FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
HakimiAzman
Staff
Staff
Article Id 420456
Description This article describes the correct format for configuring FortiSandbox Cloud connection in FortiClient EMS.
Scope FortiClient EMS, FortiSandbox Cloud.
Solution

FortiClient includes a Sandbox Detection feature that allows files to be submitted to a connected FortiSandbox for analysis. When using FortiSandbox Cloud, the FortiClient EMS configuration requires the correct IP/Hostname and Account ID format to establish a successful connection.

 

If the environment is using FortiSandbox Cloud SaaS, refer to the configuration steps in the official documentation instead: FortiClient EMS Administration Guide: Sandbox.

 

To configure FortiSandbox Cloud correctly, it is important to extract both the IP/Hostname and Account ID in the right format.

 

How to identify the correct format:

  1. First, check the FortiSandbox Cloud URL.
  2. From the URL:
    • Account ID: XXXXXX.
    • IP/Hostname: ca-west-1.fortisandboxcloud.com.
  3. The values must be entered correctly according to their format; FortiClient EMS will display connection failed.

 

Example if wrongly configured:

 

image (13).png

 

Screenshot 2025-11-26 073445.png

 

Example if correctly configured:

 

Screenshot 2025-11-25 220709.png