You are asked to create some custom VMs to better represent your security environment. In which two FortiSandbox deployments is this supported?…

The ability to create and install custom Virtual Machines (VMs) is a feature exclusive to on-premises FortiSandbox deployments. This includes both the physical FortiSandbox Appliance and the FortiSandbox VM (virtual appliance). This capability allows administrators to create a sandboxing environment that precisely mirrors their organization's standard endpoint builds, including specific operating systems, patch levels, and installed applications. Such customization leads to more accurate and relevant threat detection, as malware is tested in an environment identical to the one it would target on the network. Cloud-based services do not offer this level of customization.

FortiSandbox Cloud: This is a multi-tenant, Fortinet-managed service. It uses a standardized set of VM images and does not permit customers to upload their own for security and operational reasons.

FortiSandbox as a Service (SaaS): This is another term for the FortiSandbox Cloud service. As a shared platform, it does not support user-created custom VMs to maintain service integrity and security for all tenants.

---

1. FortiSandbox 5.0 Administration Guide, Page 161, "Customized VM" section.

The guide explicitly states, "FortiSandbox supports installing customized Windows VM images for sandboxing." The procedures outlined in this chapter, involving CLI commands and direct system access, are only applicable to on-premises models (Appliance and VM) where the administrator has root-level control.

2. FortiSandbox Datasheet, "Features" section.

The datasheet for on-premises FortiSandbox models (e.g., FSA-3000F) lists "Custom VM Images" as a key feature. In contrast, the FortiSandbox Cloud Service Description outlines a pre-defined set of OS environments, with no mention of customer-level customization, highlighting the feature's absence in the cloud offering.

3. Fortinet Cookbook, "FortiSandbox - Custom VM" Recipe (500038).

This official guide details the step-by-step process for creating, packaging, and installing a custom VM. The entire procedure requires direct CLI and hypervisor access, which is only possible on a customer-managed FortiSandbox Appliance or FortiSandbox VM.