Yellow VM Internet Access Status Icon in Dashboard
If the VM Internet Access Status icon is yellow, this means the Windows VM cannot access the Internet through port3. This affects the catch rate even if FortiSandbox has a SIMNET feature. For example, the Downloader type for malwares need access to an outside network to download a malicious payload.
This also affects Windows VM activation.
To rectify, check the following:
- In the Scan Policy > General page, check that Allow Virtual Machines to access external network through outgoing port is enabled.
- A valid Gateway should be provided. The gateway should be able to access the Internet. If no DNS server is set, the system one is used.
- Use the CLI command
test-networkto show network condition through port3.