Technical Tip: How to leverage FortiNDR to perform a static scan

[pchee]

Description	This article describes how to use FortiNDR to perform a static scan.
Scope	FortiSandbox.
Solution	Navigate to Security Fabric -> FortiNDR -> FortiNDR Settings. Select the 'Enable' checkbox. Fill in the IP address and get the API key from the FortiNDR. On the FortiNDR side, navigate under System -> Administrator -> Edit Administrator. Select Generate to acquire the API Key. Select Test Connection to make sure the integration is successful. Navigate under FortiNDR Security Fabric -> Device Input -> Other Device to make sure the status is showing as Connected. Navigate to Scan Policy and Object -> Scan Profile -> Pre-Filter. Enable the toggle for FortiNDR entrust in the Scan Profile. Note: When FortiNDR entrust in the scan profile is enabled, files rated by FortiNDR as clean will skip the sandboxing VM scan step.