Fortinet black logo

Administration Guide

Home FortiSandbox 4.2.3 Administration Guide

Customized Rating

4.2.3
4.4.5
4.4.4
4.4.3
4.4.2
4.4.1
4.4.0
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.7
3.0.6
Copy Link
Copy Doc ID 195387ee-5c8c-11ed-96f0-fa163e15d75b:331635
Download PDF

Customized Rating

Use the Customized Rating page to set verdicts for the following cases: VM Timeout, Tracer Engine Timeout, Unextractable Encrypted Archive, and URL whose return code is not 200.

Note

By default, all customized ratings are set as Not Applied. For any other value, the customized rating is always take higher priority if it applies.

The following options can be configured:

VM Timeout

Windows VM cannot be launched properly. This usually occurs on FSA-VM model running on hardware with limited resources.

Select one of the following ratings:

  • Not Applied
  • Unknown
  • Clean
  • Malicious
  • Low Risk
  • Medium Risk
  • High Risk

Tracer Engine Timeout

Tracer Engine is not working properly. For example, the malware crashes the Windows VM or kills the Tracer Engine process. Thus, the tracer log is not available.

Select one of the following ratings:

  • Not Applied
  • Unknown
  • Clean
  • Malicious
  • Low Risk
  • Medium Risk
  • High Risk

Unextractable Encrypted Archive

The archive file is password protected and cannot be extracted with a predefined password list set in the Scan Policy and Object > General Settings page.

Select one of the following ratings:

  • Not Applied
  • Unknown
  • Clean
  • Malicious
  • Low Risk
  • Medium Risk
  • High Risk

URL whose return code is not 200

Block any URL sent to FortiSandbox which returns anything other than 200 OK. You can disable this option by selecting Not Applied.

Select one of the following ratings:

  • Not Applied
  • Unknown
  • Clean
  • Malicious
  • Low Risk
  • Medium Risk
  • High Risk
Previous
Next

Customized Rating

Use the Customized Rating page to set verdicts for the following cases: VM Timeout, Tracer Engine Timeout, Unextractable Encrypted Archive, and URL whose return code is not 200.

Note

By default, all customized ratings are set as Not Applied. For any other value, the customized rating is always take higher priority if it applies.

The following options can be configured:

VM Timeout

Windows VM cannot be launched properly. This usually occurs on FSA-VM model running on hardware with limited resources.

Select one of the following ratings:

  • Not Applied
  • Unknown
  • Clean
  • Malicious
  • Low Risk
  • Medium Risk
  • High Risk

Tracer Engine Timeout

Tracer Engine is not working properly. For example, the malware crashes the Windows VM or kills the Tracer Engine process. Thus, the tracer log is not available.

Select one of the following ratings:

  • Not Applied
  • Unknown
  • Clean
  • Malicious
  • Low Risk
  • Medium Risk
  • High Risk

Unextractable Encrypted Archive

The archive file is password protected and cannot be extracted with a predefined password list set in the Scan Policy and Object > General Settings page.

Select one of the following ratings:

  • Not Applied
  • Unknown
  • Clean
  • Malicious
  • Low Risk
  • Medium Risk
  • High Risk

URL whose return code is not 200

Block any URL sent to FortiSandbox which returns anything other than 200 OK. You can disable this option by selecting Not Applied.

Select one of the following ratings:

  • Not Applied
  • Unknown
  • Clean
  • Malicious
  • Low Risk
  • Medium Risk
  • High Risk
Previous
Next