Fortinet black logo

Administration Guide

Scan Profile Job Queue Tab

Copy Link
Copy Doc ID 457be585-ead3-11e9-8977-00505692583a:711860
Download PDF

Scan Profile Job Queue Tab

The Job Queue tab is to define file types and URLs that are allowed to enter the job queue if they are from a sniffer, device, adapter and/or network share.

If files or URLs are submitted through On-Demand or RPC JSON API, they will always be put into the job queue, even if their file types are not set to enter the job queue.

To allow a file type to enter the job queue:

Click its toggle button on the right side to enable it. If the button is greyed out, files of that type will be dropped.

File Detection

FortiSandbox supports a customized timeout value to control the tracer running time in VM.

To configure File Detection:
  1. Select Scan Policy > Scan Profile
  2. In the File detection window, enter the Default Timeout value. This value must be an integer between 60 and 180 seconds.
  3. Click Apply to save.
  4. The Scan results will now show the VM Scan time.
Currently MAC OSX and Windows Cloud VM do not support the File detection feature.

A shorter Default Timeout value will result in better performance and a faster scan speed, but worse accuracy. For a balance of speed and accuracy, use a value that falls in the middle of the 60-180 second range.

URL Detection

When URL detection is enabled, it means FortiSandbox will scan URLs (WEBLinks). The user can also define Default Depth setting (from 0 to 5) FortiSandbox should visit the URL and the Default Timeout value that FortiSandbox should stop even when not all depths have been scanned.

If the FortiSandbox unit has a long queue of pending jobs, users should consider turning off certain file types to job queue. For example, in most network environments, static web files (JavaScript, html, aspx files, etc...) and Adobe Flash files comprise a large portion of all files. When performance issue are met, users can consider turning them off.

If a file type is turned off, files of this type already in the job queue will still be processed. Users can use the pending-jobs CLI command or Scan Input > Job Queue page to purge them if required.

To determine the number of each file type and its input source, users can use CLI command pending-jobs or Scan Input > Job Queue page.

Scan Profile Job Queue Tab

The Job Queue tab is to define file types and URLs that are allowed to enter the job queue if they are from a sniffer, device, adapter and/or network share.

If files or URLs are submitted through On-Demand or RPC JSON API, they will always be put into the job queue, even if their file types are not set to enter the job queue.

To allow a file type to enter the job queue:

Click its toggle button on the right side to enable it. If the button is greyed out, files of that type will be dropped.

File Detection

FortiSandbox supports a customized timeout value to control the tracer running time in VM.

To configure File Detection:
  1. Select Scan Policy > Scan Profile
  2. In the File detection window, enter the Default Timeout value. This value must be an integer between 60 and 180 seconds.
  3. Click Apply to save.
  4. The Scan results will now show the VM Scan time.
Currently MAC OSX and Windows Cloud VM do not support the File detection feature.

A shorter Default Timeout value will result in better performance and a faster scan speed, but worse accuracy. For a balance of speed and accuracy, use a value that falls in the middle of the 60-180 second range.

URL Detection

When URL detection is enabled, it means FortiSandbox will scan URLs (WEBLinks). The user can also define Default Depth setting (from 0 to 5) FortiSandbox should visit the URL and the Default Timeout value that FortiSandbox should stop even when not all depths have been scanned.

If the FortiSandbox unit has a long queue of pending jobs, users should consider turning off certain file types to job queue. For example, in most network environments, static web files (JavaScript, html, aspx files, etc...) and Adobe Flash files comprise a large portion of all files. When performance issue are met, users can consider turning them off.

If a file type is turned off, files of this type already in the job queue will still be processed. Users can use the pending-jobs CLI command or Scan Input > Job Queue page to purge them if required.

To determine the number of each file type and its input source, users can use CLI command pending-jobs or Scan Input > Job Queue page.