FortiSandbox
FortiSandbox provides a solution to protect against advanced threats and ransomware for companies who don’t want to implement and maintain a sandbox environment on their own.
Ted
Staff
Staff
Article Id 291014
Description This article describes how to monitor the FortiSandbox Job Queue count via SNMP. It is possible to use SNMP to monitor the Job Queue count.
To retrieve the information, it is necessary to compile Fortinet proprietary MIBs as well as Fortinet-supported standard MIBs into the SNMP manager, and then download these MIB files from the Fortinet technical support website at Fortinet Support.
Scope FortiSandbox.
Solution

First, it is necessary to enable SNMP on FortiSandbox as below:

  • System -> SNMP -> Configure SNMP Community for v1 and v2c, or User for v3:

FSA_SNMP_system resource 0.png

 

It is also possible to use 'snmpwalk' to run multiple GETNEXT requests automatically.

 

For example:

 

snmpwalk -v <SNMP version> -c <SNMP community string> <FortiSandbox Management IP> <OID>

 

  • fsaJobQueue 1: Pending Executables/DLL/VBS/BAT/PS1/JAR/MSI files on the device
    .1.3.6.1.4.1.12356.118.5.1.1
  • fsaJobQueue 2: Pending PDF files on the device
    .1.3.6.1.4.1.12356.118.5.1.2
  • fsaJobQueue 3: Pending Office files on the device
    .1.3.6.1.4.1.12356.118.5.1.3
  • fsaJobQueue 4: Pending Flash files on the device
    .1.3.6.1.4.1.12356.118.5.1.4
  • fsaJobQueue 5: Pending Web files on the device
    .1.3.6.1.4.1.12356.118.5.1.5
  • fsaJobQueue 6: Pending Android files on the device
    .1.3.6.1.4.1.12356.118.5.1.6
  • fsaJobQueue 7: Pending Android files on the device
    .1.3.6.1.4.1.12356.118.5.1.7
  • fsaJobQueue 8: Pending URL jobs on the device
    .1.3.6.1.4.1.12356.118.5.1.8
  • fsaJobQueue 9: Pending user defined files on the device
    .1.3.6.1.4.1.12356.118.5.1.9
  • fsaJobQueue 10: Pending Non Sandboxing files on the device
    .1.3.6.1.4.1.12356.118.5.1.10
  • fsaJobQueue 11: Job Queue Assignment Pending files on the device
    .1.3.6.1.4.1.12356.118.5.1.11
  • fsaJobQueue 12: Processing jobs on the device
    .1.3.6.1.4.1.12356.118.5.1.12

 

FSA_SNMP_system resource 3.png

 

FSA_SNMP_system resource 4.png

 

Job Queue count.

 

FSA_SNMP_system resource 5.png

 

Job count in processing.

Contributors