FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
bksol92
Staff
Staff
Article Id 398810
Description This article describes how to troubleshoot FortiClient connectivity with the FortiClient Cloud Sandbox service.
Scope All current FortiClient versions.
Solution

In order to communicate with the FortiClient Cloud Sandbox service, FortiClient will need to be able to reach aptctrl1.fortinet.com. Depending on the endpoint's location, the sandbox URL's resolved IP addresses may vary as well:

 

aptctrl1.png

 

Once a connection is established with one of the resolved addresses on port 443, a list of the actual IP addresses hosting the sandbox service on port 514 will be returned:

 

Connection with aptctrl1.fortinet.com establishedConnection with aptctrl1.fortinet.com established

 

Sandbox IP addresses returnedSandbox IP addresses returned

 

The endpoint will forward files to the sandbox service on port 514 if outbound traffic to it is allowed, as per FortiClient's own configuration.

The above logs can be found in C:\Program Files\Fortinet\FortiClient\logs\trace\fcaptmont_*.