# Rules for Forcepoint Advanced Malware Detection

Rules to allow communication with the sandbox service are automatically generated based on the NGFW Engine configuration.

The Default File Filtering Policy applies the advanced malware sandbox scan settings defined for the engine to some traffic by default. If you want to exclude specific traffic from these scans, add a more specific rule to a custom File Filtering Policy, or add an Access rule that excludes the traffic from file filtering.