Testing FortiSandbox

FortiSandbox dashboard and contract information

VM License is not needed for AWS FortiSandbox.

To get future firmware updates, contact Fortinet support site http://support.fortinet.com.

Submit on-demand test using remote VM

Starting with 2.5.1, FortiSandbox AWS supports a new remote VM type: WindowsCloudVM.

By default, 8 WindowsCloudVMs are enabled, and MacOS VM is disabled.

The max number of the remote VMs can be changed under Virtual Machine > VM Images page.

Go to Scan Input > File On-Demand > Submit File. The Submit File dialog box will open.
Click on Choose File and upload the fiddler2setup.exe file.
Click Submit. You should receive a Clean rating after you send the file to FortiSandbox if the uploaded file is clean not malicious or suspicious.
Click Browse and upload any file and click Submit.
After uploading the file, you can view File On-Demand and select any file to check.
Click the View File icon under the Action column.
View the file details.

FortiSandbox VM and WindowsCloudVMs topology

FortiSandbox VM Port Usage

Type	Service	Port
FortiGate	OFTP	TCP/514
FortiClient	File analysis	TCP/514
Others	SSH CLI management	TCP/22
	Telnet CLI management	TCP/23
	Web admin	TCP/80, TCP/443
	OFTP communication with FortiGate and FortiMail	TCP/514
	Third-party proxy server for ICAP servers (ICAP)	TCP/1344
	Third-party proxy server for ICAP servers (ICAPS)	TCP/11344
FortiGuard	FortiGuard distribution servers	TCP/8890
FortiGuard	FortiGuard web filtering servers	UDP/53, UDP/8888
FortiSandbox Community Cloud	Upload detected malware information	TCP/443, UDP/53
FortiSandbox WindowsCloudVMs	Serving WindowsVM on cloud for FSA-VM to perform sandboxing	TCP/443

Testing FortiSandbox

FortiSandbox dashboard and contract information

VM License is not needed for AWS FortiSandbox.

To get future firmware updates, contact Fortinet support site http://support.fortinet.com.

Submit on-demand test using remote VM

Starting with 2.5.1, FortiSandbox AWS supports a new remote VM type: WindowsCloudVM.

By default, 8 WindowsCloudVMs are enabled, and MacOS VM is disabled.

The max number of the remote VMs can be changed under Virtual Machine > VM Images page.

Go to Scan Input > File On-Demand > Submit File. The Submit File dialog box will open.

Click on Choose File and upload the fiddler2setup.exe file.

Click Submit. You should receive a Clean rating after you send the file to FortiSandbox if the uploaded file is clean not malicious or suspicious.

Click Browse and upload any file and click Submit.

After uploading the file, you can view File On-Demand and select any file to check.

Click the View File icon under the Action column.

View the file details.

FortiSandbox VM and WindowsCloudVMs topology

FortiSandbox VM Port Usage

Type

Service

Port

FortiGate

OFTP

TCP/514

FortiClient

File analysis

TCP/514

Others

SSH CLI management

TCP/22

Telnet CLI management

TCP/23

Web admin

TCP/80, TCP/443

OFTP communication with FortiGate and FortiMail

TCP/514

Third-party proxy server for ICAP servers (ICAP)

TCP/1344

Third-party proxy server for ICAP servers (ICAPS)

TCP/11344

FortiGuard

FortiGuard distribution servers

TCP/8890

FortiGuard web filtering servers

UDP/53, UDP/8888

FortiSandbox Community Cloud

Upload detected malware information

TCP/443, UDP/53

FortiSandbox WindowsCloudVMs

Serving WindowsVM on cloud for FSA-VM to perform sandboxing

TCP/443

FortiSandbox VM on AWS