Head-First into the Sandbox

Sandbox and Proactive Signature Detection But sandboxing is resource-intensive. Code needs to fully execute in the sandbox before it can be analyzed, and exploring all code execution paths — possibly including additional modules that malicious code tries to download — takes time. Fortinet combines sandboxing with proactive signature detection to filter traffic before it hits the sandbox, since it’s much faster than simply sandboxing alone.