Fortinet Document Library
Version:
4.2.0
4.0.2
4.0.1
Version:
4.0.0
3.2.3
3.2.2
Version:
3.2.1
3.2.0
3.1.5
Version:
3.1.4
3.1.3
3.1.2
Version:
3.1.1
3.1.0
3.0.7
Version:
3.0.6
Table of Contents
Introduction
CLI overview
GUI overview
Connecting to the GUI
GUI interface
CLI Console
Default port information
Configuration checklist
Update the firmware
Change the system host name
Backup or restore the system configuration
Configure the system time
Change the administrator password
Change the GUI idle timeout
Microsoft Windows VM license activation
Microsoft Office license upload and activation
Refresh current web page
Toggle left-side menu style
Reboot and shut down the unit
Log out of the unit
Perform a basic test
Dashboard widgets
Customize the Dashboard
System Information
Licenses
Connectivity and Services
Scan Performance
System Resources
Scan Statistics
File Scan
Top Devices
Pending Job Statistics
Top Critical Logs
Sniffer Traffic Throughput
Customized Threats Distribution
Quick Download
System Resources Usage
Operation Center
Threats by Topology
Threats by Hosts
Threats by Hosts - level 1
Threats by Hosts - level 2
Threats by Hosts - level 3
Threats by Hosts - level 4
Threats by Files
Threats by Files - level 1
Threats by Files - level 2
Threats by Files - level 3
Threats by Files - level 4
Threats by Devices
Threats by Devices - level 1
Threats by Devices - level 2
Threats by Devices - level 3
Threats by Devices - level 4
Security Fabric
Device
Supported Devices
FortiGate devices
FortiMail Devices
FortiWeb Devices
FortiClient EMS Devices
FortiClient
Adapter
Configure MTA adapter
Configure Carbon Black/Bit9 Server
Configure ICAP adapter
Configure FortiMail to integrate with FortiSandbox BCC Adapter
Network Share
Scan Details
Quarantine
Sniffer
FortiAI
Scan Job
Job Queue
VM jobs
File Job Search
URL Job Search
Overridden Verdicts
File On Demand
URL On-Demand
Cloud Storage
AWS S3 Settings
Azure File System
Scan Policy and Object
Scan Profile
File types
Scan Profile Pre-Filter Tab
Scan Profile VM Association Tab
Scan Profile Advanced Tab
File Scan Priority
File Scan Flow
URL Scan Flow
VM Settings
Virtual Machine
Clone Number for VM Image
VM Screenshot
OT Simulation
General Settings
Job Priority
Job Archive
Allowlist and blocklist
Web Category
Working Together With URL Pre-Filtering
Customized Rating
YARA Rules
Malware Package
URL Package
Threat Intelligence
Malware and URL Package Options
IOC Package
Global Network
System
Administrators
Admin Profiles
Wildcard Admin Authentication
Device Groups
Interfaces
Edit an interface
Edit administrative access
Create an aggregate interface
Failover IP
DNS Configuration
Static Route
LDAP Servers
RADIUS Servers
Mail Servers
FortiGuard
Certificates
Login Disclaimer
SNMP
Configuring the SNMP agent
MIB files
Event Calendar
Event Calendar Settings
Job View Settings
Settings
HA-Cluster
Cluster setup
HA-Cluster pre-requisites
Example configuration
Cluster level failover IP
Health Check
Using an aggregate interface
Cluster Management
Job Summary
Managing worker nodes
HA Roles, Syncronization and Failover
Primary and worker roles
Heartbeat Synchronization
Failover scenarios
Performance tuning
Upgrading or rebooting a cluster
Related CLI commands
Log & Report
Log Categories
Viewing logs in FortiAnalyzer
Customizing the log view
Columns
Summary Reports
Generate reports
Report Center
File Scan
File Scan Summary Report
Customizing the File Scan summary report page
URL Scan
URL Scan Summary Report
Customizing the URL Scan summary report page
Network Alerts
Network Alerts Summary Report
Customizing the Network Alerts summary report page
Log Servers
Local Log
Diagnostic Logs
Appendix A: Job Details page reference
Appendix B: Malware types
Change Log
Home
FortiSandbox 4.0.2
Administration Guide
Administration Guide
Introduction
CLI overview
GUI overview
Connecting to the GUI
GUI interface
CLI Console
Default port information
Configuration checklist
Update the firmware
Change the system host name
Backup or restore the system configuration
Configure the system time
Change the administrator password
Change the GUI idle timeout
Microsoft Windows VM license activation
Microsoft Office license upload and activation
Refresh current web page
Toggle left-side menu style
Reboot and shut down the unit
Log out of the unit
Perform a basic test
Dashboard widgets
Customize the Dashboard
System Information
Licenses
Connectivity and Services
Scan Performance
System Resources
Scan Statistics
File Scan
Top Devices
Pending Job Statistics
Top Critical Logs
Sniffer Traffic Throughput
Customized Threats Distribution
Quick Download
System Resources Usage
Operation Center
Threats by Topology
Threats by Hosts
Threats by Hosts - level 1
Threats by Hosts - level 2
Threats by Hosts - level 3
Threats by Hosts - level 4
Threats by Files
Threats by Files - level 1
Threats by Files - level 2
Threats by Files - level 3
Threats by Files - level 4
Threats by Devices
Threats by Devices - level 1
Threats by Devices - level 2
Threats by Devices - level 3
Threats by Devices - level 4
Security Fabric
Device
Supported Devices
FortiGate devices
FortiMail Devices
FortiWeb Devices
FortiClient EMS Devices
FortiClient
Adapter
Configure MTA adapter
Configure Carbon Black/Bit9 Server
Configure ICAP adapter
Configure FortiMail to integrate with FortiSandbox BCC Adapter
Network Share
Scan Details
Quarantine
Sniffer
FortiAI
Scan Job
Job Queue
VM jobs
File Job Search
URL Job Search
Overridden Verdicts
File On Demand
URL On-Demand
Cloud Storage
AWS S3 Settings
Azure File System
Scan Policy and Object
Scan Profile
File types
Scan Profile Pre-Filter Tab
Scan Profile VM Association Tab
Scan Profile Advanced Tab
File Scan Priority
File Scan Flow
URL Scan Flow
VM Settings
Virtual Machine
Clone Number for VM Image
VM Screenshot
OT Simulation
General Settings
Job Priority
Job Archive
Allowlist and blocklist
Web Category
Working Together With URL Pre-Filtering
Customized Rating
YARA Rules
Malware Package
URL Package
Threat Intelligence
Malware and URL Package Options
IOC Package
Global Network
System
Administrators
Admin Profiles
Wildcard Admin Authentication
Device Groups
Interfaces
Edit an interface
Edit administrative access
Create an aggregate interface
Failover IP
DNS Configuration
Static Route
LDAP Servers
RADIUS Servers
Mail Servers
FortiGuard
Certificates
Login Disclaimer
SNMP
Configuring the SNMP agent
MIB files
Event Calendar
Event Calendar Settings
Job View Settings
Settings
HA-Cluster
Cluster setup
HA-Cluster pre-requisites
Example configuration
Cluster level failover IP
Health Check
Using an aggregate interface
Cluster Management
Job Summary
Managing worker nodes
HA Roles, Syncronization and Failover
Primary and worker roles
Heartbeat Synchronization
Failover scenarios
Performance tuning
Upgrading or rebooting a cluster
Related CLI commands
Log & Report
Log Categories
Viewing logs in FortiAnalyzer
Customizing the log view
Columns
Summary Reports
Generate reports
Report Center
File Scan
File Scan Summary Report
Customizing the File Scan summary report page
URL Scan
URL Scan Summary Report
Customizing the URL Scan summary report page
Network Alerts
Network Alerts Summary Report
Customizing the Network Alerts summary report page
Log Servers
Local Log
Diagnostic Logs
Appendix A: Job Details page reference
Appendix B: Malware types
Change Log
4.0.2
4.2.0
4.0.2
4.0.1
4.0.0
3.2.3
3.2.2
3.2.1
3.2.0
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.7
3.0.6
Download PDF
Copy Link
Scan Job
This section includes the following topics:
Job Queue
Virtual Machine
VM Jobs
File Input
File Job Search
URL Job Search
Overridden Verdicts
File On-Demand
URL On-Demand
Cloud Storage
Scan Job
This section includes the following topics:
Job Queue
Virtual Machine
VM Jobs
File Input
File Job Search
URL Job Search
Overridden Verdicts
File On-Demand
URL On-Demand
Cloud Storage
Link
PDF
TOC