Reply to thread

Message

<blockquote data-quote="ForgottenSeer 58943" data-source="post: 693484">FortiSandbox is not prone to FP&#039;s. It has a pre-screening system that takes a mere millisecond, but eliminates most of the FP&#039;s by examining specific parameters of a program. If those parameters aren&#039;t met the file is tossed into the sandbox for further evaluation - automatically. In the last 12 months my FortiSandbox has evaluated 102,000 files. It&#039;s triggered approximately 4 alerts in that time. One was Ccleaner in June, which we know turns out to not be an FP. But when triggered I immediately purged Ccleaner/Agomo from my network, which turned out to be a good decision. It&#039;s triggered on Panda, but we know Panda has been up to funny business and riskware activities lately. I can&#039;t remember the other file, but more recently it triggered on Bullguard which I WILL accept as an FP. So 1 confirmed FP out of 102,000 files isn&#039;t anywhere near being prone to FP&#039;s. Especially for a complex, powerful, realtime sandbox evaluation appliance.In the case of your cleaner, it surely could be my second FP in a year. Maybe, maybe not. But since it&#039;s a cleaner app I will go with trusting the sandbox since there are many alternative cleaners available. With that being said, I am sure the cleaner is just fine and works great! I will send it to our Fortinet lab for further evaluation and update accordingly.</blockquote>

[QUOTE="ForgottenSeer 58943, post: 693484"] FortiSandbox is not prone to FP's. It has a pre-screening system that takes a mere millisecond, but eliminates most of the FP's by examining specific parameters of a program. If those parameters aren't met the file is tossed into the sandbox for further evaluation - automatically. In the last 12 months my FortiSandbox has evaluated 102,000 files. It's triggered approximately 4 alerts in that time. One was Ccleaner in June, which we know turns out to not be an FP. But when triggered I immediately purged Ccleaner/Agomo from my network, which turned out to be a good decision. It's triggered on Panda, but we know Panda has been up to funny business and riskware activities lately. I can't remember the other file, but more recently it triggered on Bullguard which I WILL accept as an FP. So 1 confirmed FP out of 102,000 files isn't anywhere near being prone to FP's. Especially for a complex, powerful, realtime sandbox evaluation appliance. In the case of your cleaner, it surely could be my second FP in a year. Maybe, maybe not. But since it's a cleaner app I will go with trusting the sandbox since there are many alternative cleaners available. With that being said, I am sure the cleaner is just fine and works great! I will send it to our Fortinet lab for further evaluation and update accordingly. [/QUOTE]

Verification