FortiMail release email from Sandbox quarantine keeps blocking email

[NiekStrijker]

Hi,

We are using FortiMail and FortiSandbox. If the Sandbox blocks an email it is put in the Sandbox quarantine. Sometimes there are false positives in the Sandbox quarantine, when you want to release them they go again trough the Sandbox and endup again in the Sandbox quarantine. Can we bypass this?

[Hosemacht]

Hey there.

witch Fortimail software version do you use?

there was an Resolved issue with 6.0.0

490890 When email re-scan is on, quarantined messages cannot be released in some cases. 

[NiekStrijker]

Hi, we use v6.0,build160,191003 (6.0.7 GA) We can release messages but false positives keep getting back in the quarantine. Do we need to disable re-scan?

[Hosemacht]

Hello,

indeed in this case you have to disable the rescan option.

if the sandbox detect your attachment in the first run as suspicious, then it will do it in following runs aswell.

Cheers

[NiekStrijker]

Hi Hosemacht, thank you I will give it a try