FortiSandbox Cloud Region Selection

In FortiOS 6.2, FortiSandbox Cloud services, also referred to as FortiCloud Sandbox services, are decoupled from the FortiCloud license, allowing users to specify a FortiSandbox Cloud region as well as take advantage of FortiSandbox features without a FortiCloud account.

The topology below demonstrates how FortiCloud Logs and FortiSandbox Cloud are separated in FOS 6.2.

FortiCloud Log and Sandbox licenses shown in FortiOS

• FortiGate’s Main Dashboard displays separated FortiSandbox Cloud and FortiCloud Log license statuses within the FortiCloud widget.
  In the example below, the FortiCloud account is using a free license while FortiSandbox Cloud is using a paid license.

  

• To obtain a FortiSandbox Cloud license, register the FortiGate with a paid FortiGuard AntiVirus license. As the FortiSandbox Cloud license is linked to the user's AntiVirus license, it will expire when the AntiVirus license expires.

  

• If the FortiGate is not registered with a paid AntiVirus license, the FortiGate will use the free FortiCloud license. This license limits the FortiGate to 100 FortiSandbox Cloud submissions per day.

  

FortiSandbox Cloud region selection

To set the FortiSandbox Cloud region in the GUI:

1. Go to Security Fabric > Settings.
2. In the Sandbox Inspection section, select a region from the FortiSandbox cloud region dropdown.
   

   The following regions are available:

   • Europe
   • Global
   • Japan
   • US

   

3. Select Apply.

To set the FortiSandbox Cloud region in the CLI:

• In the FortiOS CLI, enter the command: forticloud-sandbox region and select a region.

  FGT_PROXY (global) # exec forticloud-sandbox region
  0  Europe
  1  Global
  2  Japan
  3  US
  Please select cloud sandbox region[0-3]:3
  Cloud sandbox region is selected: US
  
  FGT_PROXY (global) #

• The separation of the FortiCloud Log and Sandbox services can be seen in the example below:

  FGT_PROXY (global) # diagnose test application forticldd 3
  Debug zone info:
      Domain:FortiCloud ReleaseQA Global - 172.16.95.16
      Home log server: 172.16.95.93:514
      Alt log server: 172.16.95.27:514
      Active Server IP:      172.16.95.93
      Active Server status:  up
      Log quota:      102400MB
      Log used:       0MB
      Daily volume:   20480MB
      fams archive pause: 0
      APTContract : 1
      APT server: 172.16.102.52:514
      APT Altserver: 172.16.102.51:514
      Active APTServer IP:      172.16.102.52
      Active APTServer status:  up
  
  FGT_PROXY (global) #