Fortinet FortiSandbox 1000F - security appliance
Mfg # FSA-1000F
CDW # 5634504
Know your gear
Fortinet's top-rated FortiSandbox is at the core of the Advanced Threat Protection (ATP) solution that integrates with Fortinet's Security Fabric to address the rapidly evolving and more targeted threats across a broad digital attack surface. Specifically, it delivers real-time actionable intelligence through the automation of zero-day, advanced malware detection and mitigation.
Enhance your purchase
Fortinet FortiSandbox 1000F - security appliance is rated
4.30 out of
5 by
22.
Rated 5 out of
5 by
Mohamed -Adel from
A solution that helps to troubleshoot different software
What is our primary use case?
We use Fortinet FortiSandbox to troubleshoot different software.
What is most valuable?
Performance is a valuable feature.
What needs improvement?
The delivery feature in my country is extremely bad.
For how long have I used the solution?
I have been using Fortinet FortiSandbox for three months.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
It is a scalable solution.
How was the initial setup?
We have the support to set it up. It took a few months to deploy it. We integrate the solution and the support takes care of the solution after that. Almost three to four people are required for the maintenance.
What's my experience with pricing, setup cost, and licensing?
It is an expensive solution.
What other advice do I have?
I would rate the overall solution an eight out of ten.
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2023-08-21T00:00:00-04:00
Rated 5 out of
5 by
Marvin Reyes from
A stable solution that can be used to extract any file and check for malicious activity
What is our primary use case?
We use Fortinet FortiSandbox for malware. Fortinet FortiSandbox is used before entering the firewall to extract any file and check for malicious activity.
What is most valuable?
The solution extracts an attached file before reaching the user and notifies the user if there's something malicious in the attachment received along with an email. The solution prevents such malicious content from entering your enterprise network.
What needs improvement?
When you reach the maximum capacity, you cannot upgrade the solution because its hardware is very expensive. All you can do is discard it and buy another.
For how long have I used the solution?
I have been using Fortinet FortiSandbox for five years.
What do I think about the stability of the solution?
We didn't face any issues with the solution's stability for the three years it was installed on-premises at our data center.
How are customer service and support?
The solution’s technical support is good.
How was the initial setup?
The solution’s initial setup is straightforward.
What was our ROI?
We have seen a return on investment with Fortinet FortiSandbox because it helped us a lot on the security part.
What other advice do I have?
If you're using Fortinet, it's best to use the solution when using FortiGate antivirus because it's all connected and easy to manage.
Overall, I rate Fortinet FortiSandbox an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2023-11-16T00:00:00-05:00
Rated 5 out of
5 by
Soufiane Bouha from
Highly scalable and offers good support
What is our primary use case?
We use this solution to stay updated on the latest vulnerabilities and attacks. It acts as a database for Fortinet customers to keep their equipment safe and secure.
What needs improvement?
In future releases, I would like to see more automation capabilities.
For how long have I used the solution?
I have a little experience with this solution. We recently purchased new equipment to upgrade from the old range to the new range.
We previously used FortiGate 100D and upgraded to FortiGate 100S now.
What do I think about the stability of the solution?
It is a stable solution.
What do I think about the scalability of the solution?
FortiSandbox is scalable. We have more than 1200 users across branch offices and headquarters.
How are customer service and support?
Whenever we reach out to Fortinet, they give a response in time. Till now, we have had positive interactions.
We connect with FortiGate through qualified vendors, especially regarding SLA and responsiveness.
Which solution did I use previously and why did I switch?
I have experience with other solutions like Sophos and CheckPoint.
How was the initial setup?
What about the implementation team?
We have an IT department managing the solution. There are around 30 people in the team.
What's my experience with pricing, setup cost, and licensing?
FortiSandbox is a subscription that can be purchased from Fortinet directly. Only using FortiSandbox as features purchased as a subscription in the cloud.
We purchased the bundle. So, we got one price for the package. It was a unified package.
What other advice do I have?
Overall, I would rate the solution an eight out of ten.
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2023-11-02T00:00:00-04:00
Rated 5 out of
5 by
reviewer1026282 from
Reliable, good support, and simple to manage
What is our primary use case?
We use Fortinet FortiSandbox for threat protection and threat emulation.
What is most valuable?
The solution is easy to manage.
For how long have I used the solution?
I have been using Fortinet FortiSandbox for approximately one year.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
We have over 20 customers using this solution.
How are customer service and support?
The technical support is good.
How was the initial setup?
The initial setup is not too complex but could be easier.
What's my experience with pricing, setup cost, and licensing?
There is a license to use this solution.
What other advice do I have?
I rate Fortinet FortiSandbox a ten out of ten.
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2022-01-14T00:00:00-05:00
Rated 5 out of
5 by
Vinicius Borges from
A stable solution requiring an easy setup phase
What is our primary use case?
I have experience installing solutions with the sandbox, along with its functionality that is multifunctional. When some files are detected with viruses, they are placed in quarantine.
What is most valuable?
The solution puts the suspected file in quarantine, then analyzes if there is a risk by scanning it. If not, they remove it from the quarantine.
What needs improvement?
Improvement is needed considering that it could be a scenario where it is limited, especially it may be during those periods of time when they are not updated. In general, maybe they are not updated to cover other risks.
For how long have I used the solution?
I have experience with Fortinet FortiSandbox. My previous company had a partnership with Fortinet. In my current company, we don't have any partnerships with Fortinet. I work as an IT consultant.
What do I think about the stability of the solution?
The solution has the highest stability because a lot of clients have adopted Fortinet solutions with different variations. They didn't give me a report of its issues or problems. A lot of clients got Fortinet solutions without reporting any network or appliance availability problems, while it was different for other vendors. When implementing and designing Fortinet, around 80 percent of the solutions in Mexico were for Fortinet solutions.
I rate the solution's stability a nine out of ten.
What do I think about the scalability of the solution?
There is a specific list of Fortinet products you can select from, and they offer a variety of user functionalities and performance levels that can cover our approach. It is easy to increase or change to another appliance that can support the growth of any of the factors. Therefore, it is easy to change it or increase it.
How are customer service and support?
I rate the solution's service and support an eight out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
The solution is not complex as they are already included in Fortinet. There is a special solution for sandboxing, but it increases the level of security. In that version, you can get more from that solution and more efficiency in using sandboxing.
The initial setup is easy because I have been working with Juniper, and they have the same interface. The graphic interface is friendly and it is intuitive. For me, it is easy to configure.
What other advice do I have?
Overall, I rate the solution an eight out of ten.
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2023-06-27T00:00:00-04:00
Rated 5 out of
5 by
Hector Aaron Gonzalez from
A multi-functional solution that detects files packed with viruses and quarantines them
What is our primary use case?
Fortinet FortiSandbox is a multi-functional solution. When some files have been packed with viruses, the solution detects and quarantines them.
What is most valuable?
Fortinet FortiSandbox puts suspicious files in quarantine, analyzes for virus risks, and lets them out of quarantine if it detects no risk.
What needs improvement?
The solution could be limited in some scenarios. If updated, Fortinet FortiSandbox could cover other risks.
What do I think about the stability of the solution?
Fortinet FortiSandbox is a very stable solution. In my experience, it has the most stability that I have seen because a lot of clients got the solution and didn't report any problems with the network or the availability of the appliance. Fortinet FortiSandbox is different from other vendors. Percentage-wise, 80% got Fortinet FortiSandbox solutions in Mexico.
What do I think about the scalability of the solution?
There is a specific list of Fortinet products you can select from, and they have a range of user functionalities and performance. So it's easy to increase it or to change to another appliance that can support the growth of any of the factors I mentioned. So it's easy to change it or increase it.
How are customer service and support?
Fortinet FortiSandbox could provide better customer support.
How would you rate customer service and support?
Positive
How was the initial setup?
Fortinet FortiSandbox's initial setup is easy because its graphic interface is very friendly and in 3D. I have been working with Juniper, and they have the same interface. The solution is easy to configure.
What other advice do I have?
There is a special solution in Fortinet for sandboxing that increases the level of security. In that solution, you could get more efficiency in using sandboxing.
Overall, I rate Fortinet FortiSandbox an eight out of ten.
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2023-06-27T00:00:00-04:00
Rated 5 out of
5 by
Ryan Wong from
Good integration is quicker than other sandbox solutions and is stable
What is our primary use case?
The primary use case is to test our applications.
What is most valuable?
The UI is good.
Fortinet FortiSandbox is faster than other sandbox solutions.
Fortinet FortiSandbox integrates with other solutions.
What needs improvement?
I would like to have machine learning added to the solution in a future release.
For how long have I used the solution?
I have been using the solution for almost three years.
What do I think about the stability of the solution?
Fortinet FortiSandbox is stable.
What do I think about the scalability of the solution?
Fortinet FortiSandbox is scalable.
How are customer service and support?
The technical support is good.
Which solution did I use previously and why did I switch?
We previously used Check Point Sandblast.
How was the initial setup?
The initial setup is straightforward.
What about the implementation team?
The implementation was completed in-house with Fortinet support.
What's my experience with pricing, setup cost, and licensing?
The solution is affordable. There is an additional cost for a support license.
Which other solutions did I evaluate?
We evaluated Palo Alto.
What other advice do I have?
I give the solution an eight out of ten.
Compared to other sandbox solutions, Fortinet FortiSandbox is the most stable.
Which deployment model are you using for this solution?
On-premises
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2023-02-15T00:00:00-05:00
Rated 5 out of
5 by
Bruno Moreira from
It can analyze process behavior and integrate well with other solutions by the same vendor
What is our primary use case?
FortiSandbox is used to contain and prevent malware outbreaks.
How has it helped my organization?
One of my clients was receiving malware in their email. Less than 1 percent of their email contained malware, but it was still too many. FortiSandbox prevented the malware from entering the broader network. FortiMail forwarded the files to be analyzed in FortiSandbox, which ran it on a Windows 10 machine with Office 365. The sandbox detected malicious behavior. One of the files tried to change the Windows registry, so FortiSandbox flagged it as malware and reported it to FortiMail, which blocked the email.
What is most valuable?
FortiSandbox analyzes the behavior of processes in a sandbox environment, which is useful for threat hunting. The solution has an excellent standard configuration, and you can prioritize the types of files of VMs you want to analyze. It also integrates seamlessly with other Fortinet solutions, like FortiGate, FortiMail, and FortiEMS.
What needs improvement?
It should be easier to import custom virtual machines. Some of the VMs that are in FortiSandbox don't have the applications that we have in our environment. We need to import a VM with specific applications that we use in our environment. Have all the licenses because this is a real environment. You need a license for the Windows client you run on it. It's possible to import custom VMs, but it's a pain to do it. I would like a tool that simplifies the process.
For how long have I used the solution?
We have used FortiSandbox for three years.
What do I think about the stability of the solution?
FortiSandbox is pretty stable. I don't remember a time when it crashed. We've had to restart the VMs, but not the sandbox itself.
What do I think about the scalability of the solution?
There are limits to FortiSandbox because you must pay for a license for all the VMs you use.
How was the initial setup?
The setup is straightforward. Yeah. You only need to install the VM and configure the two interfaces. We use one FortiSandbox for external requests and another internally. Sometimes, the malware tries to access something on the Internet. you can block it on the sandbox or allow it, so you can gather more information about what it is trying to do.
But maybe you don't want the VM or the malware on the VM accessing the Internet from your environment. You need to configure that interface for that purpose. After that, you must authorize the FortiGate or the fabric devices on the FortiSandbox and create the VMs. If you are using the VMs Fortinet provides, you can download and provision them with one click. It will have the default configuration. The default policy may not work the way you intend, but it will protect out of the box.
What was our ROI?
We've seen a return by preventing outbreaks and stopping zero-day threats.
What's my experience with pricing, setup cost, and licensing?
FortiSandbox is pricey because we need to purchase three licenses, including one for the cloud and an on-prem license. We also have a sandbox that comes with a FortiGate UTM license, but you don't have access to the VMs. However, you can access the malware timeline from the cloud and see the information about the FortiSandbox services. Still, It doesn't block the threat immediately. If you are downloading malware, FortiGate will send it to the FortiGate cloud sandbox, but the download will finish, and you'll have malware in your host. As soon as the sandbox returns a verdict on that file, it will be blocked on the next download attempt if it's malware.
What other advice do I have?
I rate FortiSandbox 10 out of 10.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2023-06-04T00:00:00-04:00
Rated 5 out of
5 by
Karim Sabry from
Good product that detects non-signature-based malware
What is our primary use case?
It's used to detect non-signature-based malware.
What is most valuable?
The product is great. It can be deployed on the cloud or on-premises. There's a virtual machine and a hardware appliance available, so it's quite versatile.
What needs improvement?
In future releases, it would be better if it had support for Mac and Linux.
For how long have I used the solution?
We have been using this solution since its release.
What do I think about the stability of the solution?
It doesn't crash as often as other vendors' products. So, yeah, I think it's a good product.
How was the initial setup?
It was pretty basic, nothing too complex.
What's my experience with pricing, setup cost, and licensing?
It's not very expensive. I would rate it around a five or six, somewhere in the middle.
What other advice do I have?
I would advise you to connect FortiSandbox with all available Fortinet appliances, such as the Endpoint Protection Suite, FortiGate firewall, FortiMail, and FortiWeb, as well as any other Fortinet appliance they have. It's important to ensure that the deployment is connected to the Sandbox.
Overall, I would rate the solution an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclaimer: My company has a business relationship with this vendor other than being a customer:
Date published: 2023-05-19T00:00:00-04:00
Rated 5 out of
5 by
Sunate-Havichit from
It's a reasonably priced solution for dealing with unknown threats
What is our primary use case?
FortiSandbox is a tool we use to secure our client's data. We implement FortiSandbox depending on an organization's requirements.
What is most valuable?
FortiSandbox helps us handle unknown threats. Every vendor is competing for who can detect an unknown threat the fastest. Fortinet is competitive in the market.
What needs improvement?
Sometimes, there are issues upgrading the version of the firewall or the SD-LAN box. After we upgrade to the latest version of the software, we still have the same box. I think it's the same for every vendor.
For how long have I used the solution?
We have used Fortinet for around one year.
What do I think about the stability of the solution?
FortiSandbox is stable.
What do I think about the scalability of the solution?
FortiSandbox is scalable.
How are customer service and support?
I rate Fortinet support eight out of 10.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We use different solutions depending on the client's requirements. Sometimes we implement Palo Alto. We need to discuss it with the client and select the product that's appropriate for their use case and environment.
How was the initial setup?
Setting up FortiSandbox is easy and takes about three weeks. You need to collect the asset management information and requirements to integrate FortiSandbox.
What's my experience with pricing, setup cost, and licensing?
I rate FortiSandbox eight out of 10 for affordability. It's competitive and reasonable.
What other advice do I have?
I rate Fortinet FortiSandbox eight out of 10.
Which deployment model are you using for this solution?
On-premises
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2023-01-24T00:00:00-05:00
Rated 5 out of
5 by
AANKITGUPTAA from
Effective threat protection, excellent support, and well integrated
What is our primary use case?
Fortinet FortiSandbox is a security-centric solution of Fortinet. The solution inspects all the predicted or suspicious files which are executed in the Fortinet FortiSandbox environment. It contains virtual machines of different types, such as Windows Server, and Windows Ubuntu. If the suspicious files are executed and there is an issue found. The user can request to discard it when the file is delivered to their system.
How has it helped my organization?
The solutions have extended our security posture which has helped the organization.
What is most valuable?
Fortinet FortiSandbox's most valuable feature is the security it provides against threats, such as ransomware. Additionally, it integrates well with APIs.
For how long have I used the solution?
Fortinet FortiSandbox for approximately three years.
What do I think about the scalability of the solution?
Fortinet FortiSandbox is scalable but you have to purchase additional licenses.
Fortinet FortiSandbox is a network-based appliance and we have approximately 2,000 users being protected.
We do not plan to increase the usage of the solution because we are at capacity.
How are customer service and support?
I rate the support from Fortinet FortiSandbox a five out of five.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have not used another similar solution previously.
How was the initial setup?
The initial setup of Fortinet FortiSandbox is complex. You cannot only deploy Fortinet FortiSandbox without deploying the stack of Fortinet solutions. The implementation and integration are challenging tasks with the device and placement in the network. We needed to do POC and offloading testing.
What was our ROI?
This is a cyber security solution, it has a very good ROI in terms of maintaining the reputation and user safety in cybersecurity.
What's my experience with pricing, setup cost, and licensing?
The price of Fortinet FortiSandbox is not expensive.
Which other solutions did I evaluate?
I did not evaluate other options.
What other advice do I have?
The solution requires one security engineer with operational knowledge of the solution. However, they are not needed for a day to day activities, but for all the tuning, performance, and monitoring, one LC administrator is required.
I would recommend this solution to others. It is helpful for monitoring and protecting users from different kinds of attacks. I advise others to use the on-premise or cloud version.
I rate Fortinet FortiSandbox a ten out of ten.
Which deployment model are you using for this solution?
On-premises
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2022-10-14T00:00:00-04:00
Rated 5 out of
5 by
HossamSelim from
Beneficial analysis options, scalable, and plenty of interfaces
What is our primary use case?
Fortinet FortiSandbox is used for threat protection. For example, in emails and the internet.
What is most valuable?
The most valuable features of Fortinet FortiSandbox are the analysis options, artificial intelligence, and the many interfaces it provides.
What needs improvement?
Fortinet FortiSandbox can improve by decreasing the time of analysis response. Other solutions have a better response time, such as WildFire.
For how long have I used the solution?
I have been using Fortinet FortiSandbox for approximately one year.
What do I think about the stability of the solution?
I rate the stability of Fortinet FortiSandbox a four out of five.
What do I think about the scalability of the solution?
I rate the scalability of Fortinet FortiSandbox a four out of five.
How are customer service and support?
I rate the support of Fortinet FortiSandbox a four out of five.
How would you rate customer service and support?
Positive
What other advice do I have?
I rate Fortinet FortiSandbox a nine out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclaimer: My company has a business relationship with this vendor other than being a customer:Partner
Date published: 2022-09-25T00:00:00-04:00
Rated 5 out of
5 by
Janusz Bialowas from
Good for monitoring and security with helpful support
What is our primary use case?
Every day, we connect to Fortinet Administrative Center and Sandbox to view emails. It's great for monitoring and reporting.
What is most valuable?
The firmware is very good.
I like the services and features on offer.
Technical support is okay.
FortiGate is very easy in terms of configuration. The Web GUI is very simple and the Command Line is okay. The GUI makes administration tasks straightforward.
The solution is stable.
You can scale the solution easily.
What needs improvement?
While support is okay, it can always be slightly improved.
It can be difficult if you need to use the Command Line Interface (CLI). It's much easier if you only have to deal with the GUI.
The solution has all of the features we need.
For how long have I used the solution?
I've been using the solution for two years.
What do I think about the stability of the solution?
The product is stable. FortiGate firmware and the Sandbox are stable. We do not have problems. Even when you update, it's very reliable. There are no bigs or glitches.
What do I think about the scalability of the solution?
It is a scalable product.
How are customer service and support?
Support has been mostly helpful.
I have a contact from Fortinet support and my contact is very nice. I use it three to five times a year and they've mostly;y been able to support me and answer my questions.
We do pay for support and they do provide us with help and with patches, et cetera, to help with firmware and updates and any security items.
Which solution did I use previously and why did I switch?
I have used Stormshield in the past. That was a long time ago. We now only use Fortinet for security. Fortinet, in comparison, is easy to configure. Stormshield is also a smaller solution than Fortinet. It's technically more affordable, s Fortinet is more expensive, however, Fortinet is a bigger more technical option.
How was the initial setup?
Setting it up and configuring it is very easy.
It's easy to configure from Sandbox as configuration from the policy is very easy.
I don't have much information in terms of maintenance tasks and what might be needed to maintain the product.
What's my experience with pricing, setup cost, and licensing?
We have a one-year license for the product. You can renew it yearly.
What other advice do I have?
I'm very satisfied with this product.
We are using the latest version of the solution.
We have 500 people in the organization.
I'd recommend the solution to others. It's great, working from the cloud and the security is good.
I would rate the solution ten out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Other
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2022-08-14T00:00:00-04:00
Rated 5 out of
5 by
Ahmed Konsowa from
Useful customization, integrates well, but performance could improve
What is our primary use case?
I am using Fortinet FortiSandbox for security in the Fortinet fabric.
What is most valuable?
The most valuable features of Fortinet FortiSandbox are customization, ICAP protocol, and integration with other vendors. Additionally, the security work very well.
What needs improvement?
Fortinet FortiSandbox should improve its performance and security accuracy to keep competitive with other solutions, such as IBM.
For how long have I used the solution?
I have been using Fortinet FortiSandbox for approximately six years.
What do I think about the stability of the solution?
Fortinet FortiSandbox is a stable solution.
What do I think about the scalability of the solution?
The scalability of Fortinet FortiSandbox is good.
How are customer service and support?
The support could improve their knowledge because they acquired other solutions and have yet to gain the knowledge to support them.
How was the initial setup?
The initial setup of Fortinet FortiSandbox was easy. It can take a few days to complete.
What about the implementation team?
The maintenance of Fortinet FortiSandbox is done by two IT managers.
What's my experience with pricing, setup cost, and licensing?
The license for Fortinet FortiSandbox depends on the use case.
Which other solutions did I evaluate?
We evaluated other options before choosing Fortinet FortiSandbox.
What other advice do I have?
I would recommend this solution to others.
I rate Fortinet FortiSandbox a seven out of ten.
Which deployment model are you using for this solution?
On-premises
Disclaimer: My company has a business relationship with this vendor other than being a customer:Integrator
Date published: 2022-08-07T00:00:00-04:00
Rated 5 out of
5 by
Kiarash Heydari from
Light and powerful solution design; useful to have
What is our primary use case?
Our primary use case for Fortinet FortiSandbox is preventing malicious code and getting alerts for blocking malicious code and other things.
What is most valuable?
The most valuable features for me when it comes to Fortinet FortiSandbox are the integrity of the Sandbox and the power of the analyzing tool of the solution. I can also say that the design of this appliance is quite light and powerful.
What needs improvement?
The area I would like this solution to be improved in is the integrations for Sandbox with AI and big data ML mechanisms. I think this would be a practical improvement.
I would also like to see improvements in the solution's stability and the pricing plan.
For how long have I used the solution?
I have been using Fortinet FortiSandbox for about three years.
What do I think about the stability of the solution?
My impression of the stability of this solution is that it's quite good considering that it's a simple solution. I would rate it an eight, on a scale from one to 10, with one being the worst and 10 being the best.
What do I think about the scalability of the solution?
The scalability of this solution is difficult to comment on as how much it can scale largely depends on your hardware.
How was the initial setup?
My impression is that the initial setup process is quite straightforward. If you know what you're using it for, the initial setup can be quite easy and the solution is not that hard to use.
When it comes to the steps taken for the implementation, you would select the OS you're using and when the files are sent to the appliance you check, and in the appliance configuration, it must be like the visual governance environment. You must set up the OS you have so that appliance can scan or analyze your file. To maintain this solution, you must always have at least one all-around person tuning this solution.
What was our ROI?
I would say that we have seen a return on our investment.
What's my experience with pricing, setup cost, and licensing?
My opinion is that this solution has a high price point.
What other advice do I have?
I would recommend this solution to other people as it's a useful solution to have, especially because of the signature antivirus-based features.
I would rate this solution a nine, on a scale from one to 10, with one being the worst and 10 being the best.
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2023-04-01T00:00:00-04:00
Rated 5 out of
5 by
reviewer1740486 from
Effective behavior analysis, useful manual scan, and overall comprehensive features
What is our primary use case?
We are using Fortinet FortiSandbox to inspect and scan all our files. All the files inside our organization that is transferred through the company. The solution scans the files inside the PSVM because it has many VMs inside the FortiScan. It's working on zero-day attacks and not based on the signature of the threat. It's based on behavior analysis.
What is most valuable?
The dynamic behavior analysis is excellent. We have many attacks caught by the FortiSandbox as zero-day attacks. Additionally, the administration is simple and can be customized to fit your companies needs.
Fortinet FortiSandbox has manual scan features. We have other sandboxes solutions from other vendors but they don't have this feature. It allows you to interpret or intervene in the scan whatever you want. It is a SOC analyzer, and it is called Manual Scan or something similar. Comparing this feature to other vendors, it's very good.
What needs improvement?
The reporting tools could be improved in Fortinet FortiSandbox.
For how long have I used the solution?
I have been using Fortinet FortiSandbox for approximately six years.
What do I think about the stability of the solution?
The stability of the solution is good.
What do I think about the scalability of the solution?
We have not tried to scale the solution, it has been working fine for what we have been using it for at this time.
We have approximately 50 devices and 1,000 to 2,000 files being scanned daily.
We use the solution extensively.
Which solution did I use previously and why did I switch?
We use similar sandbox solutions from Forcepoint and Palo Alto.
How was the initial setup?
The installation of Fortinet FortiSandbox is very easy.
What about the implementation team?
We did the implementation ourselves.
What's my experience with pricing, setup cost, and licensing?
We are on an annual license to use the solution. We have an additional feature that is integrated with S5, which is working well.
What other advice do I have?
I would recommend Fortinet FortiSandbox to others, it is the most comprehensive sandbox available.
I rate Fortinet FortiSandbox an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2022-01-08T00:00:00-05:00
Rated 5 out of
5 by
reviewer1754949 from
Works fine and has a reasonable price, but it would be good to have more dashboards
What is most valuable?
Overall, it works fine. Its interface is also fine.
What needs improvement?
If we can have more dashboards, it would be good.
For how long have I used the solution?
We have FortiSandbox and Fortinet firewalls. I have been using these solutions for three to four years.
What do I think about the stability of the solution?
It is stable.
What do I think about the scalability of the solution?
Scalability will always be there. Currently, I am the only user.
How are customer service and support?
Their support is good.
How was the initial setup?
Its setup is not that complex.
What about the implementation team?
It was done by a vendor.
What's my experience with pricing, setup cost, and licensing?
Fortinet is more reasonable than Palo Alto.
What other advice do I have?
I would recommend this solution. Others can use it, and there is no harm in that. I haven't used another Sandbox, so I cannot compare it with something else.
I would rate it a seven out of 10.
Which deployment model are you using for this solution?
On-premises
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2022-02-03T00:00:00-05:00
Rated 5 out of
5 by
reviewer1325754 from
Easy to configure and implement because of templates and has a competitive price, but there could be a higher number of VMs
What is our primary use case?
I provide this solution in the FortiGate firewall as a cloud license. I'm in presales and I qualify the solution, so I don't install it or deploy it. I worked with Sandbox for one project two years ago, especially with FortiGate 200E. I worked with the customer and prepared the solution according to their needs, and we decided on the architecture and design to deploy this solution.
We put the firewall in the front end design and we configured it so that every file will be downloaded through the HTTP, or HTTPS, and the file will be scanned and analyzed with the antivirus of FortiClient. This is checked with the signature of this antivirus. If it's not okay, we will configure it to be scanned and analyzed with Sandbox.
There, we will configure, for example, a virtual machine for in the cloud that contains Windows Server or Windows Desktop, the version that the customer already has. We deploy some services like Active Directory, or the service that the customer uses. We try to send this file to the virtual cloud. Then we check it. If the file attains a certain score, we will block it. If not, we can make an event quarantine. We configure our event in the firewall or in the switch that connects in this firewall, and we will put it in quarantine until that administrator checks this file and where or not it contains malware or not.
In general, we purchase the license and we configure it in the front end firewall, not in the internal or data center firewall. This is especially for downloading the files that we can receive.
For the firewall, we were using the version FortiOS 7.0. The first version that we deployed was the 6.5 version. That includes this cloud license.
The firewall is on-premise, but the license for FortiSandbox is on the cloud.
There are 10 people using this solution in my company.
How has it helped my organization?
The price has been a benefit to our organization. Fortinet has given us a very interesting financial offer compared to others. For example, if we compared it with Palo Alto, they have a specific license for sandbox but call it WildFire, and it's very expensive. In comparison with the Fortinet, the license is included in a bundle that includes antivirus and URL file filtering. This is for an SMB, small and medium businesses. It's competitive in terms of the price.
What is most valuable?
Compared to other solutions, it's easy to configure and implement because of the templates. The timing of scanning files is faster.
What needs improvement?
There could be more templates and a higher number of simulated VMs to configure more use cases. Sometimes we need to configure many use cases in many different environments, and if the number of VMs that we configure is limited, we have to remove some and reconfigure the environment if we need another environment. It's better to have more use cases and more simulated environments that we can configure.
For how long have I used the solution?
I have been using this solution for two years.
What do I think about the stability of the solution?
The solution is stable. The performance is okay because Fortinet is based on FortiADC, and they have the capability to have a higher performance than others.
I do not use the solution daily. It depends on the project. At the moment, we don't have plans to increase usage.
What do I think about the scalability of the solution?
With the cloud license, the scalability is okay, but it depends on the firewall type. For a smaller business, I think they are limited with the number of files. It depends on the number of firewalls.
For the on-prem solution, it certainly depends. I think there are problems with the scalability. If you need to extend or add more sizing, that means more files per day. We have to change the kind of appliance. This is a problem for that. But if it was on a VM solution, maybe it wouldn't be a problem for scalability.
How are customer service and support?
Technical support is good.
Which solution did I use previously and why did I switch?
We have used other solutions previously. It depends on the needs of our customers and the budget.
Concerning security, Trend Micro is better in comparison.
How was the initial setup?
Initial setup is complex. The length it takes to deploy the solution just depends. We also need to have a tuning phase to collect more information for the environment and how to configure it. If we already have the template, we can easily configure it in two days. But after that, we have to make a learning phase or tuning phase to see how the solution responds and what the results are, and then we can optimize the configuration. The timing depends on the context.
For maintenance, patching, and updating, we need maybe two people.
What's my experience with pricing, setup cost, and licensing?
The price is competitive.
What other advice do I have?
I would rate this solution 7 out of 10.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclaimer: My company has a business relationship with this vendor other than being a customer:Partner
Date published: 2022-03-01T00:00:00-05:00
Rated 5 out of
5 by
Mostafa Nawar from
Scalable, simple setup, but customization could improve
What is our primary use case?
We use Fortinet FortiSandbox to integrate FortiMail and FortiGate firewalls.
What needs improvement?
The use cases in Fortinet FortiSandbox are not good. It is difficult to upload a custom VM for Fortinet FortiSandbox. The integration of Fortinet FortiSandbox with other Fortinet or FortiGate firewalls is not good. VMs are already installed in the hardware and are working fine, but we tried to approve the custom VM many times but did not succeed.
Fortinet FortiSandbox is complex in uploading the custom VM. Fortinet FortiSandbox needs to improve the customization and the custom framework updates.
For how long have I used the solution?
I have been using Fortinet FortiSandbox for approximately two years.
What do I think about the stability of the solution?
Fortinet FortiSandbox stability could improve.
What do I think about the scalability of the solution?
Fortinet FortiSandbox is scalable.
We have approximately 300 users using this solution. We plan to increase usage of Fortinet FortiSandbox. We are moving to the next version soon.
How are customer service and support?
The technical support of Fortinet FortiSandbox is good.
How was the initial setup?
The initial setup of Fortinet FortiSandbox is easy, it took us a few days to do.
What about the implementation team?
We used a third party to do the implementation of Fortinet FortiSandbox.
We have three engineers that are looking after the maintenance and are supporting the solution.
What's my experience with pricing, setup cost, and licensing?
The price of Fortinet FortiSandbox is expensive.
What other advice do I have?
Fortinet FortiSandbox is a leader in the market and they have good solutions.
I rate Fortinet FortiSandbox a seven out of ten.
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2022-04-04T00:00:00-04:00
Rated 5 out of
5 by
Reviewer7009881 from
An easy-to-install tool that helps its users detect and prevent unknown threats
What is our primary use case?
My company uses Fortinet FortiSandbox to integrate with the email system named FortiMail. Fortinet FortiSandbox also helps with the integration of network infrastructure, allowing our company to extract some objects from the network and analyze them.
How has it helped my organization?
The main benefit of Fortinet FortiSandbox is that it allows organizations to detect and prevent unknown threats from entering an infrastructure.
What is most valuable?
The most valuable feature of Fortinet FortiSandbox is its ability to be integrated with email infrastructure, like FortiMail, with a blocking mode option, which means that FortiSandbox not only allows the detection of some malicious objects in emails but also helps block them to prevent end users from receiving from malicious emails.
What needs improvement?
The main area of concern in Fortinet FortiSandbox is its detection capabilities. I have seen some cases where the solution doesn't provide any clue of threats or malicious objects to its users. When FortiSandbox was not able to detect some malicious objects, Fortinet's competitors were able to do that. The aforementioned area can be considered for improvement.
For how long have I used the solution?
I have been using Fortinet FortiSandbox for three to four years. I am an end user of the solution.
What do I think about the stability of the solution?
It is a pretty stable solution. Stability-wise, I rate the solution an eight to nine out of ten.
What do I think about the scalability of the solution?
It is a scalable solution. From my experience, I can say that the solution's embedded functionality was enough to cover all use cases in the past involving different environments.
Scalability-wise, I rate the solution an eight out of ten.
How are customer service and support?
I have contacted Fortinet's technical support and found them to be pretty responsive and fast. I rate the technical support a nine out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Kaspersky, FireEye, and Trend Micro were the solutions I used in the past. Kaspersky, FireEye, and Trend Micro were the solutions I used in the past. I cannot compare the solutions I have used in the past with Fortinet FortiSandbox and comment on which one was the best solution I used since the use of each solution depends on the use cases and Infrastructures. The main advantage of Fortinet FortiSandbox is that it is a part of Fortinet Security Fabric, meaning Fortinet has its own security framework. It is really easy to deploy FortiSandbox and integrate with other Fortinet solutions. Suppose your company has a Fortinet stack or technologies across your network or infrastructure for endpoint protection or network protection. I think Fortinet FortiSandbox would be the easiest choice. I cannot say that Fortinet FortiSandbox is better than Kaspersky, FireEye, or Trend Micro.
How was the initial setup?
The initial setup phase of Fortinet FortiSandbox was pretty straightforward because, in my case, I worked with the physical appliances. According to the documentation, the setup phase for virtual appliances would be exactly the same as for physical appliances. You just deploy the box and then configure it, after which you create some integrations with FortiMail and other systems, which may take less than an hour.
The solution is deployed on an on-premises model.
The solution can be deployed in an hour or even less in the easiest scenarios. In the not-so-easy scenarios, the deployment phase for the solution may take a day or two. Some of my company's customers want to integrate Fortinet FortiSandbox with FortiMail and other tools, so it involves multiple integration points. The purpose of integrating Fortinet FortiSandbox with other tools may be to simultaneously monitor network or email traffic and use some customized images for virtual machines, which does take time. There is a need to perform fine-tuning in the solution to set up detection capabilities and some mechanisms.
What about the implementation team?
I take care of the solution's installation phase in my company. For the solution's installation phase in my company, I sought the help of my colleagues from the IT department to manage the integration of Fortinet FortiSandbox with our company's email system since certain settings are to be done not only in FortiCentral but also in FortiMail and network layers. In most scenarios, you are not able to do it by yourself because you don't have proper access to a particular system.
What was our ROI?
It is a problem task to prove the ROI of any security solution. I saw several cases where FortiSandbox was able to detect some zero-day ransomware attacks at a time when there were no solutions, like FortiSandbox, making it easy for the ransomware attack to be successful. Dealing with a successful ransomware attack would cost a lot of money.
What's my experience with pricing, setup cost, and licensing?
Though I don't know the exact numbers related to pricing, the solution is priced adequately or fairly.
I rate the product's pricing a five or six on a scale of one to ten, where one is low, and ten is high.
Though the solution comes with embedded licenses, there is always a problem for all the vendors when it comes to the virtual machines from Windows. Since Fortinet provides for the additional licenses, there is no need to buy any additional licenses.
What other advice do I have?
If a company has some Fortinet equipment in its environment already, then Fortinet FortiSandbox would be the best choice for them. If a company wants to go for the deployment of some other solution for all their infrastructures, then it would be good to analyze the integration and detection capabilities.
I rate the overall solution a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2023-09-18T00:00:00-04:00
Rated 5 out of
5 by
Vishnu Gollapudi from
A scalable tool to detect malware that offers its users good performance and security
What is our primary use case?
I use Fortinet FortiSandbox to detect malware in the system, especially when uploading or downloading files from the internet.
What is most valuable?
The most valuable feature of the solution is that the performance it offers to users is good, making it useful for us in our company. Fortinet FortiSandbox is more like a SASE solution.
What needs improvement?
The solution is unavailable at a lower cost and can be difficult to deploy. From an improvement perspective, I would like the solution to be made available to users at a cheaper price while making its deployment phase easier.
For how long have I used the solution?
I have experience with Fortinet FortiSandbox.
What do I think about the stability of the solution?
It is a stable solution. I can't rate the solution's stability since I am unaware of it.
What do I think about the scalability of the solution?
It is a scalable solution.
Around 500 people in my institution use the solution.
Which solution did I use previously and why did I switch?
I have some previous experience with Check Point and NetScaler.
How was the initial setup?
The initial setup of Fortinet FortiSandbox is straightforward.
The solution can be deployed on either a cloud or on-premises.
What other advice do I have?
Though I haven't worked with Fortinet FortiSandbox, it is a good solution based on the opinion of one of my colleagues who has worked with it. Fortinet FortiSandbox can be deployed on a cloud or on-premises.
I recommend the solution to those who plan to use it. Fortinet FortiSandbox is a good security option for those who plan to use it.
The overall solution is an eight to nine out of ten.
Disclaimer: I am a real user, and this review is based on my own experience and opinions.
Date published: 2023-09-26T00:00:00-04:00
Rated 5 out of
5 by
ImranShaikh from
An easy-to-maintain tool with a satisfactory support team
What is most valuable?
The most valuable features of the product include components like CDR, greylisting, sandboxing, attachment detection in sandboxing, DLP fingerprinting, and the redirect option.
What needs improvement?
For the MSSPs, it would be great if the product could display all the threat chains on a dashboard since it is an area where the tool is currently lacking.
For how long have I used the solution?
I have been using Fortinet FortiSandbox for around two years. My company has a partnership with Fortinet. My company also operates as an MSP for Fortinet.
What do I think about the stability of the solution?
It is a stable solution with no issues at all. The product is scalable and stable since it is compatible with cloud solutions like AWS and Azure. The product can be deployed on the cloud services offered by Amazon AWS or Microsoft Azure.
What do I think about the scalability of the solution?
It is an easily scalable solution.
My company caters to the needs of small, medium, and large-sized businesses where the solution is used.
How are customer service and support?
The solution's technical support is satisfactory. I rate the technical support a seven to eight out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I have worked with other solutions in the past.
How was the initial setup?
The product is easy to deploy.
The product can be deployed in 15 days.
Two or three people from our company are involved in the deployment, implementation, and configuration process.
What was our ROI?
Fortinet FortiSandbox saves a lot of money for its users since if an attack happens in your environment, the loss is infinite, especially in terms of the brand value and laws of data. In terms of ROI, the tools safeguard the data and brand value of the company. The percentage of the ROI can vary from company to company. If the product prevents an attack on a small or medium-sized business, then the ROI part will have a different implication in terms of numbers. If the product prevents an attack on an enterprise-sized company, the ROI part will have a different implication in terms of numbers.
What's my experience with pricing, setup cost, and licensing?
Fortinet FortiSandbox is a nominally priced product, so I would not say that it is a very cheap tool. It is one of the best solutions in the market with a competitive pricing model, similar to the prices offered by products from Cisco.
What other advice do I have?
I would describe Fortinet FortiSandbox, which has been deployed within our company's network for threat detection, as a proactive solution with multiple functionalities. A few of the functionalities of the product include areas like sandboxing, CDR, pattern-reading, and detection ratio, which are very good.
I rate the product's effectiveness in dealing with zero-day threats a seven to eight out of ten, where ten means it is the most effective product for dealing with zero-day threats.
As of now, Fortinet FortiSandbox is not integrated with other Fortinet solutions to improve our company's security posture. The tool is integrated with our own existing email security gateway to use anti-spam and anti-virus features.
The tool should have more ability to customize from the reporting point of view. The tool should be able to provide more slicing and dicing in data. The users of the product should try to know about threat chains t with the help of the tool's MSPs so that they know the outcome of a threat that may enter their networks. In the MSP model, it would be good if the aforementioned area gets integrated.
The reporting and alerting capabilities of the product have helped our company's security area since the tool provides good and deep-dive reports, which include proper reasoning for certain actions that were taken. The report will explain why it blocked or did not block certain aspects. There are detailed reports in terms of the logs that the tool provides its users. The tools also provide details on the areas that were quarantined. In general, the tool provides a very detailed report.
The product is easy to maintain since my company gets proper support from Fortinet.
In my company, there are many use cases to describe scenarios where the product prevented or mitigated a breach or an attack. My company operates as a managed service provider for Fortinet, and many of our customers use Fortinet FortiSandbox. When my company receives any attacks via links or attachments, FortiMail blocks such emails.
I suggest others consider whether they plan to buy a solution from a security company. I will see whether the tool I use for sandboxing is from a security company or not. I will consider the catch rate of the product. I will also consider the other solutions that the vendor can bring in for me that can improve and secure my company's security posture while being easy to use and implement.
I will consider whether the vendor who offers our company sandboxing features has a security background. I will look into whether the solution is interoperable or not. There should be interoperability if I need to deploy some other solution as well, like a DLP or a firewall.
I rate the overall tool a seven out of ten.
Disclaimer: My company has a business relationship with this vendor other than being a customer:MSP
Date published: 2024-02-12T00:00:00-05:00