FortiSandbox-Platform-as-a-Service
Next-Level FortiSandbox 5.0: Smarter, Faster, Scalable

Click here to jump to more pricing!

Please Note: All Prices are Inclusive of GST

Overview:

Sandboxing: a must-have in modern cyber defense

As the modern threat landscape, powered by AI enhanced threats bypass traditional defenses, sandboxing has become a critical layer in detecting the unknown and evasive —especially zero-day or fileless malware.

The truth about sandboxing speed

Contrary to outdated beliefs, sandboxing doesn’t have to slow things down. FortiSandbox delivers fast, AI-driven threat analysis—proving that high security and high performance can go hand in hand. One of the most common misconceptions about sandboxing is that it’s too slow for real-time protection. In reality, FortiSandbox is engineered for speed and efficiency without compromising on deep threat analysis and protection. It uses a two-tiered AI-powered scanning approach—static and dynamic—to rapidly and accurately assess files.

The Static AI Scan can process up to 50 files per second, immediately identifying known malicious attributes and returning a threat verdict within milliseconds. If a file contains active content (such as embedded URLs, scripts, macros, or executables) but shows no obvious static threats, it is passed to the Dynamic AI Scan, which spins up an isolated virtual environment to detonate and observe the file’s behavior—typically within a few seconds.

In a well-resourced production environment, most files are scanned in under a second, with a median scan time of just five seconds. This time-frame is well within acceptable thresholds for network, email, and endpoint solutions to safely hold files during analysis—ensuring high detection efficacy without slowing down operations.

Features:

FortiSandbox combines advanced threat detection with performance and flexibility, making it a powerful addition to any security stack. This section summarizes key features that define its effectiveness—from AI-driven static and dynamic analysis to flexible deployment models and seamless integration across network, endpoint, email, and cloud environments. Whether you’re looking for speed, scalability, or automated response, FortiSandbox delivers where it matters most.

Continuously Evolving AI-Powered Detection

With FortiSandbox 5.0, the Advanced AI Engine is natively integrated into the platform, combining real-time performance with purpose-built machine learning. Trained daily on thousands of newly collected malware samples across various file types, the engine adapts continuously by analyzing undetected samples and refining detection models accordingly. Each model undergoes two weeks of rigorous validation to ensure accuracy and reliability. This process enables FortiSandbox to detect, analyze, and protect against both known and unknown threats—faster and without added latency—helping organizations stay ahead of emerging attacks without the need for additional security controls or resources.

Real-Time Phishing Detection and Prevention

The FortiSandbox provides protection against zero-day phishing. The URLs extracted from emails and embedded from documents are processed in the FortiGuard cloud. The web pages are downloaded in real-time and are analyzed using patented technologies to determine any phishing signs.

Intelligent Threat Investigation with MITRE-Aligned Insights

FortiSandbox provides a comprehensive Job Detail Report for threat analysis and intelligence for Virtual Security Analyst. The report maps discovered malware techniques to MITRE ATT&CK framework with built-in powerful investigative tools that allow Security Operations (SecOps) teams to download captured packets, original file, tracer log, and malware screenshot. STIX 2.0 compliant IOCs provide rich threat intelligence and actionable insight after files are examined.

Flexible and Scalable Universal VM Deployment

Universal VM is an all-in-one license for the flexibility to choose any local, cloud, or custom virtual machine (VM) type and operating system. It detaches VM licenses from the OS licenses to reduce licensing complexity.

Resilient High-Availability Architecture for Continuous Protection

The FortiSandbox provides native clustering support of up to 99 worker nodes that expands throughput capacity providing uninterrupted critical operations.

Specifications:

	FSA-PaaS	FSA-VMS1	FSA-VMS2	FSA-VMS3	FSA-VMS49	FSA-500G	FSA-1500G	FSA-3000G
Capacity
Local VM Capacity	—	0–8	0–16	0–32	0–64	2–14	2–28	8–150
Cloud VM Expansion	1–200	1–200	1–200	1–200	1–200	1–80	1–120	1–200
Performance and Capacity
Effective Sandboxing Throughput (Files/Hr)	5,000	8,000	24,000	48,000	96,000	10,000	32,000	160,000
Static Analysis Throughput (Files/Hr)	10,000	20,000	60,000	120,000	240,000	20,000	80,000	320,000
Dynamic Analysis Throughput (Files/Hr)	160	200	400	800	—	500	1,000	5,700
FortiMail Throughput (Emails/Hr)	50,000	80,000	240,000	480,000	960,000	100,000	320,000	1,600,000
MTA Adapter Throughput (Emails/Hr)	—	20,000	60,000	120,000	240,000	25,000	80,000	320,000
Sniffer Mode Throughput (Gbps)	—	1	TBD	TBD	TBD	0.5	4	9.6
Number of Users	650	1,000	3,000	6,000	12,000	1,250	4,000	20,000

Documentation:

Download the FortiSandbox-Platform-as-a-Service Data Sheet (PDF).

Pricing Notes:

• All Prices are Inclusive of GST
• Hardware plus FortiCare Premium and FortiGuard Enterprise Protection
  Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service) plus term of contract
• Hardware plus FortiCare Premium and FortiGuard SMB Protection
  Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, SMB Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering , Antispam and FortiGate Cloud subscription service) plus term of contract
• Hardware plus FortiCare Premium and FortiGuard Unified Threat Protection (UTP)
  Hardware Unit, FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service) plus term of contract
• Enterprise Protection (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam, Security Rating, IoT Detection, Industrial Security, FortiConverter Svc, and FortiCare Premium)
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Enterprise Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam, Security Rating, Industrial Security and FortiConverter Service)
• SMB Protection (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam, plus FortiGate Cloud subscription and FortiCare Premium)
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, SMB Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering, Antispam and FortiGate Cloud subscription service)
• Unified Threat Protection (UTP) (IPS, Advanced Malware Protection, Application Control, Web & Video Filtering, Antispam Service, and FortiCare Premium)
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, UTP Services Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct, Application Control, Web & Video Filtering and Antispam Service)
• Advanced Threat Protection (IPS, Advanced Malware Protection Service, Application Control, and FortiCare Premium)
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Advanced Threat Protection Bundle (IPS, AV, Botnet IP/Domain, Mobile Malware, FortiGate Cloud Sandbox including Virus Outbreak and Content Disarm & Reconstruct Service, Application Control)
• FortiCare Essential Support
  FortiCare Essential Ticket Handling, Hardware Replacement, Firmware and General Upgrades, Application Control
• FortiCare Premium Support
  FortiCare Premium Ticket Handling, Advanced Hardware Replacement (NBD), Firmware and General Upgrades, Application Control
• FortiCare Elite Support
  FortiCare Premium Support with FortiCare Elite Ticket Handling.
• Prices are for one year of Premium RMA support. Usual discounts can be applied.
• Annual contracts only. No multi-year SKUs are available for these services.
• Contact Fortinet Renewals team for upgrade quotations for existing FortiCare contracts.
• Pricing and product availability subject to change without notice.