FortiGate is configured to send suspicious files to a FortiSandbox for in-line inspection. The administrator creates a new VDOM, and then generates some traffic so what the new VDOM sends a file to the FortiSandbox for the first time. Which is true regarding this scenario?