Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

Scan Profile Job Queue Tab

Use the Job Queue to define file types and URLs that are allowed to enter the job queue if they are from a sniffer, adapter, or device other than FortiMail.

Files or URLs submitted through On-Demand, RPC JSON API, network share, or FortiMail are always put into the job queue even if their file types are not set to enter the job queue.

To allow a file type to enter the job queue:

Click its toggle button on the right side to enable it. If the button is greyed out, files of that type will be dropped.

File Detection

FortiSandbox supports a customized timeout value to control the tracer running time in VM.

Currently, MAC OSX and Windows Cloud VM do not support File detection.

To configure File Detection:
  1. Select Scan Policy > Scan Profile
  2. In the File detection window, enter a Default Timeout value between 60 and 180 seconds.

    A shorter Default Timeout value gives better performance and faster scan speed, but lower accuracy. For a balance of speed and accuracy, use a value that falls in the middle of the 60-180 second range.

  3. Click Apply to save.

    The Scan results shows the VM Scan time.

URL Detection

When URL detection is enabled, FortiSandbox scans URLs (WEBLinks). You can also define the Default Depth setting (from 0 to 5) of the URL and the Default Timeout.

If there is a long queue of pending jobs, consider turning off some file types to job queue. For example, in most networks, static web files (JavaScript, html, aspx files) and Adobe Flash files comprise a large portion of all files. When performance issue are met, users can consider turning them off.

If a file type is turned off, files of that type already in the job queue will still be processed. You can use the pending-jobs command or Scan Input > Job Queue page to purge them.

To determine the number of each file type and its input source, use the CLI command pending-jobs or Scan Input > Job Queue page.

Scan Profile Job Queue Tab

Use the Job Queue to define file types and URLs that are allowed to enter the job queue if they are from a sniffer, adapter, or device other than FortiMail.

Files or URLs submitted through On-Demand, RPC JSON API, network share, or FortiMail are always put into the job queue even if their file types are not set to enter the job queue.

To allow a file type to enter the job queue:

Click its toggle button on the right side to enable it. If the button is greyed out, files of that type will be dropped.

File Detection

FortiSandbox supports a customized timeout value to control the tracer running time in VM.

Currently, MAC OSX and Windows Cloud VM do not support File detection.

To configure File Detection:
  1. Select Scan Policy > Scan Profile
  2. In the File detection window, enter a Default Timeout value between 60 and 180 seconds.

    A shorter Default Timeout value gives better performance and faster scan speed, but lower accuracy. For a balance of speed and accuracy, use a value that falls in the middle of the 60-180 second range.

  3. Click Apply to save.

    The Scan results shows the VM Scan time.

URL Detection

When URL detection is enabled, FortiSandbox scans URLs (WEBLinks). You can also define the Default Depth setting (from 0 to 5) of the URL and the Default Timeout.

If there is a long queue of pending jobs, consider turning off some file types to job queue. For example, in most networks, static web files (JavaScript, html, aspx files) and Adobe Flash files comprise a large portion of all files. When performance issue are met, users can consider turning them off.

If a file type is turned off, files of that type already in the job queue will still be processed. You can use the pending-jobs command or Scan Input > Job Queue page to purge them.

To determine the number of each file type and its input source, use the CLI command pending-jobs or Scan Input > Job Queue page.