Sign in
Sign in
or
Create a new account
Agent Mode
Categories
Your Saved List Become a Channel Partner Sell in AWS Marketplace Amazon Web Services Home Help

Fortinet FortiSandbox Zero-Day Threat Protection (On-Demand)

Fortinet Inc.

Reviews from AWS customer

3 AWS reviews

External reviews

35 reviews
from and

External reviews are not included in the AWS star rating for the product.

4-star reviews ( Show all reviews )

    AhmedNatil

Advanced sandboxing has protected users from zero-day threats and has simplified secure file scanning

  • February 02, 2026
  • Review from a verified AWS customer

What is our primary use case?

Clients primarily ask us to integrate Fortinet FortiSandbox either with FortiMail or with firewalls to scan downloadable files and ensure that client access browsing is secure with no harmful files downloaded to the client side.

For users on the client side, Fortinet FortiSandbox can protect them from ignorance regarding attacks, cybersecurity, or viruses. If a user downloads a malicious document, Fortinet FortiSandbox scans, runs, and checks if it has malware, and if it does have malware, it can protect or delete it. If it's clean, the user can download it. From the client side, it provides insight and protection for the organization if they are targeted by zero-day attacks or malware.

What is most valuable?

The smooth integrations between Fortinet FortiSandbox and other Fortinet solutions such as FortiWeb and FortiFirewall and with other Fortinet environments are what I really appreciate.

We have minimum false positives during threat detection. Our clients have not given negative feedback from detection. As you know, it still needs some tuning after implementation. However, we never receive negative feedback for many false positives during implementation.

What needs improvement?

I think Fortinet FortiSandbox could introduce more automation tools and AI tools.

For how long have I used the solution?

I have been using this solution for almost five or six years.

What do I think about the stability of the solution?

The current function is acceptable. I have worked with other sandboxing solutions that introduce more complexity on their devices. Fortinet FortiSandbox works fine, is easy to manage, and functions well.

What do I think about the scalability of the solution?

It is very easy to scale.

How are customer service and support?

I would rate it an eight out of ten. This depends on who is managing the cases. Sometimes the technical engineer is very good and helpful, and sometimes we go through many processes until it gets escalated to a higher level or to another advanced technical engineer.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

I have tried Trend Micro, but I think Fortinet FortiSandbox is more simple and seamless than Trend Micro.

How was the initial setup?

The setup is very simple.

What about the implementation team?

An implementation team was involved in the setup.

What was our ROI?

I think a rating of nine out of ten would be appropriate.

What's my experience with pricing, setup cost, and licensing?

The cost is in the mid-range. It is not low and it is not high.

What other advice do I have?

We are still working with Fortinet FortiSandbox and other vendors. We are a business partner for Fortinet and other vendors as well. We have configured one of our clients for Fortinet FortiSandbox. I give this product a review rating of ten out of ten.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Amazon Web Services (AWS)

    Computer Software

A good security investment that gives real value and steady protection

  • September 17, 2025
  • Review provided by G2

What do you like best about the product?
The best part is it takes a big load off our security team.
By catching threats early, it saves us both time and cleanup costs
What do you dislike about the product?
It’s given us good results, but it isn’t budget-friendly.
For those not using other Fortinet tools, the price may be tough
What problems is the product solving and how is that benefiting you?
Before, a single infection meant hours of cleanup.
Now the sandbox blocks them upfront, saving IT work and keeping things running

    Urvish M.

After a smooth deployment, it has consistently safeguarded our network from advanced threats

  • September 17, 2025
  • Review provided by G2

What do you like best about the product?
I really like the endpoint integration. FortiClient silently sends unknown files to FortiSandbox in the background, and we don’t have to babysit it. Once we tuned the policies, it’s been running reliably without slowing down users, which is a big plus for productivity.
What do you dislike about the product?
It can be resource-hungry. We had to allocate more hardware than initially expected to keep the performance smooth, especially with FortiClient endpoints constantly sending samples. Once scaled properly it’s fine, but the upfront sizing needs careful planning.
What problems is the product solving and how is that benefiting you?
Before deploying it, we were constantly dealing with suspicious attachments slipping through email and reaching endpoints. Now FortiClient forwards anything unknown to FortiSandbox, and verdicts come back quickly. It’s cut down on user-reported incidents and allowed us to keep our environment clean without adding more endpoint load.

    Brijesh R.

A reliable and proactive solution that has strengthened our overall security posture.

  • September 17, 2025
  • Review provided by G2

What do you like best about the product?
The strongest part for me is how well it works with FortiClient on our endpoints. Whenever a suspicious file shows up, it’s automatically sent to FortiSandbox, and the verdict comes back quickly. If it’s malicious, FortiClient immediately blocks it and updates its signatures, it’s closed several gaps we used to worry about.
What do you dislike about the product?
The main drawback I’ve noticed is the occasional delay during peak load. When multiple suspicious files come in at once, analysis can take a bit longer, which slightly slows down our incident triage. It’s not frequent, but it’s something we’ve had to plan around.
What problems is the product solving and how is that benefiting you?
It’s helped us close the gap against zero-day and evasive malware that our traditional signature-based tools were missing. By sending suspicious files from FortiClient to FortiSandbox for behavioral analysis, we’re catching threats before they ever execute. This has greatly reduced infection incidents and strengthened our security posture.

    Abdelhamid Saber

Enhanced network security with adaptable integration and really good support

  • October 23, 2024
  • Review provided by PeerSpot

What is our primary use case?

We use FortiSandbox for scanning files and images that pass through our networks. It integrates with different devices, such as five adapters and other Fortinet devices.

How has it helped my organization?

It is time-saving and more secure. It saves us from a lot of antivirus and anti-malware issues.

What is most valuable?

The adapter is beneficial as it allows integration with various devices, not just Fortinet.

What needs improvement?

It would be better if we could integrate FortiSandbox with endpoint security solutions. This would allow us to scan files opened by the endpoint user and not just over the network.

For how long have I used the solution?

I have about one year of experience working with FortiSandbox.

What do I think about the stability of the solution?

I would rate the stability of FortiSandbox as eight out of ten.

What do I think about the scalability of the solution?

I would rate the scalability of FortiSandbox as eight out of ten.

How are customer service and support?

Fortinet provides really good technical support. They introduce high-level support for us.

How would you rate customer service and support?

Positive

How was the initial setup?

The initial configuration is straightforward and not difficult. We have an ID for port one and can assign port three for ID two for the device.

What's my experience with pricing, setup cost, and licensing?

I am not familiar with the pricing because my role is strictly technical.

What other advice do I have?

I recommend using FortiSandbox, especially if your environment relies on FortiGate devices or is integrated with Fortinet. It ensures better compatibility.

I'd rate the solution nine out of ten.

    reviewer1721355

Used for malware analysis and easily integrate with various solutions

  • April 18, 2024
  • Review from a verified AWS customer

What is our primary use case?

We use Fortinet FortiSandbox for malware analysis, seamlessly integrating with various solutions such as FortiGate, FortiMail for Mail Security, FortiWeb, and other endpoints. FortiSandbox also supports ICAP integration with FortiWeb, enhancing its capabilities. These integrations can be configured within FortiSandbox, either internally or externally. Additionally, FortiSandbox offers integration with Exchange as an adapter.

What is most valuable?

The integration is easy with other Fortinet products like FortiMail. The technology of sandboxing FortiSandbox can cover it.

Fortinet FortiSandbox has the capability for manual analysis' Unlike its competitors, FortiSandbox offers functionalities such as banning, sniffing, and analyzing traffic in the network. It can connect as a bandwidth analyzer and provide analytics on the network traffic. It's not limited to just sandboxing; it can also operate at the endpoint, firewall, or gateway levels to submit files for analysis and monitor network traffic for analysts.

What needs improvement?

The solution must focus on API integration with other vendors.

For how long have I used the solution?

I have been using Fortinet FortiSandbox as an integrator since 2017.

What do I think about the stability of the solution?

The solution is stable on dedicated appliances like virtual machines. It also depends on the capabilities of the host system, including CPU and RAM.

What do I think about the scalability of the solution?

The solution is scalable. You can configure up to one hundred nodes as workers. Additionally, you can include up to ninety-eight worker nodes in other models, allowing them to function as a cluster.

It has a defense line from zero-day attacks and sophisticated attacks. You will need an EDR solution and the endpoint.

Six persons are using this solution.

How are customer service and support?

Customer support is friendly and has a good team.

How was the initial setup?

A network security engineer can deploy the solution. The organization's IT department manages administration, including application and network security. Multiple administrators may use FortiSandbox, each with their front-end interface for managing it.

What was our ROI?

The solution provide zero-day attacks which benefitted a lot.

What other advice do I have?

If the customer's operating system is supported, there's no need for a custom package. It's straightforward. If a custom operating system is required, it will take longer due to the need for package customization.

Overall, I rate the solution an eight out of ten.

    reviewer1810833

Real-time analysis capability of FortiSandbox is beneficial for email analysis and is scalable for enterprise companies

  • March 20, 2024
  • Review provided by PeerSpot

What is our primary use case?

We implemented FortiSandbox in three main steps: planning the infrastructure and topology, setting up dedicated Internet access for the sandbox, and configuring manual uploading and email forwarding. For email communication, we used either FortiMail or BCC/force mirroring solutions. FortiSandbox has successfully identified and blocked email attachments containing threats.

What is most valuable?

The real-time analysis capability of FortiSandbox is beneficial for email analysis, but it's not practical for real-time web traffic analysis because users won't wait for the FortiSandbox to complete its analysis before accessing content.

What needs improvement?


For how long have I used the solution?

I have experience working with Fortinet FortiSandbox, but it's been about one year since the first implementation.

What do I think about the stability of the solution?

It is stable

What do I think about the scalability of the solution?

The solution is scalable especially suitable for enterprise businesses.

How are customer service and support?

I haven't needed technical support, and while the pricing can be expensive, the performance and security it offers are commendable.

How was the initial setup?

I rate the initial setup of Fortinet FortiSandbox as a little bit difficult due to licensing issues,

What other advice do I have?

I would recommend FortiSandbox for high-security environments like financial or government sectors. Overall, I rate it an eight out of ten.

    Marvin Reyes

A stable solution that can be used to extract any file and check for malicious activity

  • November 13, 2023
  • Review provided by PeerSpot

What is our primary use case?

We use Fortinet FortiSandbox for malware. Fortinet FortiSandbox is used before entering the firewall to extract any file and check for malicious activity.

What is most valuable?

The solution extracts an attached file before reaching the user and notifies the user if there's something malicious in the attachment received along with an email. The solution prevents such malicious content from entering your enterprise network.

What needs improvement?

When you reach the maximum capacity, you cannot upgrade the solution because its hardware is very expensive. All you can do is discard it and buy another.

For how long have I used the solution?

I have been using Fortinet FortiSandbox for five years.

What do I think about the stability of the solution?

We didn't face any issues with the solution's stability for the three years it was installed on-premises at our data center.

How are customer service and support?

The solution’s technical support is good.

How was the initial setup?

The solution’s initial setup is straightforward.

What was our ROI?

We have seen a return on investment with Fortinet FortiSandbox because it helped us a lot on the security part.

What other advice do I have?

If you're using Fortinet, it's best to use the solution when using FortiGate antivirus because it's all connected and easy to manage.

Overall, I rate Fortinet FortiSandbox an eight out of ten.

    Soufiane Bouha

Highly scalable and offers good support

  • October 19, 2023
  • Review provided by PeerSpot

What is our primary use case?

We use this solution to stay updated on the latest vulnerabilities and attacks. It acts as a database for Fortinet customers to keep their equipment safe and secure.

What needs improvement?

In future releases, I would like to see more automation capabilities.

For how long have I used the solution?

I have a little experience with this solution. We recently purchased new equipment to upgrade from the old range to the new range.

We previously used FortiGate 100D and upgraded to FortiGate 100S now.

What do I think about the stability of the solution?

It is a stable solution.

What do I think about the scalability of the solution?

FortiSandbox is scalable. We have more than 1200 users across branch offices and headquarters.

How are customer service and support?

Whenever we reach out to Fortinet, they give a response in time. Till now, we have had positive interactions.

We connect with FortiGate through qualified vendors, especially regarding SLA and responsiveness.

Which solution did I use previously and why did I switch?

I have experience with other solutions like Sophos and CheckPoint.

How was the initial setup?

What about the implementation team?

We have an IT department managing the solution. There are around 30 people in the team.

What's my experience with pricing, setup cost, and licensing?

FortiSandbox is a subscription that can be purchased from Fortinet directly. Only using FortiSandbox as features purchased as a subscription in the cloud.

We purchased the bundle. So, we got one price for the package. It was a unified package.

What other advice do I have?

Overall, I would rate the solution an eight out of ten.

    Vishnu Gollapudi

A scalable tool to detect malware that offers its users good performance and security

  • September 14, 2023
  • Review provided by PeerSpot

What is our primary use case?

I use Fortinet FortiSandbox to detect malware in the system, especially when uploading or downloading files from the internet.

What is most valuable?

The most valuable feature of the solution is that the performance it offers to users is good, making it useful for us in our company. Fortinet FortiSandbox is more like a SASE solution.

What needs improvement?

The solution is unavailable at a lower cost and can be difficult to deploy. From an improvement perspective, I would like the solution to be made available to users at a cheaper price while making its deployment phase easier.

For how long have I used the solution?

I have experience with Fortinet FortiSandbox.

What do I think about the stability of the solution?

It is a stable solution. I can't rate the solution's stability since I am unaware of it.

What do I think about the scalability of the solution?

It is a scalable solution.

Around 500 people in my institution use the solution.

Which solution did I use previously and why did I switch?

I have some previous experience with Check Point and NetScaler.

How was the initial setup?

The initial setup of Fortinet FortiSandbox is straightforward.

The solution can be deployed on either a cloud or on-premises.

What other advice do I have?

Though I haven't worked with Fortinet FortiSandbox, it is a good solution based on the opinion of one of my colleagues who has worked with it. Fortinet FortiSandbox can be deployed on a cloud or on-premises.

I recommend the solution to those who plan to use it. Fortinet FortiSandbox is a good security option for those who plan to use it.

The overall solution is an eight to nine out of ten.

showing 1 - 10