Fortinet black logo

CLI Reference

ms365 profile action

ms365 profile action

Use this command to apply specific actions the unit takes when encountering an infected email. The actions applied on Microsoft 365 are different from those applied on the FortiMail unit itself.

Syntax

config ms365 profile action

edit <name>

set final-action {discard | move | none | quarantine | quarantine-review}

set move-to-folder-name

set notification-profile

set notification-status {enable | disable}

set replace-message

set replace-status {enable | disable}

end

Variable

Description

Default

<name>

Enter the name of the action profile or create a new one.

final-action {discard | move | none | quarantine | quarantine-review}

Enter one of the following final actions to perform on infected emails:

discard: Move the email message from the user’s inbox to the Junk folder on Microsoft 365.

move: Move the email message from the user's inbox to a specified folder on Microsoft 365. See move-to-folder-name.

none: No action is taken.

quarantine: Create a bulk folder for the user on Microsoft 365 and move the email message from the user’s inbox to their Bulk folder.

quarantine: Send a copy to the FortiMail system quarantine folder and move the email message from the user’s inbox to the Deleted items folder in Microsoft 365.

move-to-folder-name

Enter the name of the folder that the email messages should be moved to. Only applicable when final-action is set to move.

notification-profile

Enter to send out notifications to the recipients specified in the notification profile.

notification-status {enable | disable}

Enable or disable the notification.

disable

replace-message

Enter to replace the email’s contents with a replacement message.

replace-status {enable | disable}

Enable or disable the content replacement.

ms365 profile action

Use this command to apply specific actions the unit takes when encountering an infected email. The actions applied on Microsoft 365 are different from those applied on the FortiMail unit itself.

Syntax

config ms365 profile action

edit <name>

set final-action {discard | move | none | quarantine | quarantine-review}

set move-to-folder-name

set notification-profile

set notification-status {enable | disable}

set replace-message

set replace-status {enable | disable}

end

Variable

Description

Default

<name>

Enter the name of the action profile or create a new one.

final-action {discard | move | none | quarantine | quarantine-review}

Enter one of the following final actions to perform on infected emails:

discard: Move the email message from the user’s inbox to the Junk folder on Microsoft 365.

move: Move the email message from the user's inbox to a specified folder on Microsoft 365. See move-to-folder-name.

none: No action is taken.

quarantine: Create a bulk folder for the user on Microsoft 365 and move the email message from the user’s inbox to their Bulk folder.

quarantine: Send a copy to the FortiMail system quarantine folder and move the email message from the user’s inbox to the Deleted items folder in Microsoft 365.

move-to-folder-name

Enter the name of the folder that the email messages should be moved to. Only applicable when final-action is set to move.

notification-profile

Enter to send out notifications to the recipients specified in the notification profile.

notification-status {enable | disable}

Enable or disable the notification.

disable

replace-message

Enter to replace the email’s contents with a replacement message.

replace-status {enable | disable}

Enable or disable the content replacement.