report from forticloud

[kinmun]

we implemented a 2nd tier firewall with sandbox features.

we also subscribed to the forticloud logs analysis for the 1st year since it is "free".

from the daily report generated, it shows that are "virus" events.

are these actually virus infected ??

[kinmun]

we find that the report under Top Virus IP very misleading.

 is there any reason why is categorized as virus, although it means files submitted to Sandbox