Fortinet white logo
Fortinet white logo

CLI Reference

config system fortisandbox

config system fortisandbox

Configure FortiSandbox.

config system fortisandbox
    Description: Configure FortiSandbox.
    set status [enable|disable]
    set forticloud [enable|disable]
    set inline-scan [enable|disable]
    set server {string}
    set alt-server {string}
    set health-check-interval {integer}
    set source-ip {string}
    set interface-select-method [auto|specify]
    set interface {string}
    set enc-algorithm [default|high|...]
    set ssl-min-proto-version [default|SSLv3|...]
    set email {string}
    set ca {string}
    set cn {string}
    set certificate-verification [enable|disable]
end

config system fortisandbox

Parameter

Description

Type

Size

Default

status

Enable/disable FortiSandbox.

option

-

disable

Option

Description

enable

Enable FortiSandbox.

disable

Disable FortiSandbox.

forticloud

Enable/disable FortiSandbox Cloud.

option

-

disable

Option

Description

enable

Enable FortiSandbox Cloud.

disable

Disable FortiSandbox Cloud.

inline-scan

Enable/disable FortiSandbox inline scan.

option

-

disable

Option

Description

enable

Enable FortiSandbox inline scan.

disable

Disable FortiSandbox inline scan.

server

Server IP address or FQDN of the remote FortiSandbox.

string

Maximum length: 63

alt-server

Server address of the alternative remote FortiSandbox.

string

Maximum length: 63

health-check-interval

FortiSandbox failover health check interval in seconds.

integer

Minimum value: 1 Maximum value: 120

5

source-ip

Source IP address for communications to FortiSandbox.

string

Maximum length: 63

interface-select-method

Specify how to select outgoing interface to reach server.

option

-

auto

Option

Description

auto

Set outgoing interface automatically.

specify

Set outgoing interface manually.

interface

Specify outgoing interface to reach server.

string

Maximum length: 15

enc-algorithm

Configure the level of SSL protection for secure communication with FortiSandbox.

option

-

default

Option

Description

default

SSL communication with high and medium encryption algorithms.

high

SSL communication with high encryption algorithms.

low

SSL communication with low encryption algorithms.

ssl-min-proto-version

Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting).

option

-

default

Option

Description

default

Follow system global setting.

SSLv3

SSLv3.

TLSv1

TLSv1.

TLSv1-1

TLSv1.1.

TLSv1-2

TLSv1.2.

TLSv1-3

TLSv1.3.

email

Notifier email address.

string

Maximum length: 63

ca

The CA that signs remote FortiSandbox certificate, empty for no check.

string

Maximum length: 79

cn

The CN of remote server certificate, case sensitive, empty for no check.

string

Maximum length: 127

certificate-verification

Enable/disable identity verification of FortiSandbox by use of certificate.

option

-

enable

Option

Description

enable

Enable identity verification of FortiSandbox by use of certificate.

disable

Disable identity verification of FortiSandbox by use of certificate.

config system fortisandbox

config system fortisandbox

Configure FortiSandbox.

config system fortisandbox
    Description: Configure FortiSandbox.
    set status [enable|disable]
    set forticloud [enable|disable]
    set inline-scan [enable|disable]
    set server {string}
    set alt-server {string}
    set health-check-interval {integer}
    set source-ip {string}
    set interface-select-method [auto|specify]
    set interface {string}
    set enc-algorithm [default|high|...]
    set ssl-min-proto-version [default|SSLv3|...]
    set email {string}
    set ca {string}
    set cn {string}
    set certificate-verification [enable|disable]
end

config system fortisandbox

Parameter

Description

Type

Size

Default

status

Enable/disable FortiSandbox.

option

-

disable

Option

Description

enable

Enable FortiSandbox.

disable

Disable FortiSandbox.

forticloud

Enable/disable FortiSandbox Cloud.

option

-

disable

Option

Description

enable

Enable FortiSandbox Cloud.

disable

Disable FortiSandbox Cloud.

inline-scan

Enable/disable FortiSandbox inline scan.

option

-

disable

Option

Description

enable

Enable FortiSandbox inline scan.

disable

Disable FortiSandbox inline scan.

server

Server IP address or FQDN of the remote FortiSandbox.

string

Maximum length: 63

alt-server

Server address of the alternative remote FortiSandbox.

string

Maximum length: 63

health-check-interval

FortiSandbox failover health check interval in seconds.

integer

Minimum value: 1 Maximum value: 120

5

source-ip

Source IP address for communications to FortiSandbox.

string

Maximum length: 63

interface-select-method

Specify how to select outgoing interface to reach server.

option

-

auto

Option

Description

auto

Set outgoing interface automatically.

specify

Set outgoing interface manually.

interface

Specify outgoing interface to reach server.

string

Maximum length: 15

enc-algorithm

Configure the level of SSL protection for secure communication with FortiSandbox.

option

-

default

Option

Description

default

SSL communication with high and medium encryption algorithms.

high

SSL communication with high encryption algorithms.

low

SSL communication with low encryption algorithms.

ssl-min-proto-version

Minimum supported protocol version for SSL/TLS connections (default is to follow system global setting).

option

-

default

Option

Description

default

Follow system global setting.

SSLv3

SSLv3.

TLSv1

TLSv1.

TLSv1-1

TLSv1.1.

TLSv1-2

TLSv1.2.

TLSv1-3

TLSv1.3.

email

Notifier email address.

string

Maximum length: 63

ca

The CA that signs remote FortiSandbox certificate, empty for no check.

string

Maximum length: 79

cn

The CN of remote server certificate, case sensitive, empty for no check.

string

Maximum length: 127

certificate-verification

Enable/disable identity verification of FortiSandbox by use of certificate.

option

-

enable

Option

Description

enable

Enable identity verification of FortiSandbox by use of certificate.

disable

Disable identity verification of FortiSandbox by use of certificate.