Sold by: Fortinet Inc.Â
Deployed on AWS
Zero-day Malware Protection for Your Cloud and Hybrid Workloads
4.5
Overview
FortiSandbox for AWS enables organizations to defend against Zero-day threats natively in the cloud, working alongside network, application, email, endpoint security, and other 3rd party security solutions, or as an extension to their on-premises security architectures to leverage cloud elasticity and scale.
The number of Windows VMs used for behavior analysis for BYOL plan is based on the license. While, for PAYG plan, that is based on the CPU cores of the instance. 1 Core - maximum of 4 Windows VMs for behavior analysis 2 Cores - maximum of 8 Windows VMs for behavior analysis 4 Cores - maximum of 16 Windows VMs for behavior analysis 8 Cores - maximum of 32 Windows VMs for behavior analysis 16 Cores - maximum of 64 Windows VMs for behavior analysis Both BYOL and PAYG plan can use the Fortinet-hosted Windows Cloud VMs . Alternatively, the Custom VMs can be deployed within the cloud but will incur additional charges as per infrastructure instance price.
Highlights
- AI-powered sandbox malware analysis - Two-stage AI-based Static and Dynamic analysis for fast and reliable detection of Zero-day Malware.
- Broad Coverage of the Attack Surface with Security Fabric - Effective defense against advanced targeted attacks through a cohesive and extensible architecture working to protect network, application layers and endpoint devices from campus to cloud.
- Automated Zero-day, Advanced Malware Detection and Mitigation - Native integration and open APIs automate the submission of objects from Fortinet and third-party vendor protection points, and the sharing of threat intelligence in real time for immediate threat response.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux 5.0.5
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
This is a BYOL product - there're no refund and cancellation policy applied.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
After deploying the instance, click on Manage in AWS Console to see the running instance and public DNS address to continue the configuration of the FortiSandbox-VM. Connect to the secured Web UI via the public DNS address: https://<public DNS address>. For any CLI configuration/settings, SSH is required to log into the CLI. Default login credentials are with a username of admin and the AWS Instance ID value as the password. The FortiSandbox-VM AWS Install and Configure guide is located at https://docs.fortinet.com/document/fortisandbox-public-cloud/latest/fortisandbox-vm-on-aws/443751/overviewÂ
Resources
Support
Vendor support
https://support.fortinet.com Fortinet FortiCare Support Services give you global support on a per-product basis. By subscribing to these services, you'll receive a timely response to any technical issue as well as complete visibility on ticket resolution progress. All FortiCare Support Services include firmware upgrades, access to the support portal and associated technical resources.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Fortinet FortiGate allows mitigation of blind spots to improve policy compliance by implementing critical security controls within your AWS environment. FortiGate includes all of the security and networking services common to FortiGate physical appliances.
FortiAuthenticator is a centralized user Identity Management solution to transparently identify network users and enforce identity-driven access policy in a Fortinet fabric. It supports FortiToken Two-factor authentication, Certificate and Wireless Guest management and Single Sign On capability.
The Fortinet FortiManager provides easy centralized configuration, policy-based provisioning, update management and end-to-end network monitoring for your Fortinet installed environment.
Fortinet professional design and implementation services for network, application, and cloud-native (CNAPP) security for AWS, hybrid, and multi-cloud environments.
The FortiWeb web application firewall (WAF) defends web-based applications from known and zero-day threats. Its AI-based machine learning identifies threats with virtually no false positive detections.
Customer reviews
Urvish M.
After a smooth deployment, it has consistently safeguarded our network from advanced threats
Reviewed on Sep 17, 2025
Review provided by G2
What do you like best about the product?
I really like the endpoint integration. FortiClient silently sends unknown files to FortiSandbox in the background, and we don’t have to babysit it. Once we tuned the policies, it’s been running reliably without slowing down users, which is a big plus for productivity.
What do you dislike about the product?
It can be resource-hungry. We had to allocate more hardware than initially expected to keep the performance smooth, especially with FortiClient endpoints constantly sending samples. Once scaled properly it’s fine, but the upfront sizing needs careful planning.
What problems is the product solving and how is that benefiting you?
Before deploying it, we were constantly dealing with suspicious attachments slipping through email and reaching endpoints. Now FortiClient forwards anything unknown to FortiSandbox, and verdicts come back quickly. It’s cut down on user-reported incidents and allowed us to keep our environment clean without adding more endpoint load.
Computer Software
A good security investment that gives real value and steady protection
Reviewed on Sep 17, 2025
Review provided by G2
What do you like best about the product?
The best part is it takes a big load off our security team.
By catching threats early, it saves us both time and cleanup costs
By catching threats early, it saves us both time and cleanup costs
What do you dislike about the product?
It’s given us good results, but it isn’t budget-friendly.
For those not using other Fortinet tools, the price may be tough
For those not using other Fortinet tools, the price may be tough
What problems is the product solving and how is that benefiting you?
Before, a single infection meant hours of cleanup.
Now the sandbox blocks them upfront, saving IT work and keeping things running
Now the sandbox blocks them upfront, saving IT work and keeping things running
Brijesh R.
A reliable and proactive solution that has strengthened our overall security posture.
Reviewed on Sep 17, 2025
Review provided by G2
What do you like best about the product?
The strongest part for me is how well it works with FortiClient on our endpoints. Whenever a suspicious file shows up, it’s automatically sent to FortiSandbox, and the verdict comes back quickly. If it’s malicious, FortiClient immediately blocks it and updates its signatures, it’s closed several gaps we used to worry about.
What do you dislike about the product?
The main drawback I’ve noticed is the occasional delay during peak load. When multiple suspicious files come in at once, analysis can take a bit longer, which slightly slows down our incident triage. It’s not frequent, but it’s something we’ve had to plan around.
What problems is the product solving and how is that benefiting you?
It’s helped us close the gap against zero-day and evasive malware that our traditional signature-based tools were missing. By sending suspicious files from FortiClient to FortiSandbox for behavioral analysis, we’re catching threats before they ever execute. This has greatly reduced infection incidents and strengthened our security posture.
Esat Yasar C.
High Level Security with FortiSandbox
Reviewed on Jun 08, 2023
Review provided by G2
What do you like best about the product?
provides two-step security. First analysis with fortinet antivirus. the second step is protection. We are pleased to work with forti products. In our company fortimail, forticlient products are also available.
What do you dislike about the product?
I don't have negative feature for Fortisandbox
What problems is the product solving and how is that benefiting you?
For analyzing of email attachments and fortisandbox prevent some critical attachments and we don't meet some cyber security problems.
Avinash K.
Awesome high end cybersecurity tool
Reviewed on Oct 17, 2022
Review provided by G2
What do you like best about the product?
We started using this in our current organization due to the high-security risks we faced last year.
The good thing about the box is gui interface,
The good thing about the box is gui interface,
What do you dislike about the product?
CPU utilization high when we run repors.
What problems is the product solving and how is that benefiting you?
Outside interface was exposed to so many threaths. we can use this as a gateway to mitiage the risks.