Recommended settings for FortSandbox

[gert_vanderstraeten]

Hi everyone,

I'm not so familiar with FortiSandbox at the moment and it's really hard for me to estimate the scanning settings compared to the resources I have on available on my FortiSandbox. Is there some kind of chart that can guide me with recommended settings depending on the licence and resources I have?

I'm asking that because I've recently did a test, I've change the number of url scanned on my FortiMail from 3 to 10 but behind that my FortiSandbox has a URL Depth limit of 3 with URL content limit of 50. If I understand correctly, it can scan up to 10*50*50*50=1 250 000 urls per email. The result was a queue getting longer and my emails got delayed by 20 minutes. 

Now I went back to 4 URLs on my FortiMail, 3 URL depth and 50 content limit but I don't know if this is the recommended settings for my Sandbox.

I have FortiSandbox 1000F with 14 clones.

Regards,

Lionel

[AEK]

Hi Lionel

I don't have a precise answer, but as per my experience the default values that come with a given firmware version are the recommended ones in terms of security*performance value. So I don't change them unless I really know what I'm doing.