Fortinet white logo
Fortinet white logo

CLI Reference

config system fortisandbox

config system fortisandbox

Configure FortiSandbox.

config system fortisandbox
    Description: Configure FortiSandbox.
    edit <device>
        set ca {string}
        set certificate-verification [enable|disable]
        set cn {string}
        set cn-list <cn1>, <cn2>, ...
        set default {option}
        set email {string}
        set enc-algorithm [default|high|...]
        set forticloud [enable|disable]
        set inline-scan [enable|disable]
        set interface {string}
        set interface-select-method [auto|sdwan|...]
        set server {string}
        set source-ip {string}
        set ssl-min-proto-version [default|SSLv3|...]
        set status [enable|disable]
        set vrf-select {integer}
    next
end

config system fortisandbox

Parameter

Description

Type

Size

Default

ca

The CA that signs remote FortiSandbox certificate, empty for no check.

string

Maximum length: 79

certificate-verification

Enable/disable identity verification of FortiSandbox by use of certificate.

option

-

disable

Option

Description

enable

Enable identity verification of FortiSandbox by use of certificate.

disable

Disable identity verification of FortiSandbox by use of certificate.

cn *

The CN of remote server certificate, case sensitive, empty for no check.

string

Maximum length: 127

cn-list <cn> *

The CN list of remote server certificate, case sensitive, empty for no check.

CN Name.

string

Maximum length: 63

default *

Set as default FortiSandbox.

option

-

Option

Description

enable

Default FortiSandbox.

device *

Device Name.

string

Maximum length: 35

email

Notifier email address.

string

Maximum length: 63

enc-algorithm

Configure the level of SSL protection for secure communication with FortiSandbox.

option

-

default

Option

Description

default

SSL communication with high and medium encryption algorithms.

high

SSL communication with high encryption algorithms.

low

SSL communication with low encryption algorithms.

forticloud *

Enable/disable FortiSandbox Cloud.

option

-

disable

Option

Description

enable

Enable FortiSandbox Cloud.

disable

Disable FortiSandbox Cloud.

inline-scan *

Enable/disable FortiSandbox inline scan.

option

-

disable

Option

Description

enable

Enable FortiSandbox inline scan.

disable

Disable FortiSandbox inline scan.

interface

Specify outgoing interface to reach server.

string

Maximum length: 15

interface-select-method

Specify how to select outgoing interface to reach server.

option

-

auto

Option

Description

auto

Set outgoing interface automatically.

sdwan

Set outgoing interface by SD-WAN or policy routing rules.

specify

Set outgoing interface manually.

server

Server IP address or FQDN of the remote FortiSandbox.

string

Maximum length: 63

source-ip

Source IP address for communications to FortiSandbox.

string

Maximum length: 63

ssl-min-proto-version

Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting).

option

-

default

Option

Description

default

Follow system global setting.

SSLv3

SSLv3.

TLSv1

TLSv1.

TLSv1-1

TLSv1.1.

TLSv1-2

TLSv1.2.

TLSv1-3

TLSv1.3.

status

Enable/disable FortiSandbox.

option

-

disable

Option

Description

enable

Enable FortiSandbox.

disable

Disable FortiSandbox.

vrf-select

VRF ID used for connection to server.

integer

Minimum value: 0 Maximum value: 511

0

* This parameter may not exist in some models.

config system fortisandbox

config system fortisandbox

Configure FortiSandbox.

config system fortisandbox
    Description: Configure FortiSandbox.
    edit <device>
        set ca {string}
        set certificate-verification [enable|disable]
        set cn {string}
        set cn-list <cn1>, <cn2>, ...
        set default {option}
        set email {string}
        set enc-algorithm [default|high|...]
        set forticloud [enable|disable]
        set inline-scan [enable|disable]
        set interface {string}
        set interface-select-method [auto|sdwan|...]
        set server {string}
        set source-ip {string}
        set ssl-min-proto-version [default|SSLv3|...]
        set status [enable|disable]
        set vrf-select {integer}
    next
end

config system fortisandbox

Parameter

Description

Type

Size

Default

ca

The CA that signs remote FortiSandbox certificate, empty for no check.

string

Maximum length: 79

certificate-verification

Enable/disable identity verification of FortiSandbox by use of certificate.

option

-

disable

Option

Description

enable

Enable identity verification of FortiSandbox by use of certificate.

disable

Disable identity verification of FortiSandbox by use of certificate.

cn *

The CN of remote server certificate, case sensitive, empty for no check.

string

Maximum length: 127

cn-list <cn> *

The CN list of remote server certificate, case sensitive, empty for no check.

CN Name.

string

Maximum length: 63

default *

Set as default FortiSandbox.

option

-

Option

Description

enable

Default FortiSandbox.

device *

Device Name.

string

Maximum length: 35

email

Notifier email address.

string

Maximum length: 63

enc-algorithm

Configure the level of SSL protection for secure communication with FortiSandbox.

option

-

default

Option

Description

default

SSL communication with high and medium encryption algorithms.

high

SSL communication with high encryption algorithms.

low

SSL communication with low encryption algorithms.

forticloud *

Enable/disable FortiSandbox Cloud.

option

-

disable

Option

Description

enable

Enable FortiSandbox Cloud.

disable

Disable FortiSandbox Cloud.

inline-scan *

Enable/disable FortiSandbox inline scan.

option

-

disable

Option

Description

enable

Enable FortiSandbox inline scan.

disable

Disable FortiSandbox inline scan.

interface

Specify outgoing interface to reach server.

string

Maximum length: 15

interface-select-method

Specify how to select outgoing interface to reach server.

option

-

auto

Option

Description

auto

Set outgoing interface automatically.

sdwan

Set outgoing interface by SD-WAN or policy routing rules.

specify

Set outgoing interface manually.

server

Server IP address or FQDN of the remote FortiSandbox.

string

Maximum length: 63

source-ip

Source IP address for communications to FortiSandbox.

string

Maximum length: 63

ssl-min-proto-version

Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting).

option

-

default

Option

Description

default

Follow system global setting.

SSLv3

SSLv3.

TLSv1

TLSv1.

TLSv1-1

TLSv1.1.

TLSv1-2

TLSv1.2.

TLSv1-3

TLSv1.3.

status

Enable/disable FortiSandbox.

option

-

disable

Option

Description

enable

Enable FortiSandbox.

disable

Disable FortiSandbox.

vrf-select

VRF ID used for connection to server.

integer

Minimum value: 0 Maximum value: 511

0

* This parameter may not exist in some models.