Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • Administration Guide

    Home FortiSandbox 5.0.0 Administration Guide
    5.0.0
    5.0.0
    4.4.6
    4.4.5
    4.4.4
    4.4.3
    4.4.2
    4.4.1
    4.4.0
    4.2.7
    4.2.6
    4.2.5
    4.2.4
    4.2.3
    4.2.2
    4.2.1
    4.2.0
    4.0.5
    4.0.4
    4.0.3
    4.0.2
    4.0.1
    4.0.0
    3.2.4
    3.2.3
    3.2.2
    3.2.1
    3.2.0
    3.1.5
    3.1.4
    3.1.3
    3.1.2
    3.1.1
    3.1.0
    3.0.7
    3.0.6

    File Job

    File Job

    Go to Scan Job > File Job to search and view all files. You can apply search filters to drill down the information displayed. Filenames can also be searched based on name patterns, and a snapshot report can be created for all search results.

    If the device is the primary node of a cluster, all jobs processed by the cluster are available to be searched. If the device is a worker node of a cluster, only jobs processed by this device are available to be searched.

    The following options are available:

    Refresh

    Click the Refresh icon to refresh the entries displayed after applying search filters.

    Search
    • Click the plus symbol to open the Filterable Columns list. The filters include Detection, File Name, Rating, Malware, Source, Destination, Device, Email From, Email Subject, Email To, File MD5, File SHA1, File SHA256, File Type, Infected OS, Job ID, Job Status, Rated by, Scan Unit, Service, Submit User, Submit Filename and Suspicious Type.
    • Hover over a column heading to activate the filter icon. Click the icon to create a filter. The options will vary depending on the column.

      To create a filter, enter values or select values from the Suggestions list, click Contains or Exact Match and click Apply.

      In the Detection column, you can use the date picker to choose the time period and apply a range that is equal to, greater or less than the time period.

      Click Resize to Contents to close the filter.

    Job List

    All the jobs that match your search criteria are displayed.

    Click the sort icon to sort columns in ascending and descending order.

    The File Name column displays the following icons:

    • Rescan job
    • Archive file
    • Archived file
    • Video available

    The Rating column displays the following icons:

    • Manual overwrite
    • Customized rating
    • FortiGuard Allowlist/Blocklist

    Export to Report

    Select to open the Report Generator dialog box. Select to generate a PDF or CSV report. You can wait until the report is ready to view, or navigate away and find the report later in Log & Report > Report Center page.

    Customize

    Click the Customize icon to customize the Job View settings page. For more information, see Job View Settings.

    Action

    Click a job in the list to view more actions. The available actions are listed below.

    View Details

    Click the View Details to view file information. The information displayed in the view details page is dependent upon the file type and risk level.

    Video

    Click the Video button to play the video of the scan. Scan videos are available in On-Demand scans if the user has the privilege.

    Perform Rescan

    Click the icon to rescan the entry that is not rated by the dynamic scan.

    Tooltip

    The Perform Rescan icon is only available for malicious or suspicious jobs which are not rated by dynamic scan. In cluster mode, the icon is only available on the primary node.

    In the Rescan Configuration dialog, you can force the job to perform a Sandboxing scan.

    The rescan job will also be shown in Scan Job > File On-Demand.

    The following information is displayed at the bottom right-hand corner of the page:

    Display percentage

    The percentage of jobs depending on your position in the page. The percentage increases as you scroll down the page.

    Total Jobs

    The number of file jobs available to view.

    The displayed columns are determined by settings defined in System > Job View Settings > File Detection Columns page. For more information, see Job View Settings.

    Previous
    Next

    File Job

    File Job

    Go to Scan Job > File Job to search and view all files. You can apply search filters to drill down the information displayed. Filenames can also be searched based on name patterns, and a snapshot report can be created for all search results.

    If the device is the primary node of a cluster, all jobs processed by the cluster are available to be searched. If the device is a worker node of a cluster, only jobs processed by this device are available to be searched.

    The following options are available:

    Refresh

    Click the Refresh icon to refresh the entries displayed after applying search filters.

    Search
    • Click the plus symbol to open the Filterable Columns list. The filters include Detection, File Name, Rating, Malware, Source, Destination, Device, Email From, Email Subject, Email To, File MD5, File SHA1, File SHA256, File Type, Infected OS, Job ID, Job Status, Rated by, Scan Unit, Service, Submit User, Submit Filename and Suspicious Type.
    • Hover over a column heading to activate the filter icon. Click the icon to create a filter. The options will vary depending on the column.

      To create a filter, enter values or select values from the Suggestions list, click Contains or Exact Match and click Apply.

      In the Detection column, you can use the date picker to choose the time period and apply a range that is equal to, greater or less than the time period.

      Click Resize to Contents to close the filter.

    Job List

    All the jobs that match your search criteria are displayed.

    Click the sort icon to sort columns in ascending and descending order.

    The File Name column displays the following icons:

    • Rescan job
    • Archive file
    • Archived file
    • Video available

    The Rating column displays the following icons:

    • Manual overwrite
    • Customized rating
    • FortiGuard Allowlist/Blocklist

    Export to Report

    Select to open the Report Generator dialog box. Select to generate a PDF or CSV report. You can wait until the report is ready to view, or navigate away and find the report later in Log & Report > Report Center page.

    Customize

    Click the Customize icon to customize the Job View settings page. For more information, see Job View Settings.

    Action

    Click a job in the list to view more actions. The available actions are listed below.

    View Details

    Click the View Details to view file information. The information displayed in the view details page is dependent upon the file type and risk level.

    Video

    Click the Video button to play the video of the scan. Scan videos are available in On-Demand scans if the user has the privilege.

    Perform Rescan

    Click the icon to rescan the entry that is not rated by the dynamic scan.

    Tooltip

    The Perform Rescan icon is only available for malicious or suspicious jobs which are not rated by dynamic scan. In cluster mode, the icon is only available on the primary node.

    In the Rescan Configuration dialog, you can force the job to perform a Sandboxing scan.

    The rescan job will also be shown in Scan Job > File On-Demand.

    The following information is displayed at the bottom right-hand corner of the page:

    Display percentage

    The percentage of jobs depending on your position in the page. The percentage increases as you scroll down the page.

    Total Jobs

    The number of file jobs available to view.

    The displayed columns are determined by settings defined in System > Job View Settings > File Detection Columns page. For more information, see Job View Settings.

    Previous
    Next