Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
NiekStrijker
New Contributor

FortiMail release email from Sandbox quarantine keeps blocking email

Hi,

 

We are using FortiMail and FortiSandbox. If the Sandbox blocks an email it is put in the Sandbox quarantine. Sometimes there are false positives in the Sandbox quarantine, when you want to release them they go again trough the Sandbox and endup again in the Sandbox quarantine. Can we bypass this?

4 REPLIES 4
Hosemacht
Contributor II

Hey there.

 

witch Fortimail software version do you use?

there was an Resolved issue with 6.0.0

 

490890 When email re-scan is on, quarantined messages cannot be released in some cases. 

sudo apt-get-rekt

sudo apt-get-rekt
NiekStrijker

Hi, we use v6.0,build160,191003 (6.0.7 GA) We can release messages but false positives keep getting back in the quarantine. Do we need to disable re-scan?

Hosemacht

Hello,

 

indeed in this case you have to disable the rescan option.

if the sandbox detect your attachment in the first run as suspicious, then it will do it in following runs aswell.

 

Cheers

sudo apt-get-rekt

sudo apt-get-rekt
NiekStrijker

Hi Hosemacht, thank you I will give it a try

Labels
Top Kudoed Authors