Skip to main content
New Member
June 4, 2026
Question

Forti Sandbox - Network Share Schedule

  • June 4, 2026
  • 3 replies
  • 43 views

Hello,

I have configured a network share and would like any file added to the folder to be scanned automatically. I noticed that a schedule can be set, but the shortest available interval is every 15 minutes.

Is there a way to configure it so that a file is scanned as soon as it is placed in the folder? Alternatively, can the scan be set to run every minute?

Thanks

3 replies

AEK
SuperUser
SuperUser
June 4, 2026

Hi MK7

I think you may need FortiClient (licensed) to do that.

I can see in EMS’ Sandbox profile you can specify relevant options in File Submission Options, Exceptions and Inclusions.

https://docs.fortinet.com/document/forticlient/7.4.7/ems-administration-guide/836582/sandbox

AEK
MK7Author
New Member
June 4, 2026

Hi,

Thank you for your response.

However, that is not the solution I am looking for. The goal is for FortiSandbox to automatically scan the network share it is monitoring, but instead of waiting for the 15-minute scheduled interval, it should trigger the scan automatically as soon as a file is placed in the folder.

AEK
SuperUser
SuperUser
June 7, 2026

I don’t see how Sandbox itself can now immediately when a file is placed in the network share.

So the only options I see are:

  • Either use an agent on the network share (like FortiClient or other) that will send the file to Sandbox as soon as file is added
  • Or intercept the file and send it to Sandbox before it is added to the network share, e.g.: at firewall level by adding
AEK
SkylarDe
New Member
June 8, 2026

One thing I'd verify is that the account FortiSandbox uses to access the share has consistent permissions throughout the scheduled run. I've seen scheduled jobs fail intermittently when the share was reachable manually but authentication or network access behaved differently in the background.