Scan
The following scan commands are available:
| Enable/disable using AI logic to perform the job's behavior analysis. | |
| Use this command to check URLs using the Real-time Zero-Day Anti-Phishing service. This feature is more sensitive for detecting phishing links compared with previous versions of URL detection. | |
| FortiSandbox will send job detail PDF to FortiGate when requested. You can decide whether a template PDF or the actual job detail PDF will be sent for clean jobs. For malicious/suspicious files, the actual job detail pdf will always be sent to FortiGate. By default, for clean jobs, FortiSandbox will only send a template PDF. | |
| Set the maximum single file size and the maximum child file size to scan. | |
| Enable/disable timeout check for FortiMail files. By default, FortiMail will hold mail for set period to wait for the verdict from FortiSandbox. Before FortiSandbox scans a file or URL that is sent from FortiMail, it will check if the verdict is still needed - FortiMail may have already released the email after timeout. If not, FortiSandbox will give the job an Other rating and a skipped status. | |
| Set the timeout value to replay the request from FortiOS. | |
| This command allows users to view job queues statistics and purge them. | |
| Configure support for large files of up to 10GB in VM. Large file support is only available for VMs although this command is available on all platforms. Large files are usually archive files that contain many files. | |
| Use this command to display or purge the jobs in process. After canceling the jobs in processing, the job status is shown as Canceled in the job details. | |
| Turn adaptive scan on or off. | |
| Turn on or off sandboxing embedded URLs in PDF or Office documents. Only randomly selected URLs will be scanned. | |
| Turn parallel scan on or off. | |
| Turn PE emulator on or off. | |
| Pipleline Mode improves performance and accelerate the scan by reducing the time spent on VM instance starts and shutdowns. This allows jobs to be scanned in a VM instance one by one without shutting down the instance. | |
| Allow user to turn FortiGuard prefiltering on or off for certain file types. | |
| Turn VM scan ratio on or off. | |
| Turn rating service endpoint API on or off. When off, FortiSandbox uses local rating source. When on, FortiSandbox uses it as the rating source only when the results returned by the rating service are different from the results from local rating. | |
| Enable/disable trusting previous scan results in Fortimail URL scan. |