DOCUMENT LIBRARY

Administration Guide

Email concepts and process workflow
- Email protocols
- Client-server connections in SMTP
- DNS role in email delivery
- How FortiMail processes email
- FortiMail operation modes
- FortiMail high availability modes
- FortiMail management methods
Setting up FortiMail system
- Connecting to the web UI or CLI
- Choosing the operation mode
- Running the Quick Start Wizard
- Connecting to FortiGuard services
- Gateway mode deployment
- Transparent mode deployment
- Server mode deployment
- Testing the installation
- Backing up the configuration
Using the dashboard
- Viewing the dashboard
- Using the CLI Console
Using FortiView
- Viewing mail statistics
- View threat statistics
- View outbreak statistics
- Viewing top user statistics
- Viewing current IP sessions
Monitoring the system
- Viewing log messages
- Managing the quarantines
- Managing the mail queue
- Viewing the greylist statuses
- Viewing sender, authentication and endpoint reputation
- Managing archived email
- Viewing generated reports
Centrally monitoring the HA cluster
- Viewing the cluster status
- Viewing HA cluster mail statistics
- Viewing HA cluster threat statistics
- Searching the HA cluster logs
Configuring system settings
- Configuring network settings
- Configuring administrator accounts and access profiles
- Configuring system time, options, and other system options
- Configuring mail settings
- Customizing GUI, replacement messages, email templates, SSO, and Security Fabric
- Configuring RAID
- Using high availability (HA)
- Managing certificates
- Using FortiSandbox antivirus inspection
- Configuring FortiGuard services
- System maintenance
Configuring domains and users
- Configuring protected domains
- Managing users
- Configuring user aliases
- Configuring address mappings
- Configuring IBE users
- Managing the address book (server mode only)
- Sharing calendars and address books (server mode only)
- Migrating email from other mail servers (server mode only)
Configuring policies
- What is a policy?
- How to use policies
- Controlling SMTP access and delivery
- Controlling email based on IP addresses
- Controlling email based on sender and recipient addresses
Configuring profiles
- Configuring session profiles
- Configuring antispam profiles and antispam action profiles
- Configuring antivirus profiles, file signatures, and antivirus action profiles
- Configuring content profiles and content action profiles
- Configuring resource profiles
- Workflow to enable and configure authentication of email users
- Configuring authentication profiles
- Configuring LDAP profiles
- Configuring dictionary profiles
- Configuring security profiles
- Configuring IP pools
- Configuring email, IP and GeoIP groups
- Configuring notification profiles
Configuring security settings
- Configuring the FortiGuard URL filter
- Configuring content disarm and reconstruction
- Configuring authentication reputation
- Configuring email quarantines and quarantine reports
- Configuring the block lists and safe lists
- Configuring greylisting
- Configuring bounce verification and tagging
- Configuring sender rewriting scheme
- Configuring endpoint reputation
- Training and maintaining the Bayesian databases
Configuring encryption settings
- Configuring IBE encryption
- Configuring certificate bindings
Configuring data loss prevention
- DLP configuration workflow
- Defining the sensitive data
- Configuring DLP rules
- Configuring DLP profiles
Archiving email
- Email archiving workflow
- Configuring email archiving accounts
- Configuring email archiving policies
- Configuring email archiving exemptions
Logs, reports and alerts
- About FortiMail logging
- Configuring logging
- Configuring report profiles and generating mail statistic reports
- Configuring alert email
Microsoft 365 threat remediation
- Microsoft 365 protection workflow
- Configuring Microsoft 365 accounts
- Configuring profiles
- Configuring scanning policies
- Monitoring log messages
Installing firmware
- Testing firmware before installing it
- Installing firmware
- Clean installing firmware
- Upgrading firmware on HA units
Best practices and fine tuning
- General security tuning
- System security tuning
- Network topology tuning
- High availability (HA) tuning
- SMTP connectivity tuning
- Antispam tuning
- Policy tuning
- System maintenance tips
- Performance tuning
Troubleshooting
- Establish a system baseline
- Define the problem
- Search for a known solution
- Create a troubleshooting plan
- Gather system information
- Troubleshoot hardware issues
- Troubleshoot GUI and CLI connection issues
- Troubleshoot FortiGuard connection issues
- Troubleshoot MTA issues
- Troubleshoot antispam issues
- Troubleshoot HA issues
- Troubleshoot resource issues
- Troubleshoot bootup issues
- Troubleshoot installation issues
- Contact Fortinet customer support for assistance
Setup for email users
- Training Bayesian databases
- Managing tagged spam
- Accessing the personal quarantine and webmail
- Sending email from an email client (gateway and transparent mode)
Appendix A: Supported RFCs
Appendix B: Maximum Values
Appendix C: Port Numbers
Appendix D: Wildcards and regular expressions
- Special characters with regular expressions and wildcards
- Case sensitivity
- Modifiers
- Word boundary
- Syntax
- Examples
Appendix E: Working with TLS/SSL
- About TLS/SSL
- How TLS/SSL works
- FortiMail support of TLS/SSL
- Troubleshooting FortiMail TLS issues
Appendix F: PKI Authentication
- Introduction to PKI authentication
- FortiMail PKI architecture
- Configuring PKI authentication on FortiMail
Change Log

Home FortiMail 7.0.6 Administration Guide

7.0.6

Appendix A: Supported RFCs

Appendix A: Supported RFCs

SMTP RFCs:

RFC 1213 (Obsoletes: 1158) (Management Information Base for Network Management of TCP/IP-based Internets: MIB-II) reference 1
RFC 1918 (Obsoletes: 1627, 1597) (Address Allocation for Private Internets) reference 1, 2, 3, 4
RFC 1985 (SMTP Service Extension for Remote Message Queue Starting)
RFC 2034 (SMTP Service Extension for Returning Enhanced Error Codes)
RFC 2045 (Obsoletes: 1590, 1522, 1521, 1342, 1341) (Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies)
RFC 2505 (Anti-Spam Recommendations for SMTP MTAs)
RFC 2634 (Enhanced Security Services for S/MIME)reference 1
RFC 2920 (Obsoletes: 2197, 1854) (SMTP Service Extension for Command Pipelining)reference 1
RFC 3207 (Obsoletes: 2487) (SMTP Service Extension for Secure SMTP over TLS)
RFC 3461 (Obsoletes: 1891) (SMTP Service Extension for Delivery Status Notifications (DSNs)) reference 1
RFC 3463 (Obsoletes: 1893) (Enhanced Mail System Status Codes) reference 1
RFC 3464 (Obsoletes: 1894) (Extensible Message Format for Delivery Status Notifications)
RFC 3635 (Obsoletes: 2665, 2358, 1650) (Definitions of Managed Objects for the Ethernet-like Interface Types) reference 1
RFC 4954 (Obsoletes: 2554) (SMTP Service Extension for Authentication)
RFC 5321 (Obsoletes: 2821, 1869, 1651, 1425, 974, 821) (SMTP) reference 1, 2, 3, 4
RFC 5322 (Obsoletes: 2822, 822) (Internet Message Format) reference 1, 2, 3, 4
RFC 5751 (Obsoletes: 3851 (Secure/Multipurpose Internet Mail Extentsion (S/MIME) Version 3.2) reference 1, 2, 3, 4
RFC 6376 (Obsoletes: 5672, 4871, 4870) (DomainKeys Identified Mail (DKIM) Signatures)reference 1
RFC 6522 (Obsoletes: 3462, 1892) (Multipart/Report Content Type for the Reporting of Mail System Administrative Messages)
RFC 6409 (Obsoletes: 4409, 2476) (Message Submission) reference 1
RFC 7208 (Obsoletes: 4408) (Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail) reference 1Note: This RFC is partially supported. Macros and EXISTS modifiers are currently treated as neutral.

IMAP RFCs

RFC 2088 (IMAP4 Non-synchronizing Literals)
RFC 2177 (IMAP4 Idle Command)
RFC 2221 (Login Referrals)
RFC 2342 (IMAP4 Namespace)
RFC 2683 (IMAP4 Implementation Recommendations)
RFC 2971 (IMAP4 ID Extension)
RFC 3348 (IMAP4 Child Mailbox Extension)
RFC 3501 (Obsoletes: 2060, 1730) (IMAP4 rev1)
RFC 3502 (IMAP Multiappend Extension)
RFC 3516 (IMAP4 Binary Content Extension)
RFC 3691 (Unselect Command)
RFC 4315 (Obsoletes: 2359) (UIDPLUS Extension)
RFC 4469 (Catenate Extension)
RFC 4731 (Extension to SEARCH Command for Controlling What Kind of Information Is Returned)
RFC 4959 (Extension for Simple Authentication and Security Layer (SASL) Initial Client Response)
RFC 5032 (WITHIN Search Extension)
RFC 5161 (Enable Extension)
RFC 5182 (Extension for Referencing the Last SEARCH Result)
RFC 5255 (IMAP Internationalization)
RFC 5256 (Sort and Thread Extensions)
RFC 5258 (Obsoletes: 3348) (List Command Extensions)
RFC 5267 (Contexts for IMAP4)
RFC 5819 (Extension for Returning STATUS Information in Extended LIST)
RFC 6154 (LIST Extension for Special-Use Mailboxes)
RFC 6851 (MOVE extension)
RFC 7162 (Obsoletes: 5162, 4551) (IMAP Extensions: Quick Flag Changes Resynchronization (CONDSTOR) and Quick Mailbox Resynchronization (QRESYNC))

POP3 RFCs

RFC 1939 (Obsoletes: 1725, 1460, 1225, 1081) (POP3)
RFC 2449 (POP3 Extension Mechanism)

Other RFCs

RFC 1155 (Obsoletes: 1065) (Structure and Identification of Management Information for TCP/IP-based Interface)
RFC 1157 (Obsoletes: 1098, 1067) (SNMP v1)
RFC 1213 (Obsoletes: 1158) (MIB 2)
RFC 2578 (Obsoletes: 1902, 1442) (Structure of Management Information Version 2)
RFC 2579 (Obsoletes: 1903, 1443) (Textual Conventions for SMIv2)
RFC 2595 (Using TLS with IMAP, POP3 and ACAP)
RFC 3410 (Obsoletes: 2570) (SNMP v3)
RFC 3416 (Obsoletes: 1905, 1448) (SNMP v2)

Previous

Next

Appendix A: Supported RFCs

Appendix A: Supported RFCs

SMTP RFCs:

RFC 1213 (Obsoletes: 1158) (Management Information Base for Network Management of TCP/IP-based Internets: MIB-II) reference 1
RFC 1918 (Obsoletes: 1627, 1597) (Address Allocation for Private Internets) reference 1, 2, 3, 4
RFC 1985 (SMTP Service Extension for Remote Message Queue Starting)
RFC 2034 (SMTP Service Extension for Returning Enhanced Error Codes)
RFC 2045 (Obsoletes: 1590, 1522, 1521, 1342, 1341) (Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies)
RFC 2505 (Anti-Spam Recommendations for SMTP MTAs)
RFC 2634 (Enhanced Security Services for S/MIME)reference 1
RFC 2920 (Obsoletes: 2197, 1854) (SMTP Service Extension for Command Pipelining)reference 1
RFC 3207 (Obsoletes: 2487) (SMTP Service Extension for Secure SMTP over TLS)
RFC 3461 (Obsoletes: 1891) (SMTP Service Extension for Delivery Status Notifications (DSNs)) reference 1
RFC 3463 (Obsoletes: 1893) (Enhanced Mail System Status Codes) reference 1
RFC 3464 (Obsoletes: 1894) (Extensible Message Format for Delivery Status Notifications)
RFC 3635 (Obsoletes: 2665, 2358, 1650) (Definitions of Managed Objects for the Ethernet-like Interface Types) reference 1
RFC 4954 (Obsoletes: 2554) (SMTP Service Extension for Authentication)
RFC 5321 (Obsoletes: 2821, 1869, 1651, 1425, 974, 821) (SMTP) reference 1, 2, 3, 4
RFC 5322 (Obsoletes: 2822, 822) (Internet Message Format) reference 1, 2, 3, 4
RFC 5751 (Obsoletes: 3851 (Secure/Multipurpose Internet Mail Extentsion (S/MIME) Version 3.2) reference 1, 2, 3, 4
RFC 6376 (Obsoletes: 5672, 4871, 4870) (DomainKeys Identified Mail (DKIM) Signatures)reference 1
RFC 6522 (Obsoletes: 3462, 1892) (Multipart/Report Content Type for the Reporting of Mail System Administrative Messages)
RFC 6409 (Obsoletes: 4409, 2476) (Message Submission) reference 1
RFC 7208 (Obsoletes: 4408) (Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail) reference 1Note: This RFC is partially supported. Macros and EXISTS modifiers are currently treated as neutral.

IMAP RFCs

RFC 2088 (IMAP4 Non-synchronizing Literals)
RFC 2177 (IMAP4 Idle Command)
RFC 2221 (Login Referrals)
RFC 2342 (IMAP4 Namespace)
RFC 2683 (IMAP4 Implementation Recommendations)
RFC 2971 (IMAP4 ID Extension)
RFC 3348 (IMAP4 Child Mailbox Extension)
RFC 3501 (Obsoletes: 2060, 1730) (IMAP4 rev1)
RFC 3502 (IMAP Multiappend Extension)
RFC 3516 (IMAP4 Binary Content Extension)
RFC 3691 (Unselect Command)
RFC 4315 (Obsoletes: 2359) (UIDPLUS Extension)
RFC 4469 (Catenate Extension)
RFC 4731 (Extension to SEARCH Command for Controlling What Kind of Information Is Returned)
RFC 4959 (Extension for Simple Authentication and Security Layer (SASL) Initial Client Response)
RFC 5032 (WITHIN Search Extension)
RFC 5161 (Enable Extension)
RFC 5182 (Extension for Referencing the Last SEARCH Result)
RFC 5255 (IMAP Internationalization)
RFC 5256 (Sort and Thread Extensions)
RFC 5258 (Obsoletes: 3348) (List Command Extensions)
RFC 5267 (Contexts for IMAP4)
RFC 5819 (Extension for Returning STATUS Information in Extended LIST)
RFC 6154 (LIST Extension for Special-Use Mailboxes)
RFC 6851 (MOVE extension)
RFC 7162 (Obsoletes: 5162, 4551) (IMAP Extensions: Quick Flag Changes Resynchronization (CONDSTOR) and Quick Mailbox Resynchronization (QRESYNC))

POP3 RFCs

RFC 1939 (Obsoletes: 1725, 1460, 1225, 1081) (POP3)
RFC 2449 (POP3 Extension Mechanism)

Other RFCs

RFC 1155 (Obsoletes: 1065) (Structure and Identification of Management Information for TCP/IP-based Interface)
RFC 1157 (Obsoletes: 1098, 1067) (SNMP v1)
RFC 1213 (Obsoletes: 1158) (MIB 2)
RFC 2578 (Obsoletes: 1902, 1442) (Structure of Management Information Version 2)
RFC 2579 (Obsoletes: 1903, 1443) (Textual Conventions for SMIv2)
RFC 2595 (Using TLS with IMAP, POP3 and ACAP)
RFC 3410 (Obsoletes: 2570) (SNMP v3)
RFC 3416 (Obsoletes: 1905, 1448) (SNMP v2)

Previous

Next