Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • Administration Guide

    Home FortiSandbox 4.4.5 Administration Guide
    4.4.5
    5.0.0
    4.4.6
    4.4.5
    4.4.4
    4.4.3
    4.4.2
    4.4.1
    4.4.0
    4.2.7
    4.2.6
    4.2.5
    4.2.4
    4.2.3
    4.2.2
    4.2.1
    4.2.0
    4.0.5
    4.0.4
    4.0.3
    4.0.2
    4.0.1
    4.0.0
    3.2.4
    3.2.3
    3.2.2
    3.2.1
    3.2.0
    3.1.5
    3.1.4
    3.1.3
    3.1.2
    3.1.1
    3.1.0
    3.0.7
    3.0.6

    Settings

    Settings

    Go to System > Settings to configure the administrator account settings.

    GUI

    Idle timeout

    Length of time before FortiSandbox logs out an inactive user, from 1 to 480 minutes.

    Language

    Change the GUI language.

    Show alarms of unprocessed detections in Notifications on Header Bar

    Enable this option to show notifications in the top banner. Select the time period and rating of notifications. You must log out and log back in to show notifications. Click the notification to go to Dashboard > Operation Center to see the details.

    VM External Network Access

    Allow Virtual Machines to access external network through outgoing port3

    Enable to allow Virtual Machines to access external network through the outgoing port3. For further details, refer to the port3 (VM outgoing interface) topic in Interfaces.

    Status

    Port3 status to access the Internet.

    Gateway

    Enter the next hop gateway IP address.

    The System and VM cannot use the same gateway to access the Internet.

    Disable SIMNET if Virtual Machines are not able to access external network through outgoing port3

    Enable to disable SIMNET when Virtual Machines are not able to access external network through the outgoing port3.

    DNS

    DNS server used by VM images when a file is scanned.

    Use Proxy

    Enable to use the proxy. Configure the Proxy Type, Server Name/IP, Port, Proxy Username, and Proxy Password.

    When the proxy server is enabled, all the non UDP outgoing traffic started from Sandbox VM will be directed to the proxy server.

    When a proxy server is used, if the proxy server type is HTTP CONNECT, the system level DNS server is used and accessed via system routings. If the type is SOCKS5, users need to configure an external DNS server that port3 can access via proxy server.

    For other traffic started by FortiSandbox firmware, such as FortiGuard Distribution Network (FDN) upgrades, the configurations should be done under the FortiGuard menu.

    Proxy Type

    Select the proxy type from the dropdown list. The following options are available:

    • HTTP Connect (System DNS is used)
    • SOCKS v5 (Requires DNS)

    Server Name/IP

    Enter the proxy server name or IP address.

    Port

    Enter the proxy server port number.

    Proxy Username

    Enter a proxy username.

    Proxy Password

    Enter the proxy password.

    Data Storage

    Delete original files of Clean or Other rating after

    Enable to delete all traces of jobs of Clean or Other ratings after a specified time. If the time is 0, the original files with either Clean or Other ratings will not be kept on the system. Original files with Clean or Other rating can be kept in the system for a maximum of 4 weeks.

    Delete original files of Malicious or Suspicious rating after

    Enable to delete original files with Malicious or Suspicious ratings after a specified time.

    Delete all traces of jobs of Clean or Other rating after

    Enable to delete all traces of jobs with Clean or Other ratings after a specified time. Traces of jobs with Clean or Other rating can be kept in system for a maximum of 4 weeks. The duration to keep the job traces should be longer than the duration to keep the original files.

    Delete all traces of jobs of Malicious or Suspicious rating after

    Enable to delete all traces of jobs with Malicious or Suspicious ratings after a specified time. The setting time also affects records in Network Alerts.

    Maintain statistical records of jobs

    Enable to store job statistics in the Scan Statistics Dashboard widget for up to 4 weeks.

    This feature requires CPU and disk storage resources for hourly data aggregation. We recommend enabling this setting only when users specifically require historical scanned job counts and have a retention period (i.e., Cleanup schedule) shorter than the widget time period.

    Download of Original file

    Set customized password for original files

    Enter a password for the downloaded original file. If this option is disabled, the default password is fortisandbox.

    Include a readme file containing extraction password in downloaded job package

    All downloaded archive files will have a readme file with the customized password. When disabled, the readme file will be removed from the downloaded archive file.

    Reset all widgets

    Reset all widgets in Dashboard > Status.
    Note

    By default, job traces of files with a Clean or Other rating will be kept for three days.
    Note

    If Delete all traces of jobs of Malicious or Suspicious rating after is configured, the network alert records in Log & Report > Network Alerts will be deleted after the specified time. Otherwise, the network alert records deletion period is 32 days.
    Previous
    Next

    Settings

    Settings

    Go to System > Settings to configure the administrator account settings.

    GUI

    Idle timeout

    Length of time before FortiSandbox logs out an inactive user, from 1 to 480 minutes.

    Language

    Change the GUI language.

    Show alarms of unprocessed detections in Notifications on Header Bar

    Enable this option to show notifications in the top banner. Select the time period and rating of notifications. You must log out and log back in to show notifications. Click the notification to go to Dashboard > Operation Center to see the details.

    VM External Network Access

    Allow Virtual Machines to access external network through outgoing port3

    Enable to allow Virtual Machines to access external network through the outgoing port3. For further details, refer to the port3 (VM outgoing interface) topic in Interfaces.

    Status

    Port3 status to access the Internet.

    Gateway

    Enter the next hop gateway IP address.

    The System and VM cannot use the same gateway to access the Internet.

    Disable SIMNET if Virtual Machines are not able to access external network through outgoing port3

    Enable to disable SIMNET when Virtual Machines are not able to access external network through the outgoing port3.

    DNS

    DNS server used by VM images when a file is scanned.

    Use Proxy

    Enable to use the proxy. Configure the Proxy Type, Server Name/IP, Port, Proxy Username, and Proxy Password.

    When the proxy server is enabled, all the non UDP outgoing traffic started from Sandbox VM will be directed to the proxy server.

    When a proxy server is used, if the proxy server type is HTTP CONNECT, the system level DNS server is used and accessed via system routings. If the type is SOCKS5, users need to configure an external DNS server that port3 can access via proxy server.

    For other traffic started by FortiSandbox firmware, such as FortiGuard Distribution Network (FDN) upgrades, the configurations should be done under the FortiGuard menu.

    Proxy Type

    Select the proxy type from the dropdown list. The following options are available:

    • HTTP Connect (System DNS is used)
    • SOCKS v5 (Requires DNS)

    Server Name/IP

    Enter the proxy server name or IP address.

    Port

    Enter the proxy server port number.

    Proxy Username

    Enter a proxy username.

    Proxy Password

    Enter the proxy password.

    Data Storage

    Delete original files of Clean or Other rating after

    Enable to delete all traces of jobs of Clean or Other ratings after a specified time. If the time is 0, the original files with either Clean or Other ratings will not be kept on the system. Original files with Clean or Other rating can be kept in the system for a maximum of 4 weeks.

    Delete original files of Malicious or Suspicious rating after

    Enable to delete original files with Malicious or Suspicious ratings after a specified time.

    Delete all traces of jobs of Clean or Other rating after

    Enable to delete all traces of jobs with Clean or Other ratings after a specified time. Traces of jobs with Clean or Other rating can be kept in system for a maximum of 4 weeks. The duration to keep the job traces should be longer than the duration to keep the original files.

    Delete all traces of jobs of Malicious or Suspicious rating after

    Enable to delete all traces of jobs with Malicious or Suspicious ratings after a specified time. The setting time also affects records in Network Alerts.

    Maintain statistical records of jobs

    Enable to store job statistics in the Scan Statistics Dashboard widget for up to 4 weeks.

    This feature requires CPU and disk storage resources for hourly data aggregation. We recommend enabling this setting only when users specifically require historical scanned job counts and have a retention period (i.e., Cleanup schedule) shorter than the widget time period.

    Download of Original file

    Set customized password for original files

    Enter a password for the downloaded original file. If this option is disabled, the default password is fortisandbox.

    Include a readme file containing extraction password in downloaded job package

    All downloaded archive files will have a readme file with the customized password. When disabled, the readme file will be removed from the downloaded archive file.

    Reset all widgets

    Reset all widgets in Dashboard > Status.
    Note

    By default, job traces of files with a Clean or Other rating will be kept for three days.
    Note

    If Delete all traces of jobs of Malicious or Suspicious rating after is configured, the network alert records in Log & Report > Network Alerts will be deleted after the specified time. Otherwise, the network alert records deletion period is 32 days.
    Previous
    Next