On FortiMail, message and attachment inspection — including submitting files to FortiSandbox for analysis and receiving the scan verdict — is orchestrated by the mail filtering daemon, mailfilterd, which manages the antivirus, antispam, and sandbox scanning pipeline applied to each message. Enabling diagnose debug application mailfilterd exposes the queueing, submission, and verdict-return activity for sandboxed files in real time, letting an administrator pinpoint where in the submission-to-verdict cycle a delay originates. This is distinct from daemons handling unrelated functions such as external host status polling (hoststatd), deferred SMTP delivery retries (defert), or quarantine file transfer (oftpd), none of which participate in the FortiSandbox scan workflow.
Community Discussion