Description | This article describes how to troubleshoot FortiClient connectivity with the FortiClient Cloud Sandbox service. |
Scope | All current FortiClient versions. |
Solution |
In order to communicate with the FortiClient Cloud Sandbox service, FortiClient will need to be able to reach aptctrl1.fortinet.com. Depending on the endpoint's location, the sandbox URL's resolved IP addresses may vary as well:
Once a connection is established with one of the resolved addresses on port 443, a list of the actual IP addresses hosting the sandbox service on port 514 will be returned:
The endpoint will forward files to the sandbox service on port 514 if outbound traffic to it is allowed, as per FortiClient's own configuration. The above logs can be found in C:\Program Files\Fortinet\FortiClient\logs\trace\fcaptmont_*. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.