What's new in FortiOS 5.6

The following section describes new Sandbox Integration features added to FortiOS 5.6.1.

FortiOS 5.6.1

These features first appeared in FortiOS 5.6.1.

New file extension lists for determining which file types to send to FortiSandbox (379326)

This feature introduces two new file extension lists:

• File extensions to submit to FortiSandbox even though the AV engine says they are unsupported.
• File extensions to exclude from submitting to FortiSandbox even though the AV engine says they are supported.

These lists are configured on the FortiSandbox, not the FortiGate, and are dynamically loaded on the FortiGate via quarantine.

These lists are only file extensions and not file types detected by the AV engine using magic bytes. Pattern matching is done on the extension of the filename only.

Syntax

diag sys scanunit reload-fsa-ext

FortiSandbox integration with AntiVirus in quick mode (436380)

FortiSandbox options in an AntiVirus Security Profile in quick scanning mode can now be enabled with CLI commands.

CLI syntax

config antivirus profile

edit default

set ftgd-analytics disable/everything

set analytics-max-upload 10

set analytics-wl-filetype 0

set analytics-bl-filetype 0

set analytics-db enable/disable

set scan-mode quick

end