FortiSandbox
FortiSandbox provides a solution to protect against advanced threats and ransomware for companies who don’t want to implement and maintain a sandbox environment on their own.
gcortes1
Staff
Staff
Article Id 423847
Description This article describes how to purge the job Queue for specific source in FortiSandbox.
Scope FortiSandbox all versions.
Solution

Via GUI:

 

Go to 'Scan Job -> Job Queue -> Select the specific Queue'. In this case, 'FortiMail Non Sandboxing files'.

 

Note: The 'Non-sandboxing files' are files which either do not match a file type in the Scan Profile or match pre-filter conditions.

 

It is possible to execute the following command in the CLI of the FortiSandbox to show the pre-filter settings.

 

sandboxing-prefilter -l

 

For further information about pre-filtering and improving performance, see FortiSandbox - Best Practices.

 

It is possible to compare the associated file types for sending to FortiSandbox against the file types the FortiSandbox Scan Profile has associated with VMs.

 

FSA-GUI-Purge-1.png

 

After selecting the trash button, the confirmation for the Job Purge should appear.

 

FSA-GUI-Purge-2.png

 

After the Purge, the Job Queue 'FortiMail Non Sandboxing files' will not appear in the Job Queue list.

 

Via console:

 

When the device does not display the web interface due to high resource usage, it is possible to purge the queues via the console or through an SSH connection.

 

Open an SSH session or the CLI console on the FortiSandbox.

 

Validate the current status of the Job Queue with the next instruction:

 

pending-jobs show all all all

 

FSA-CLI-Purge-1.png

 

Select the Job Queue to purge in this case: FortiMail URL.

 

Run the following: 

 

pending-jobs purge urlfml all all

 

Approve the execution with 'y'.

 

FSA-CLI-Purge-2.png

 

After the execution, the Job Queue will be at '0'.

 

FSA-CLI-Purge-3.png

Contributors