custom-user-control-status {enable | disable}

If your corporation has its own user authentication tools, enable this option and enter the URL.

Also configure url-custom-user-control and url-forgot-pwd.

expire-emails <days_int>

Enter the number of days that the secured mail will be saved on the FortiMail unit.

expire-inactivity <days_int>

Enter the number of days the secured mail recipient can access the FortiMail unit without registration.
For example, if you set the value to 30 days and if the mail recipient did not access the FortiMail unit for 30 days after they registers on the unit, the recipient will need to register again if another secured mail is sent to them. If the recipient accessed the FortiMail unit on the 15th days, the 30-day limit will be recalculated from the 15th day onwards.

expire-passwd-reset <hours_int>

Enter the password reset expiry time in hours.
This is for the recipients who have forgotten their login passwords and request for new ones. The secured mail recipient must reset their password within this time limit to access the FortiMail unit.

expire-registration <days_int>

Enter the number of days that the secured mail recipient has to register on the FortiMail unit to view the mail before the registration expires. The starting date is the date when the FortiMail unit sends out the first notification to a mail recipient.

read-notification {enable | disable}

Enable to send the read notification the first time the mail is read.

secure-compose {enable | disable}

Select to allow the secure mail recipient to compose an email. The FortiMail unit will use policies and mail delivery rules to determine if this mail needs to be encrypted.

For encrypted email, the domain of the composed mail’s recipient must be a protected one, otherwise an error message will appear and the mail will not be delivered.

secure-reply {enable | disable}

Allow the secured mail recipient to reply to the email with encryption.

secure-forward {enable | disable}

Allow the secured mail recipient to forward the email with encryption

service-name <name_str>

Enter the name for the IBE service. This is the name the secured mail recipients will see once they access the FortiMail unit to view the mail.

status {enable | disable}

Enable the IBE service you have configured.

unread-days

Enter the unread days.

unread-notif-rcpt

Enable to send the unread notification to the recipient.

unread-notif-sender

Enable to send the unread notification to the sender.

unread-notification {enable | disable}

Enable to send the unread notification if the message remains unread for 14 days by default.

url-about <url_str>

You can create a file about the FortiMail IBE encryption and enter the URL for the file. The mail recipient can click the “About” link from the secure mail notification to view the file.

If you leave this option empty, a link for a default file about the FortiMail IBE encryption will be added to the secure mail notification.

url-base <url_str>

Enter the FortiMail unit URL, for example, https://192.168.100.20, where a mail recipient can register or authenticate to access the secured mail.

url-custom-user-control <url_str>

Enter the URL where you can check for user existence. This command appears after you enable custom-user-control-status.

url-forgot-pwd <psw_str>

Enter the URL where users get authenticated. This command appears after you enable custom-user-control-status.