The Pipeline mode option on the FortiSandbox scan profile's Advanced tab allows jobs to be scanned within the same VM instance sequentially, one after another, without shutting the VM instance down between jobs. This reduces the overhead associated with repeatedly starting and stopping VM instances, thereby improving scanning performance. A VM instance can continue to be reused in pipeline mode as long as the scanning job does not alter the VM instance's status; if the VM status changes (or a job is rated malicious/suspicious), the instance is shut down, restored, and the job is rescanned in a fresh VM to confirm the rating.
Community Discussion