to follow the global minimum set by the ssl-min-proto-version option of the config system global command.

config system fortisandbox
    set status {enable | disable}   Enable/disable FortiSandbox.
    set server {string}   IPv4 or IPv6 address of the remote FortiSandbox. size[63]
    set source-ip {string}   Source IP address for communications to FortiSandbox. size[63]
    set enc-algorithm {default | high | low}   Configure the level of SSL protection for secure communication with FortiSandbox.
            default  SSL communication with high and medium encryption algorithms.
            high     SSL communication with high encryption algorithms.
            low      SSL communication with low encryption algorithms.
    set ssl-min-proto-version {option}   Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting).
            default  Follow system global setting.
            SSLv3    SSLv3.
            TLSv1    TLSv1.
            TLSv1-1  TLSv1.1.
            TLSv1-2  TLSv1.2.
    set email {string}   Notifier email address. size[63]
end

Additional information

The following section is for those options that require additional explanation.

ssl-min-proto-version {default | SSLv3 | TLSv1 | TLSv1-1 | TLSv1-2}

Set the minimum SSL version that can be used for SSL/TLS-protected FortiSandbox sessions.

The default value is default which means to follow the global minimum set by the ssl-min-proto-version option of the config system global command.

system fortisandbox

Use this command to configure the FortiGate unit to use FortiSandbox.

History

The following table shows all newly added, changed, or removed entries as of FortiOS 6.0.2.

Command Description

set ssl-min-proto-version {default | SSLv3 | TLSv1 | TLSv1-1 | TLSv1-2}

Set the minimum SSL version that can be used for SSL/TLS-protected FortiSandbox sessions.

The default value is default which means to follow the global minimum set by the ssl-min-proto-version option of the config system global command.

config system fortisandbox
    set status {enable | disable}   Enable/disable FortiSandbox.
    set server {string}   IPv4 or IPv6 address of the remote FortiSandbox. size[63]
    set source-ip {string}   Source IP address for communications to FortiSandbox. size[63]
    set enc-algorithm {default | high | low}   Configure the level of SSL protection for secure communication with FortiSandbox.
            default  SSL communication with high and medium encryption algorithms.
            high     SSL communication with high encryption algorithms.
            low      SSL communication with low encryption algorithms.
    set ssl-min-proto-version {option}   Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting).
            default  Follow system global setting.
            SSLv3    SSLv3.
            TLSv1    TLSv1.
            TLSv1-1  TLSv1.1.
            TLSv1-2  TLSv1.2.
    set email {string}   Notifier email address. size[63]
end

Additional information

The following section is for those options that require additional explanation.

ssl-min-proto-version {default | SSLv3 | TLSv1 | TLSv1-1 | TLSv1-2}

Set the minimum SSL version that can be used for SSL/TLS-protected FortiSandbox sessions.

The default value is default which means to follow the global minimum set by the ssl-min-proto-version option of the config system global command.