FortiSandbox Cloud (PaaS)
20 – 4,000 files per hour, up to 8 – 1,600 users
- Files per hour
- 20 – 4,000
- Users
- 8 – 1,600
- Local VMs
- ,
The FortiSandbox Cloud (PaaS) detonates suspicious files in instrumented virtual machines and reports what they actually do, at 20 – 4,000 files per hour. Verdicts feed back automatically to every FortiGate, FortiMail and FortiClient in the Fabric.
20 to 4,000 files an hour with no hardware to deploy. The decision here is rarely about throughput and almost always about whether your samples may leave your premises, for regulated data that question is usually already answered for you, and it rules the cloud tier out before capacity is discussed.
How to work out whether it fits
The arithmetic a datasheet leaves out. If any of it does not match your situation, that is worth a call rather than a guess.
Size on what survives pre-filtering, which is a small fraction of what arrives. Fortinet's figures already assume the filter is on and test at 80% documents to 20% executables. A useful rule: for most organisations, well under 1% of inbound email attachments reach detonation. Start from your actual attachment volume, apply that, and you will usually find the entry tier is enough, the question is almost never capacity, it is whether the samples may leave your premises at all.
Highlights
- 20 – 4,000 files per hour
- Verdicts shared automatically across the Security Fabric
- Catches targeted malware no signature has seen
- No hardware to deploy
Typical deployments
- Organisations with no regulatory bar on external sample analysis
- Fast deployment without a hardware procurement cycle
- Distributed estates with no central data centre
What this includes
Fortinet publishes no throughput table for this product; it is licensed per user, endpoint, workload or account. What follows is capability and sizing, not benchmarks.
Capacity
Effective sandboxing throughput is tested on files that are 80% documents and 20% executables, including both static and dynamic analysis, with pre-filtering enabled. User counts assume a ratio of one user per 25 emails.
| Effective sandboxing throughput (files/hour) | 20 – 4,000 |
|---|---|
| Number of users | 8 – 1,600 |
| Number of local VMs | , |
Sources
- Fortinet Product Matrix (July 2026), retrieved 2026-09-01
Reproduced from Fortinet published documentation and subject to change without notice. Where a figure is load-bearing for your design, ask us to confirm it in writing before you order; we will.