Reboot the FortiSandbox. All sessions will be terminated. The unit goes offline and there is a delay while it restarts.

Reset the FortiSandbox configuration to factory default settings. Job data is kept.

For installed VM images, their clone numbers and Scan Profile settings are set back to default.

Reset the FortiSandbox configuration to factory default settings. All data is deleted.

For installed VM images, only Default VMs are kept and their clone number and Scan Profile settings are set back to default.

Shutdown the FortiSandbox.

Display the FortiSandbox firmware version, serial number, system time, disk usage, disk inode usage, image status check, Microsoft Windows VM status, VM network access configuration, RAID information and SSD file system status.

Display FortiSandbox FortiGuard component versions including the Tracer Engine, Rating Engine, Traffic Sniffer, Botnet Signature Database, IPS Signature Database, and Android engine versions.

List embedded Windows Product key information.

Show VM system status and their license situation.

If there is an issue with a VM, an error message displays information to help troubleshoot the problem.

Activate and initialize a VM image again, in case it is necessary to rebuild a VM image.

Optionally, specify a VM name with -n <VM name>, or all VMs are reset.

Upgrade or re-install the FortiSandbox firmware via Secure Copy (SCP) or File Transfer Protocol (FTP) server.

For details, see fw-upgrade.

Reset the GUI widgets.

Clean up the internal database and job information. This command erases all stored data and reboots the device.

This command only works on devices that are in standalone mode.

Delete all system logs.

Show the status of or delete pending jobs.

For details, see pending-jobs.

Configure new client device authorization .

For details, see device-authorization.

Enable/disable IP tables.

For details, see iptables.

Convert the unit to be USG licensed.

For details, see usg-license.

Configure the unit as a HA-Cluster mode unit.

For details, see hc-settings.

List the status of HA-Cluster units.

Add/update/remove a worker unit to/from an HA-Cluster. This command can only be run on a worker unit.

Enable/disable the malware detection features on the primary unit.

Use -s<percent> to turn on file scan and set the percentage of the scanning capacity to be used. If no number is entered, 50% will be used.

Restore system configuration from remote server.

For details, see restore-sysconf.

Upload system configuration backup to remote server.

For details, see backup-sysconf.

After changing the virtual hard disk size on the hypervisor, execute this command to make the change recognizable to the firmware.

This command is only available for FSAVM00 models.

Set confirm ID for Microsoft Windows or Office activation.

For details, see confirm-id.

Install customized VM.

For details, see vm-customized.

Enable/disable sandboxing result check.

For details, see sandboxing-cache.

Reset the clone number and file extension association back to firmware default values using the -r option.

Enable/disable sandboxing prefilter for file types.

For details, see sandboxing-prefilter.

Enable/disable sandboxing embedded urls in PDF or OFFICE documents.

For details, see sandboxing-embeddedurl.

Enable/disable/view Rating Service Endpoint API.

For details, see sandboxing-rse.

Enable/disable adaptive scan.

For details, see sandboxing-adaptive.

Enable/disable parallel scan.

For details, see sandboxing-parallel.

Set VM scan ratio.

For details, see sandboxing-ratio.

Turn the PE emulator on or off.

For details, see sandboxing-pexbox.

Set the maximum single file size and the maximum child file size to scan.

For details, see filesize-limit.

Set the timeout for remote authentication.

For details, see remote-auth-timeout.

Enable/disable the log file drop event.

For details, see log-dropped.

Allow Virtual Machines to access external network through outgoing port3 and set gateway for port3.

For details, see vm-internet.

List the status of units joining the Global Threat Information Network.

Check the file system on the hard disk and repair it if it's not clean. System reboots immediately.

Rebuild raid after a new HD replaces a bad one. This option is only available on hardware models.

For details, see raid-rebuild.

Reset the tracer/rating engine back to firmware default.

For details, see reset-sandbox-engine.

Enable/disable the maintainer account.

For details, see set-maintainer.

Set the allowed TLS version for HTTPS service.

For details, see set-tlsver.

Enable/disable expired timeout option for FortiMail files.

For details, see fortimail-expired.

Enable/disable conserve mode of OFTPD.

For details, see oftpd-con-mode.

Enable/disable OFTPD supporting FortiGate-LENC devices.

For details, see device-lenc.

Configure data upload settings to community cloud.

For details, see upload-settings.

Enable/disable using AI logic to do job's behavior analysis.

For details, see ai-mode.

Set your own passphrase that openSSL uses to encrypt or decrypt a configuration backup file.