Fortinet white logo
Fortinet white logo

CLI Reference

config system fortisandbox

config system fortisandbox

Configure FortiSandbox.

config system fortisandbox
    Description: Configure FortiSandbox.
    set ca {string}
    set certificate-verification [enable|disable]
    set cn {string}
    set email {string}
    set enc-algorithm [default|high|...]
    set forticloud [enable|disable]
    set inline-scan [enable|disable]
    set interface {string}
    set interface-select-method [auto|sdwan|...]
    set server {string}
    set source-ip {string}
    set ssl-min-proto-version [default|SSLv3|...]
    set status [enable|disable]
    set vrf-select {integer}
end

config system fortisandbox

Parameter

Description

Type

Size

Default

ca

The CA that signs remote FortiSandbox certificate, empty for no check.

string

Maximum length: 79

certificate-verification

Enable/disable identity verification of FortiSandbox by use of certificate.

option

-

disable

Option

Description

enable

Enable identity verification of FortiSandbox by use of certificate.

disable

Disable identity verification of FortiSandbox by use of certificate.

cn

The CN of remote server certificate, case sensitive, empty for no check.

string

Maximum length: 127

email

Notifier email address.

string

Maximum length: 63

enc-algorithm

Configure the level of SSL protection for secure communication with FortiSandbox.

option

-

default **

Option

Description

default

SSL communication with high and medium encryption algorithms.

high

SSL communication with high encryption algorithms.

low

SSL communication with low encryption algorithms.

forticloud

Enable/disable FortiSandbox Cloud.

option

-

disable

Option

Description

enable

Enable FortiSandbox Cloud.

disable

Disable FortiSandbox Cloud.

inline-scan *

Enable/disable FortiSandbox inline scan.

option

-

disable

Option

Description

enable

Enable FortiSandbox inline scan.

disable

Disable FortiSandbox inline scan.

interface

Specify outgoing interface to reach server.

string

Maximum length: 15

interface-select-method

Specify how to select outgoing interface to reach server.

option

-

auto

Option

Description

auto

Set outgoing interface automatically.

sdwan

Set outgoing interface by SD-WAN or policy routing rules.

specify

Set outgoing interface manually.

server

Server IP address or FQDN of the remote FortiSandbox.

string

Maximum length: 63

source-ip

Source IP address for communications to FortiSandbox.

string

Maximum length: 63

ssl-min-proto-version

Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting).

option

-

default

Option

Description

default

Follow system global setting.

SSLv3

SSLv3.

TLSv1

TLSv1.

TLSv1-1

TLSv1.1.

TLSv1-2

TLSv1.2.

TLSv1-3

TLSv1.3.

status

Enable/disable FortiSandbox.

option

-

disable

Option

Description

enable

Enable FortiSandbox.

disable

Disable FortiSandbox.

vrf-select

VRF ID used for connection to server.

integer

Minimum value: 0 Maximum value: 511

0

* This parameter may not exist in some models.

** Values may differ between models.

config system fortisandbox

config system fortisandbox

Configure FortiSandbox.

config system fortisandbox
    Description: Configure FortiSandbox.
    set ca {string}
    set certificate-verification [enable|disable]
    set cn {string}
    set email {string}
    set enc-algorithm [default|high|...]
    set forticloud [enable|disable]
    set inline-scan [enable|disable]
    set interface {string}
    set interface-select-method [auto|sdwan|...]
    set server {string}
    set source-ip {string}
    set ssl-min-proto-version [default|SSLv3|...]
    set status [enable|disable]
    set vrf-select {integer}
end

config system fortisandbox

Parameter

Description

Type

Size

Default

ca

The CA that signs remote FortiSandbox certificate, empty for no check.

string

Maximum length: 79

certificate-verification

Enable/disable identity verification of FortiSandbox by use of certificate.

option

-

disable

Option

Description

enable

Enable identity verification of FortiSandbox by use of certificate.

disable

Disable identity verification of FortiSandbox by use of certificate.

cn

The CN of remote server certificate, case sensitive, empty for no check.

string

Maximum length: 127

email

Notifier email address.

string

Maximum length: 63

enc-algorithm

Configure the level of SSL protection for secure communication with FortiSandbox.

option

-

default **

Option

Description

default

SSL communication with high and medium encryption algorithms.

high

SSL communication with high encryption algorithms.

low

SSL communication with low encryption algorithms.

forticloud

Enable/disable FortiSandbox Cloud.

option

-

disable

Option

Description

enable

Enable FortiSandbox Cloud.

disable

Disable FortiSandbox Cloud.

inline-scan *

Enable/disable FortiSandbox inline scan.

option

-

disable

Option

Description

enable

Enable FortiSandbox inline scan.

disable

Disable FortiSandbox inline scan.

interface

Specify outgoing interface to reach server.

string

Maximum length: 15

interface-select-method

Specify how to select outgoing interface to reach server.

option

-

auto

Option

Description

auto

Set outgoing interface automatically.

sdwan

Set outgoing interface by SD-WAN or policy routing rules.

specify

Set outgoing interface manually.

server

Server IP address or FQDN of the remote FortiSandbox.

string

Maximum length: 63

source-ip

Source IP address for communications to FortiSandbox.

string

Maximum length: 63

ssl-min-proto-version

Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting).

option

-

default

Option

Description

default

Follow system global setting.

SSLv3

SSLv3.

TLSv1

TLSv1.

TLSv1-1

TLSv1.1.

TLSv1-2

TLSv1.2.

TLSv1-3

TLSv1.3.

status

Enable/disable FortiSandbox.

option

-

disable

Option

Description

enable

Enable FortiSandbox.

disable

Disable FortiSandbox.

vrf-select

VRF ID used for connection to server.

integer

Minimum value: 0 Maximum value: 511

0

* This parameter may not exist in some models.

** Values may differ between models.