VM Settings
Go to Scan Policy and Object > VM Settings to view all installed VM images and configure the number of instances of each image.
VM images are grouped into the following types:
VM types
Default VMs
Default VMs are a basic set of images installed on FortiSandbox by default.
The following software is installed on each pre-installed Windows guest image:
- Adobe Flash Player
- Adobe Reader
- Java Run Time
- MSVC Run Time
- Microsoft .Net Framework
- Microsoft Office:
- In 2021: Excel, Teams, OneDrive, OneNote, Outlook, PowerPoint, Project, Publisher, Visio and Word.
- In 2019: Excel, OneDrive, OneNote, Outlook/, PowerPoint, and Word.
- Web Browsers
Model, License, and VM Information
|
Model |
Base License* |
Default VMs |
Number of VM Hosts Supported |
|---|---|---|---|
|
FSA-3000F |
Windows 7 Windows 10 Office 2019 |
WIN10X64VMO19F (with Office) or WIN10LTSCO19V1 (with Office) |
Supports 8 VM hosts by default, maximum up to 74 VM hosts. For Cloud expansion, you can subscribe up to 200 Windows Cloud VMs. |
|
FSA-3000E |
Windows 7 Windows 8.1 Windows 10 Office 2016 |
WIN7X86VM (with Office) WIN7X64VM |
Supports 8 VM hosts by default, maximum up to 56 VM hosts. For Cloud expansion, you can subscribe up to 200 Windows Cloud VMs. |
|
FSA-2000E |
Windows 7 Windows 8.1 Windows 10 Office 2016 |
WIN7X86SP1O16 (with Office) |
Supports 4 VM hosts by default, maximum up to 24 VM hosts. For Cloud expansion, you can subscribe up to 200 Windows Cloud VMs. |
|
FSA-1000F |
Windows 7 Windows 10 Office |
WIN7X64SP1O16Z (with Office) |
Supports 2 VM hosts by default, maximum up to 14 VM hosts. For Cloud expansion, you can subscribe up to 200 Windows Cloud VMs. |
|
FSA-500F |
Windows 7 Windows 10 Office |
WIN7X64SP1O16Z (with Office) |
Supports 2 VM hosts by default, maximum up to 6 VM hosts. For Cloud expansion, you can subscribe up to 200 Windows Cloud VMs. |
|
FSA-VM00 |
None |
WIN7X86SP1O16 (with Office**) WIN10X64VM (available for download**) |
No VM host by default, maximum up to 8 VM hosts. For Cloud expansion, you can subscribe up to 200 Windows Cloud VMs. |
*Licenses pre-installed on the appliance.
**Both WIN7X86SP1O16 and WIN10X64VM will be listed as the default VM after the VM00_base.pkg is manually installed. Please refer to the deployment guide for more details.
The number of supported VM hosts for each model is only for images published by Fortinet. This number might be lower for custom images with high resource requirements.
Optional VMs
The Optional VMs are images published by Fortinet and are made available for download for FortiSandbox devices. These VMs are specific to the firmware version where the latest version has access to the latest VMs.
The VM name shows the operating system (OS) type, version and revision. For example, WIN10X64VMO16V4 VM Image means that the VM is a Microsoft Windows 10 64-bit for the OS and installed with Microsoft Office 2016. The V4 means revision 4.
When Fortinet publishes a new version of a VM image, the image appears in the Optional VMs group with an option to download.
To use the optional VM:
- Choose the appropriate VM image and click the Download button.
- After downloading all the images, click the Ready to Install button to install all downloaded images. A reboot is not necessary for installation.
-
The license key is verified. If no keys are available, the image status shows Installed. However, the image is disabled until the key is imported and the image is activated.
- After the image is activated, you can start using it by setting its clone number to be greater than 0. Then the image status changes to Activated.
The FortiSandbox supports different versions of Windows OS: Windows 11, Windows 10, Windows 8.1 and Windows 7. In Windows 10, Microsoft has published several editions where the following are distinctly supported by FortiSandbox:
- Windows 10 Enterprise 2015 LTSB (x64)
- Windows 10 IoT Enterprise LTSC 21H2.
These versions and editions have different license keys. The license key must correspond to the specific OS edition for successful activation. The license keys cannot be interchanged.
To determine the Windows 10 edition of a guest VM:
- Go to the VM Settings page.
- In the Action column, click the View Installed App button.
To retrieve the system's license key:
Execute the CLI command vm-license -l.
The keys follow a specific format:
- Windows 10 Enterprise 2015 LTSB (x64) edition: KEY_WIN10 25_digits_key
- Windows 10 IoT Enterprise LTSC 21H2 edition: KEY_WIN10 25_digits_key 2021
Starting August 2023, Fortinet only provides keys and guest VMs for the Windows 10 IoT Enterprise LTSC 21H2 edition. To use f the Windows 10 Enterprise 2015 LTSB (x64) edition, please contact Fortinet TAC support.
The Android Optional VM is free to download and use. The Ubuntu Optional VM does not require a dedicated key, but its clone occupies the quota of the installed Windows key.
Custom VMs
Custom VMs are user created images uploaded to FortiSandbox. Custom VM requires a Sandbox license to use. The VM may require software licenses for the installed OS and/or applications. For more information, see Setting up a custom VM.
Remote VMs
Fortinet supports MACOSX and WindowsCloudVM as remote VMs. You can purchase subscription services from Fortinet.
Remote MACOSX
In cluster mode for MACOSX remote VMs, all cluster nodes share a collected pool of reserved clones from each unit. This means that even if a node has no remote VM contract, it can still upload files to the cloud for scanning. For the cluster as a whole, the number of files being scanned on the cloud cannot exceed the total number of reserved clone numbers at any given moment.
Remote Windows
Besides normal use of WindowsCloudVM, overflow mode is supported. All activated local windows can be configured to overflow to WindowsCloudVM. When Local VM to use overflow is selected, jobs that have utilized all local clones for selected VMs will be scanned to WindowsCloudVM instead of waiting for another local clone.
In a cluster, each unit in the cluster can purchase WindowscloudVM seat counts. The cloud VM seats are local to each unit and is not shared. Configuration to use overflow mode is also local to each unit.
Simulator VMs
Fortinet provides LinuxOT VM. For information, see OT Simulation
|
Enabled clone numbers are checked against allocated CPU and memory resources. If there are not enough resources, a warning message appears and the setting is denied. |
Supported OS versions
|
Windows |
Windows 10 and Windows 11 |
| MacOS | Mac OS X 10.11 |
| Android | Android OS 4.2.2 |
| Linux | Ubuntu 18, Ubuntu 20 and Redhat 8 |