Fortinet black logo

New Features

Automatic regional discovery for FortiSandbox Cloud

Copy Link
Copy Doc ID 77966226-6996-11ec-bdf2-fa163e15d75b:119375
Download PDF

Automatic regional discovery for FortiSandbox Cloud

The FortiGate will automatically connect to fortisandboxcloud.com, and then discover the specific region and server to connect to based on which region the customer selected to deploy their FortiSandbox Cloud instance. FortiSandbox Cloud 4.0.0 (or later) is required for this functionality. The FortiGate must have a FortiCloud premium account license and a FortiSandbox Cloud VM license.

To verify the automatic FortiSandbox Cloud regional discovery:
  1. Configure FortiSandbox Cloud:
    • In the GUI:
      1. Go to Security Fabric > Fabric Connectors and double-click the Cloud Sandbox card.
      2. Set Status to Enable.
      3. For Type, select FortiSandbox Cloud.
      4. Click OK.
    • In the CLI, enter the following:
      config system fortisandbox
          set status enable
          set forticloud enable
          set server "fortisandboxcloud.com"
      end
  2. Verify the quarantine daemon debug output. Currently, the FortiGate connects to fortisandboxcloud.com:
    # diagnose debug application quarantine -1
        ...
        __quar_start_connection()-961: start server fortisandbox-fsb1-66.35.19.98 in vdom-3
        __quar_oftp_get_oif()-930: dev fortisandbox-fsb1 get oif 0
        ...
  3. Once the FortiGate connects to the FortiSandbox controller, it receives the region information and attempts to connect to the specific regional server (ca-west-1):
    # diagnose debug application quarantine -1
        ...
        __quar_remote_connect()-806: oftp_connect region server: ca-west-1.fortisandboxcloud.com.
        __quar_start_connection()-962: start server fortisandbox-fsb1-66.35.19.98 in vdom-0
        ...
  4. Verify that the connection is established to the new region (ca-west-1):
    # diagnose test application quarantined 1
    forticloud-fsb is disabled.
    fortisandbox-fsb1(ca-west-1.fortisandboxcloud.com) is enabled: analytics, realtime=yes, taskfull=no
        addr=66.35.19.98/514, source-ip=0.0.0.0, keep-alive=no.
        ssl_opt=3, hmac_alg=0
        intf_sel=auto() oif=0

Automatic regional discovery for FortiSandbox Cloud

The FortiGate will automatically connect to fortisandboxcloud.com, and then discover the specific region and server to connect to based on which region the customer selected to deploy their FortiSandbox Cloud instance. FortiSandbox Cloud 4.0.0 (or later) is required for this functionality. The FortiGate must have a FortiCloud premium account license and a FortiSandbox Cloud VM license.

To verify the automatic FortiSandbox Cloud regional discovery:
  1. Configure FortiSandbox Cloud:
    • In the GUI:
      1. Go to Security Fabric > Fabric Connectors and double-click the Cloud Sandbox card.
      2. Set Status to Enable.
      3. For Type, select FortiSandbox Cloud.
      4. Click OK.
    • In the CLI, enter the following:
      config system fortisandbox
          set status enable
          set forticloud enable
          set server "fortisandboxcloud.com"
      end
  2. Verify the quarantine daemon debug output. Currently, the FortiGate connects to fortisandboxcloud.com:
    # diagnose debug application quarantine -1
        ...
        __quar_start_connection()-961: start server fortisandbox-fsb1-66.35.19.98 in vdom-3
        __quar_oftp_get_oif()-930: dev fortisandbox-fsb1 get oif 0
        ...
  3. Once the FortiGate connects to the FortiSandbox controller, it receives the region information and attempts to connect to the specific regional server (ca-west-1):
    # diagnose debug application quarantine -1
        ...
        __quar_remote_connect()-806: oftp_connect region server: ca-west-1.fortisandboxcloud.com.
        __quar_start_connection()-962: start server fortisandbox-fsb1-66.35.19.98 in vdom-0
        ...
  4. Verify that the connection is established to the new region (ca-west-1):
    # diagnose test application quarantined 1
    forticloud-fsb is disabled.
    fortisandbox-fsb1(ca-west-1.fortisandboxcloud.com) is enabled: analytics, realtime=yes, taskfull=no
        addr=66.35.19.98/514, source-ip=0.0.0.0, keep-alive=no.
        ssl_opt=3, hmac_alg=0
        intf_sel=auto() oif=0