Have you tested the fortisandbox?

[Carl_Wallmark]

Hi, Have anyone bought/tested the fortisandbox ? If so please share your impressions.

[Sean_Toomey_FTNT]

I can tell you that we did VERY well on the NSS Labs tests :) http://www.fortinet.com/press_releases/2014/fortinet-earns-recommended-rating-fortisandbox-nss-labs.html If you have any specific questions on what you' re looking for I can work internally to get you the answers. I know people that are experts on this product. Cheers!

[ede_pfau]

Do you know why it failed on packers, with 0% success?

[fropert_FTNT]

Hello Ede, It is really surprising that packers could be the root cause of detection failures. Could you please elaborate about your testing plan and fortisandbox deployment mode used? Regards, Francois

[netmin]

I think Ede is referring to page 7 of this document: http://www.fortinet.com/sites/default/files/whitepapers/BDS-Fortinet-FortiSandbox-3000D.pdf

[ede_pfau]

That' s right, I got the statement from the report mentioned. I only can imagine that support for packing algorithms is planned for a future release. Apart from this the results are quite impressive.

[fropert_FTNT]

Hi guys, Thanks for the nss link. I know exactly what you refer to. In fact the problem was two-fold. 1/ Avengine was unable to detect the virus when using some packers in the testing plan. As the avengine detected nothing then the virus was send for analysis to the sandboxing... 2/ When the nss test was conduced our sandbox wasn' t able to detect the virus but it is now fixed :) Regards, Francois