Skip to main content
NiekStrijker
New Member
June 25, 2020
Question

FortiMail release email from Sandbox quarantine keeps blocking email

  • June 25, 2020
  • 4 replies
  • 4444 views

Hi,

 

We are using FortiMail and FortiSandbox. If the Sandbox blocks an email it is put in the Sandbox quarantine. Sometimes there are false positives in the Sandbox quarantine, when you want to release them they go again trough the Sandbox and endup again in the Sandbox quarantine. Can we bypass this?

    4 replies

    Hosemacht
    Explorer
    June 25, 2020

    Hey there.

     

    witch Fortimail software version do you use?

    there was an Resolved issue with 6.0.0

     

    490890 When email re-scan is on, quarantined messages cannot be released in some cases. 

    NiekStrijker
    New Member
    June 26, 2020

    Hi, we use v6.0,build160,191003 (6.0.7 GA) We can release messages but false positives keep getting back in the quarantine. Do we need to disable re-scan?

    Hosemacht
    Explorer
    June 26, 2020

    Hello,

     

    indeed in this case you have to disable the rescan option.

    if the sandbox detect your attachment in the first run as suspicious, then it will do it in following runs aswell.

     

    Cheers

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!