FortiSandbox for Amazon Web Service enables businesses to defend against advanced threats locally in the cloud, working collaboratively with network, application, email, endpoint security, and other third-party security solutions, or as an extension of their local security architecture to take advantage of cloud resiliency and scale.
FortiSandbox uses a two-stage process to identify zero-day advanced malware, including ransomware, and automatically mitigates by sharing relevant threat intelligence in real time through inline security controls.
Phase 1: Pre-filtering is performed by an engine driven by Fortinet threat intelligence maintained by our global research team, FortiGuard Labs.
Phase 2: Perform dynamic behavioral analysis on objects to determine if they are malicious. Rating decisions are returned to the original device in real time and are delivered locally via the JSON API in Fortinet Fabric security products, third-party vendor security products, or via STIX format.