I have experience installing solutions with the sandbox, along with its functionality that is multifunctional. When some files are detected with viruses, they are placed in quarantine.
Fortinet FortiSandbox Zero-Day Threat Protection (On-Demand)
Fortinet Inc. | 5.0.2u1Linux/Unix, Other 5.0.2 - 64-bit Amazon Machine Image (AMI)
External reviews
External reviews are not included in the AWS star rating for the product.
A stable solution requiring an easy setup phase
What is our primary use case?
What is most valuable?
The solution puts the suspected file in quarantine, then analyzes if there is a risk by scanning it. If not, they remove it from the quarantine.
What needs improvement?
Improvement is needed considering that it could be a scenario where it is limited, especially it may be during those periods of time when they are not updated. In general, maybe they are not updated to cover other risks.
For how long have I used the solution?
I have experience with Fortinet FortiSandbox. My previous company had a partnership with Fortinet. In my current company, we don't have any partnerships with Fortinet. I work as an IT consultant.
What do I think about the stability of the solution?
The solution has the highest stability because a lot of clients have adopted Fortinet solutions with different variations. They didn't give me a report of its issues or problems. A lot of clients got Fortinet solutions without reporting any network or appliance availability problems, while it was different for other vendors. When implementing and designing Fortinet, around 80 percent of the solutions in Mexico were for Fortinet solutions.
I rate the solution's stability a nine out of ten.
What do I think about the scalability of the solution?
There is a specific list of Fortinet products you can select from, and they offer a variety of user functionalities and performance levels that can cover our approach. It is easy to increase or change to another appliance that can support the growth of any of the factors. Therefore, it is easy to change it or increase it.
How are customer service and support?
I rate the solution's service and support an eight out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
The solution is not complex as they are already included in Fortinet. There is a special solution for sandboxing, but it increases the level of security. In that version, you can get more from that solution and more efficiency in using sandboxing.
The initial setup is easy because I have been working with Juniper, and they have the same interface. The graphic interface is friendly and it is intuitive. For me, it is easy to configure.
What other advice do I have?
Overall, I rate the solution an eight out of ten.
A multi-functional solution that detects files packed with viruses and quarantines them
What is our primary use case?
Fortinet FortiSandbox is a multi-functional solution. When some files have been packed with viruses, the solution detects and quarantines them.
What is most valuable?
Fortinet FortiSandbox puts suspicious files in quarantine, analyzes for virus risks, and lets them out of quarantine if it detects no risk.
What needs improvement?
The solution could be limited in some scenarios. If updated, Fortinet FortiSandbox could cover other risks.
What do I think about the stability of the solution?
Fortinet FortiSandbox is a very stable solution. In my experience, it has the most stability that I have seen because a lot of clients got the solution and didn't report any problems with the network or the availability of the appliance. Fortinet FortiSandbox is different from other vendors. Percentage-wise, 80% got Fortinet FortiSandbox solutions in Mexico.
What do I think about the scalability of the solution?
There is a specific list of Fortinet products you can select from, and they have a range of user functionalities and performance. So it's easy to increase it or to change to another appliance that can support the growth of any of the factors I mentioned. So it's easy to change it or increase it.
How are customer service and support?
Fortinet FortiSandbox could provide better customer support.
How would you rate customer service and support?
Positive
How was the initial setup?
Fortinet FortiSandbox's initial setup is easy because its graphic interface is very friendly and in 3D. I have been working with Juniper, and they have the same interface. The solution is easy to configure.
What other advice do I have?
There is a special solution in Fortinet for sandboxing that increases the level of security. In that solution, you could get more efficiency in using sandboxing.
Overall, I rate Fortinet FortiSandbox an eight out of ten.
High Level Security with FortiSandbox
It can analyze process behavior and integrate well with other solutions by the same vendor
What is our primary use case?
FortiSandbox is used to contain and prevent malware outbreaks.
How has it helped my organization?
One of my clients was receiving malware in their email. Less than 1 percent of their email contained malware, but it was still too many. FortiSandbox prevented the malware from entering the broader network. FortiMail forwarded the files to be analyzed in FortiSandbox, which ran it on a Windows 10 machine with Office 365. The sandbox detected malicious behavior. One of the files tried to change the Windows registry, so FortiSandbox flagged it as malware and reported it to FortiMail, which blocked the email.
What is most valuable?
FortiSandbox analyzes the behavior of processes in a sandbox environment, which is useful for threat hunting. The solution has an excellent standard configuration, and you can prioritize the types of files of VMs you want to analyze. It also integrates seamlessly with other Fortinet solutions, like FortiGate, FortiMail, and FortiEMS.
What needs improvement?
It should be easier to import custom virtual machines. Some of the VMs that are in FortiSandbox don't have the applications that we have in our environment. We need to import a VM with specific applications that we use in our environment. Have all the licenses because this is a real environment. You need a license for the Windows client you run on it. It's possible to import custom VMs, but it's a pain to do it. I would like a tool that simplifies the process.
For how long have I used the solution?
We have used FortiSandbox for three years.
What do I think about the stability of the solution?
FortiSandbox is pretty stable. I don't remember a time when it crashed. We've had to restart the VMs, but not the sandbox itself.
What do I think about the scalability of the solution?
There are limits to FortiSandbox because you must pay for a license for all the VMs you use.
How was the initial setup?
The setup is straightforward. Yeah. You only need to install the VM and configure the two interfaces. We use one FortiSandbox for external requests and another internally. Sometimes, the malware tries to access something on the Internet. you can block it on the sandbox or allow it, so you can gather more information about what it is trying to do.
But maybe you don't want the VM or the malware on the VM accessing the Internet from your environment. You need to configure that interface for that purpose. After that, you must authorize the FortiGate or the fabric devices on the FortiSandbox and create the VMs. If you are using the VMs Fortinet provides, you can download and provision them with one click. It will have the default configuration. The default policy may not work the way you intend, but it will protect out of the box.
What was our ROI?
We've seen a return by preventing outbreaks and stopping zero-day threats.
What's my experience with pricing, setup cost, and licensing?
FortiSandbox is pricey because we need to purchase three licenses, including one for the cloud and an on-prem license. We also have a sandbox that comes with a FortiGate UTM license, but you don't have access to the VMs. However, you can access the malware timeline from the cloud and see the information about the FortiSandbox services. Still, It doesn't block the threat immediately. If you are downloading malware, FortiGate will send it to the FortiGate cloud sandbox, but the download will finish, and you'll have malware in your host. As soon as the sandbox returns a verdict on that file, it will be blocked on the next download attempt if it's malware.
What other advice do I have?
I rate FortiSandbox 10 out of 10.
Which deployment model are you using for this solution?
Good product that detects non-signature-based malware
What is our primary use case?
It's used to detect non-signature-based malware.
What is most valuable?
The product is great. It can be deployed on the cloud or on-premises. There's a virtual machine and a hardware appliance available, so it's quite versatile.
What needs improvement?
In future releases, it would be better if it had support for Mac and Linux.
For how long have I used the solution?
We have been using this solution since its release.
What do I think about the stability of the solution?
It doesn't crash as often as other vendors' products. So, yeah, I think it's a good product.
How was the initial setup?
It was pretty basic, nothing too complex.
What's my experience with pricing, setup cost, and licensing?
It's not very expensive. I would rate it around a five or six, somewhere in the middle.
What other advice do I have?
I would advise you to connect FortiSandbox with all available Fortinet appliances, such as the Endpoint Protection Suite, FortiGate firewall, FortiMail, and FortiWeb, as well as any other Fortinet appliance they have. It's important to ensure that the deployment is connected to the Sandbox.
Overall, I would rate the solution an eight out of ten.
Which deployment model are you using for this solution?
Awesome high end cybersecurity tool
The good thing about the box is gui interface,
Really good and used for most of my day2day works.
Like the way, it helped during upgradation and other stuff.