Fortinet FortiSandbox Reviews

Clients primarily ask us to integrate Fortinet FortiSandbox either with FortiMail or with firewalls to scan downloadable files and ensure that client access browsing is secure with no harmful files downloaded to the client side.

For users on the client side, Fortinet FortiSandbox can protect them from ignorance regarding attacks, cybersecurity, or viruses. If a user downloads a malicious document, Fortinet FortiSandbox scans, runs, and checks if it has malware, and if it does have malware, it can protect or delete it. If it's clean, the user can download it. From the client side, it provides insight and protection for the organization if they are targeted by zero-day attacks or malware.

The smooth integrations between Fortinet FortiSandbox and other Fortinet solutions such as FortiWeb and FortiFirewall and with other Fortinet environments are what I really appreciate.

We have minimum false positives during threat detection. Our clients have not given negative feedback from detection. As you know, it still needs some tuning after implementation. However, we never receive negative feedback for many false positives during implementation.

I think Fortinet FortiSandbox could introduce more automation tools and AI tools.

I have been using this solution for almost five or six years.

The current function is acceptable. I have worked with other sandboxing solutions that introduce more complexity on their devices. Fortinet FortiSandbox works fine, is easy to manage, and functions well.

It is very easy to scale.

I would rate it an eight out of ten. This depends on who is managing the cases. Sometimes the technical engineer is very good and helpful, and sometimes we go through many processes until it gets escalated to a higher level or to another advanced technical engineer.

Positive

I have tried Trend Micro, but I think Fortinet FortiSandbox is more simple and seamless than Trend Micro.

The setup is very simple.

An implementation team was involved in the setup.

I think a rating of nine out of ten would be appropriate.

The cost is in the mid-range. It is not low and it is not high.

We are still working with Fortinet FortiSandbox and other vendors. We are a business partner for Fortinet and other vendors as well. We have configured one of our clients for Fortinet FortiSandbox. I give this product a review rating of ten out of ten.

We use FortiSandbox for scanning files and images that pass through our networks. It integrates with different devices, such as five adapters and other Fortinet devices.

It is time-saving and more secure. It saves us from a lot of antivirus and anti-malware issues.

The adapter is beneficial as it allows integration with various devices, not just Fortinet.

It would be better if we could integrate FortiSandbox with endpoint security solutions. This would allow us to scan files opened by the endpoint user and not just over the network.

I have about one year of experience working with FortiSandbox.

I would rate the stability of FortiSandbox as eight out of ten.

I would rate the scalability of FortiSandbox as eight out of ten.

Fortinet provides really good technical support. They introduce high-level support for us.

Positive

The initial configuration is straightforward and not difficult. We have an ID for port one and can assign port three for ID two for the device.

I am not familiar with the pricing because my role is strictly technical.

I recommend using FortiSandbox, especially if your environment relies on FortiGate devices or is integrated with Fortinet. It ensures better compatibility.

I'd rate the solution nine out of ten.

The company came to us and provided a proof of concept (POC) for six or seven months for testing the machine and evaluating how we can use Fortinet FortiSandbox. Also, we use FortiSandbox for scanning files, like attachments.

Currently, there isn't a standout feature. We use Fortinet FortiSandbox for scanning files such as attachments, and we have not faced any issues so far. Up to now, it is performing well.

We sometimes face a delay in email scanning due to not having multiple virtual machines. Improvements could be made in dynamic scanning, scanning all email components such as URLs and attachments, and analyzing the Sandbox response. Additionally, better integration with cloud solutions and enhanced performance would be beneficial.

I have been using FortiSandbox for six months, specifically for testing purposes on the Alibaba Cloud platform.

The solution is stable up to now because it is still new, just six months maximum.

The solution's performance is fine and more improved compared to the last two months.

As of now, I've primarily been in contact with the consultants for support and have only needed one ticket with Fortinet. I have no substantial experience with Fortinet's direct technical support.

Neutral

I previously used Cisco, but Fortinet is much easier in terms of configuration and service time.

The initial setup of Fortinet was easy, more so than other products. Even though I'm not directly involved, it has been very easy to work with Fortinet, especially compared to other solutions.

It was a combined effort. A consultant from an external company worked alongside us on the implementation. Most of the integration and support involved consultants.

I think it's affordable. For the six to seven months of usage, the cost has been reasonable.

FortiSandbox is rated five out of ten. It meets the requirements but still has room for growth and improvements.

Our primary use case for Fortinet FortiSandbox is preventing malicious code and getting alerts for blocking malicious code and other things.

The most valuable features for me when it comes to Fortinet FortiSandbox are the integrity of the Sandbox and the power of the analyzing tool of the solution. I can also say that the design of this appliance is quite light and powerful.

The area I would like this solution to be improved in is the integrations for Sandbox with AI and big data ML mechanisms. I think this would be a practical improvement.

I would also like to see improvements in the solution's stability and the pricing plan.

I have been using Fortinet FortiSandbox for about three years.

My impression of the stability of this solution is that it's quite good considering that it's a simple solution. I would rate it an eight, on a scale from one to 10, with one being the worst and 10 being the best.

The scalability of this solution is difficult to comment on as how much it can scale largely depends on your hardware.

My impression is that the initial setup process is quite straightforward. If you know what you're using it for, the initial setup can be quite easy and the solution is not that hard to use. 

When it comes to the steps taken for the implementation, you would select the OS you're using and when the files are sent to the appliance you check, and in the appliance configuration, it must be like the visual governance environment. You must set up the OS you have so that appliance can scan or analyze your file. To maintain this solution, you must always have at least one all-around person tuning this solution.

I would say that we have seen a return on our investment.

My opinion is that this solution has a high price point.

I would recommend this solution to other people as it's a useful solution to have, especially because of the signature antivirus-based features.

I would rate this solution a nine, on a scale from one to 10, with one being the worst and 10 being the best.

The most valuable features of the product include components like CDR, greylisting, sandboxing, attachment detection in sandboxing, DLP fingerprinting, and the redirect option.

For the MSSPs, it would be great if the product could display all the threat chains on a dashboard since it is an area where the tool is currently lacking.

I have been using Fortinet FortiSandbox for around two years. My company has a partnership with Fortinet. My company also operates as an MSP for Fortinet.

It is a stable solution with no issues at all. The product is scalable and stable since it is compatible with cloud solutions like AWS and Azure. The product can be deployed on the cloud services offered by Amazon AWS or Microsoft Azure.

It is an easily scalable solution.

My company caters to the needs of small, medium, and large-sized businesses where the solution is used.

The solution's technical support is satisfactory. I rate the technical support a seven to eight out of ten.

Positive

I have worked with other solutions in the past.

The product is easy to deploy.

The product can be deployed in 15 days.

Two or three people from our company are involved in the deployment, implementation, and configuration process.

Fortinet FortiSandbox saves a lot of money for its users since if an attack happens in your environment, the loss is infinite, especially in terms of the brand value and laws of data. In terms of ROI, the tools safeguard the data and brand value of the company. The percentage of the ROI can vary from company to company. If the product prevents an attack on a small or medium-sized business, then the ROI part will have a different implication in terms of numbers. If the product prevents an attack on an enterprise-sized company, the ROI part will have a different implication in terms of numbers.

Fortinet FortiSandbox is a nominally priced product, so I would not say that it is a very cheap tool. It is one of the best solutions in the market with a competitive pricing model, similar to the prices offered by products from Cisco.

I would describe Fortinet FortiSandbox, which has been deployed within our company's network for threat detection, as a proactive solution with multiple functionalities. A few of the functionalities of the product include areas like sandboxing, CDR, pattern-reading, and detection ratio, which are very good.

I rate the product's effectiveness in dealing with zero-day threats a seven to eight out of ten, where ten means it is the most effective product for dealing with zero-day threats.

As of now, Fortinet FortiSandbox is not integrated with other Fortinet solutions to improve our company's security posture. The tool is integrated with our own existing email security gateway to use anti-spam and anti-virus features.

The tool should have more ability to customize from the reporting point of view. The tool should be able to provide more slicing and dicing in data. The users of the product should try to know about threat chains t with the help of the tool's MSPs so that they know the outcome of a threat that may enter their networks. In the MSP model, it would be good if the aforementioned area gets integrated.

The reporting and alerting capabilities of the product have helped our company's security area since the tool provides good and deep-dive reports, which include proper reasoning for certain actions that were taken. The report will explain why it blocked or did not block certain aspects. There are detailed reports in terms of the logs that the tool provides its users. The tools also provide details on the areas that were quarantined. In general, the tool provides a very detailed report.

The product is easy to maintain since my company gets proper support from Fortinet.

In my company, there are many use cases to describe scenarios where the product prevented or mitigated a breach or an attack. My company operates as a managed service provider for Fortinet, and many of our customers use Fortinet FortiSandbox. When my company receives any attacks via links or attachments, FortiMail blocks such emails.

I suggest others consider whether they plan to buy a solution from a security company. I will see whether the tool I use for sandboxing is from a security company or not. I will consider the catch rate of the product. I will also consider the other solutions that the vendor can bring in for me that can improve and secure my company's security posture while being easy to use and implement.

I will consider whether the vendor who offers our company sandboxing features has a security background. I will look into whether the solution is interoperable or not. There should be interoperability if I need to deploy some other solution as well, like a DLP or a firewall.

I rate the overall tool a seven out of ten.

I use Fortinet FortiSandbox to detect malware in the system, especially when uploading or downloading files from the internet.

The most valuable feature of the solution is that the performance it offers to users is good, making it useful for us in our company. Fortinet FortiSandbox is more like a SASE solution.

The solution is unavailable at a lower cost and can be difficult to deploy. From an improvement perspective, I would like the solution to be made available to users at a cheaper price while making its deployment phase easier.

I have experience with Fortinet FortiSandbox.

It is a stable solution. I can't rate the solution's stability since I am unaware of it.

It is a scalable solution.

Around 500 people in my institution use the solution.

I have some previous experience with Check Point and NetScaler.

The initial setup of Fortinet FortiSandbox is straightforward.

The solution can be deployed on either a cloud or on-premises.

Though I haven't worked with Fortinet FortiSandbox, it is a good solution based on the opinion of one of my colleagues who has worked with it. Fortinet FortiSandbox can be deployed on a cloud or on-premises.

I recommend the solution to those who plan to use it. Fortinet FortiSandbox is a good security option for those who plan to use it.

The overall solution is an eight to nine out of ten.

My company uses Fortinet FortiSandbox to integrate with the email system named FortiMail. Fortinet FortiSandbox also helps with the integration of network infrastructure, allowing our company to extract some objects from the network and analyze them.

The main benefit of Fortinet FortiSandbox is that it allows organizations to detect and prevent unknown threats from entering an infrastructure.

The most valuable feature of Fortinet FortiSandbox is its ability to be integrated with email infrastructure, like FortiMail, with a blocking mode option, which means that FortiSandbox not only allows the detection of some malicious objects in emails but also helps block them to prevent end users from receiving from malicious emails.

The main area of concern in Fortinet FortiSandbox is its detection capabilities. I have seen some cases where the solution doesn't provide any clue of threats or malicious objects to its users. When FortiSandbox was not able to detect some malicious objects, Fortinet's competitors were able to do that. The aforementioned area can be considered for improvement.

I have been using Fortinet FortiSandbox for three to four years. I am an end user of the solution.

It is a pretty stable solution. Stability-wise, I rate the solution an eight to nine out of ten.

It is a scalable solution. From my experience, I can say that the solution's embedded functionality was enough to cover all use cases in the past involving different environments.

Scalability-wise, I rate the solution an eight out of ten.

I have contacted Fortinet's technical support and found them to be pretty responsive and fast. I rate the technical support a nine out of ten.

Positive

Kaspersky, FireEye, and Trend Micro were the solutions I used in the past. Kaspersky, FireEye, and Trend Micro were the solutions I used in the past. I cannot compare the solutions I have used in the past with Fortinet FortiSandbox and comment on which one was the best solution I used since the use of each solution depends on the use cases and Infrastructures. The main advantage of Fortinet FortiSandbox is that it is a part of Fortinet Security Fabric, meaning Fortinet has its own security framework. It is really easy to deploy FortiSandbox and integrate with other Fortinet solutions. Suppose your company has a Fortinet stack or technologies across your network or infrastructure for endpoint protection or network protection. I think Fortinet FortiSandbox would be the easiest choice. I cannot say that Fortinet FortiSandbox is better than Kaspersky, FireEye, or Trend Micro.

The initial setup phase of Fortinet FortiSandbox was pretty straightforward because, in my case, I worked with the physical appliances. According to the documentation, the setup phase for virtual appliances would be exactly the same as for physical appliances. You just deploy the box and then configure it, after which you create some integrations with FortiMail and other systems, which may take less than an hour.

The solution is deployed on an on-premises model.

The solution can be deployed in an hour or even less in the easiest scenarios. In the not-so-easy scenarios, the deployment phase for the solution may take a day or two. Some of my company's customers want to integrate Fortinet FortiSandbox with FortiMail and other tools, so it involves multiple integration points. The purpose of integrating Fortinet FortiSandbox with other tools may be to simultaneously monitor network or email traffic and use some customized images for virtual machines, which does take time. There is a need to perform fine-tuning in the solution to set up detection capabilities and some mechanisms.

I take care of the solution's installation phase in my company. For the solution's installation phase in my company, I sought the help of my colleagues from the IT department to manage the integration of Fortinet FortiSandbox with our company's email system since certain settings are to be done not only in FortiCentral but also in FortiMail and network layers. In most scenarios, you are not able to do it by yourself because you don't have proper access to a particular system.

It is a problem task to prove the ROI of any security solution. I saw several cases where FortiSandbox was able to detect some zero-day ransomware attacks at a time when there were no solutions, like FortiSandbox, making it easy for the ransomware attack to be successful. Dealing with a successful ransomware attack would cost a lot of money.

Though I don't know the exact numbers related to pricing, the solution is priced adequately or fairly.

I rate the product's pricing a five or six on a scale of one to ten, where one is low, and ten is high.

Though the solution comes with embedded licenses, there is always a problem for all the vendors when it comes to the virtual machines from Windows. Since Fortinet provides for the additional licenses, there is no need to buy any additional licenses.

If a company has some Fortinet equipment in its environment already, then Fortinet FortiSandbox would be the best choice for them. If a company wants to go for the deployment of some other solution for all their infrastructures, then it would be good to analyze the integration and detection capabilities.

I rate the overall solution a nine out of ten.

I have experience installing solutions with the sandbox, along with its functionality that is multifunctional. When some files are detected with viruses, they are placed in quarantine.

The solution puts the suspected file in quarantine, then analyzes if there is a risk by scanning it. If not, they remove it from the quarantine.

Improvement is needed considering that it could be a scenario where it is limited, especially it may be during those periods of time when they are not updated. In general, maybe they are not updated to cover other risks.

I have experience with Fortinet FortiSandbox. My previous company had a partnership with Fortinet. In my current company, we don't have any partnerships with Fortinet. I work as an IT consultant.

The solution has the highest stability because a lot of clients have adopted Fortinet solutions with different variations. They didn't give me a report of its issues or problems. A lot of clients got Fortinet solutions without reporting any network or appliance availability problems, while it was different for other vendors. When implementing and designing Fortinet, around 80 percent of the solutions in Mexico were for Fortinet solutions.

I rate the solution's stability a nine out of ten.

There is a specific list of Fortinet products you can select from, and they offer a variety of user functionalities and performance levels that can cover our approach. It is easy to increase or change to another appliance that can support the growth of any of the factors. Therefore, it is easy to change it or increase it.

I rate the solution's service and support an eight out of ten.

Positive

The solution is not complex as they are already included in Fortinet. There is a special solution for sandboxing, but it increases the level of security. In that version, you can get more from that solution and more efficiency in using sandboxing.

The initial setup is easy because I have been working with Juniper, and they have the same interface. The graphic interface is friendly and it is intuitive. For me, it is easy to configure.

Overall, I rate the solution an eight out of ten.

Fortinet FortiSandbox is a security-centric solution of Fortinet. The solution inspects all the predicted or suspicious files which are executed in the Fortinet FortiSandbox environment. It contains virtual machines of different types, such as Windows Server, and Windows Ubuntu. If the suspicious files are executed and there is an issue found. The user can request to discard it when the file is delivered to their system.

The solutions have extended our security posture which has helped the organization.

Fortinet FortiSandbox's most valuable feature is the security it provides against threats, such as ransomware. Additionally, it integrates well with APIs.

Fortinet FortiSandbox for approximately three years.

Fortinet FortiSandbox is scalable but you have to purchase additional licenses. 

Fortinet FortiSandbox is a network-based appliance and we have approximately 2,000 users being protected.

We do not plan to increase the usage of the solution because we are at capacity.

I rate the support from Fortinet FortiSandbox a five out of five.

Positive

I have not used another similar solution previously.

The initial setup of Fortinet FortiSandbox is complex. You cannot only deploy Fortinet FortiSandbox without deploying the stack of Fortinet solutions. The implementation and integration are challenging tasks with the device and placement in the network. We needed to do POC and offloading testing.

This is a cyber security solution, it has a very good ROI in terms of maintaining the reputation and user safety in cybersecurity.

The price of Fortinet FortiSandbox is not expensive. 

I did not evaluate other options.

The solution requires one security engineer with operational knowledge of the solution. However, they are not needed for a day to day activities, but for all the tuning, performance, and monitoring, one LC administrator is required.

I would recommend this solution to others. It is helpful for monitoring and protecting users from different kinds of attacks. I advise others to use the on-premise or cloud version.

I rate Fortinet FortiSandbox a ten out of ten.

We use Fortinet FortiSandbox for malware. Fortinet FortiSandbox is used before entering the firewall to extract any file and check for malicious activity.

The solution extracts an attached file before reaching the user and notifies the user if there's something malicious in the attachment received along with an email. The solution prevents such malicious content from entering your enterprise network.

When you reach the maximum capacity, you cannot upgrade the solution because its hardware is very expensive. All you can do is discard it and buy another.

I have been using Fortinet FortiSandbox for five years.

We didn't face any issues with the solution's stability for the three years it was installed on-premises at our data center.

The solution’s technical support is good.

The solution’s initial setup is straightforward.

We have seen a return on investment with Fortinet FortiSandbox because it helped us a lot on the security part.

If you're using Fortinet, it's best to use the solution when using FortiGate antivirus because it's all connected and easy to manage.

Overall, I rate Fortinet FortiSandbox an eight out of ten.