Fortinet black logo

Cookbook

Enabling SPF checking for incoming email

Copy Link
Copy Doc ID 9538f879-a447-11ea-8b7d-00505692583a:756422
Download PDF

Enabling SPF checking for incoming email

You can enable SPF in AntiSpam profiles and in session profile settings. Note that if you select Bypass SPF checking in a session profile, SPF checking will be bypassed even if it is enabled in an AntiSpam profile.

To enable SPF in an AntiSpam profile:
  1. Go to Profile > AntiSpam > AntiSpam and click New, or edit an existing profile.
  2. Under Scan Configurations, enable SPF. You can also expand SPF to have more granular control.
To enable SPF in a session profile:
  1. Go to Profile > Session > Session and click New, or edit an existing profile.
  2. Under Sender Validation, select the appropriate option from the SPF check drop-down menu: Disable, Enable, or Bypass.
  3. If the sender domain DNS record lists SPF authorized IP addresses, use SPF check to compare the client IP address to the IP addresses of authorized senders in the DNS record. An unauthorized client IP address increases the client sender reputation score, while an authorized client IP address decreases the client sender reputation score.

Enabling SPF checking for incoming email

You can enable SPF in AntiSpam profiles and in session profile settings. Note that if you select Bypass SPF checking in a session profile, SPF checking will be bypassed even if it is enabled in an AntiSpam profile.

To enable SPF in an AntiSpam profile:
  1. Go to Profile > AntiSpam > AntiSpam and click New, or edit an existing profile.
  2. Under Scan Configurations, enable SPF. You can also expand SPF to have more granular control.
To enable SPF in a session profile:
  1. Go to Profile > Session > Session and click New, or edit an existing profile.
  2. Under Sender Validation, select the appropriate option from the SPF check drop-down menu: Disable, Enable, or Bypass.
  3. If the sender domain DNS record lists SPF authorized IP addresses, use SPF check to compare the client IP address to the IP addresses of authorized senders in the DNS record. An unauthorized client IP address increases the client sender reputation score, while an authorized client IP address decreases the client sender reputation score.