FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
bksol92
Staff
Staff
Article Id 384908
Description This article explains why FortiClient does not submit files with certain extensions to FortiSandbox and what can be done to perform file submission for those file types.
Scope All FortiClient versions.
Solution

While FortiClient supports submission of all file types to FortiSandbox in the Sandbox profile, the supported file types is dictated by FortiSandbox settings. 

 

Sandbox profile configured to submit all file types supported by FortiSandboxSandbox profile configured to submit all file types supported by FortiSandbox

 

To create a new file type for FortiClient's file submission to FortiSandbox, a custom file extension can be created in FortiSandbox's settings (Scan Profile -> VM Association:(

 

"txt" file extension has been created"txt" file extension has been created

 

Once the change has been applied to the scan profile, select 'Test Connection' in the sandbox profile to sync changes on FortiSandbox to the profile before saving the changes in the profile:

 

fsa-filetype.gif

 

Once FortiClient syncs its configuration, it will be able to submit web downloads of files with the custom file extension:

 

fsa-block.gif