Deploying FortiMail Gateway mode

This recipe focuses on how to deploy FortiMail gateway mode when positioned within a private network and behind a firewall.

The FortiMail unit, the protected email server, and the email users’ computers are positioned within a private network behind a firewall. The FortiMail unit, however, is located in the demilitarized zone (DMZ) of the firewall, separated from the local email users and the protected email server, which are located on the internal network of the firewall.

Remote email users’ computers and external email servers are located on the Internet, outside of the network protected by the firewall. The FortiMail unit protects accounts for email addresses ending in “@example.com”, which are hosted on the local email server.

Deploying FortiMail in gateway mode involves the following steps:

1. Connecting to FortiMail
2. Setting up FortiMail
3. Configuring DNS records
4. Configuring firewall policies
5. Configuring MUAs to use FortiMail
6. Testing the installation