SPF check is not performed before trusted MTA, when "Received" chain is broken.

In some cases, SPF check may not work properly.

Attachments with passwords containing a dot (.) cannot be decrypted.

DKIM results are not recorded in the Authentication-Results header.

Microsoft OneNote files are detected as plain/text instead of application/octet-stream by the content filter.

In some cases, impersonation exemption may be ignored.

Regex validator error regarding case sensitivity.

Personal safelist is ignored if the safelisted sender typed the same naming schema of the internal user while sending the mail.

Some phishing URLs cannot be parsed.

Personal quarantine mail cannot be released when the mail subject is encoded.

Multiple DMARC reports are incorrectly generated for all domains.

In some cases, random hyperlinks may be generated after the content profile scan.

URLs are sent to FortiSandbox despite the category is not selected in the URL filter profile.

Some email may become expired in Microsoft 365 view.

After upgrading to v7.2.3 release, the block/safe lists become invisible and uneditable.

Timezone is not updated with the daylight saving time (DST) change.

SMTP daemon restarts when there is an virus DB update going on.

In HA mode, changes to the block list and safelist via webmail on the secondary unit does not take effect.

In HA mode, some email may not be viewable or released in the centralized monitor.

In HA mode, local mail user password change via webmail on the secondary unit does not take effect.

Insert disclaimer action does not work for DMARC None check.

Unable to add secondary account through API.

Deleting email from system quarantine won't free up disk space.

Domain admins cannot release multiple messages from the history log.

Associated domain user data is not backed up with CLI command "execute formatmaildisk-backup".

Unable to release email from the folders under system quarantine.

Abnormal memory consumption increase when creating AV file signatures.

A system reboot is required for DMARC report settings to take effect.

The /var/spool folder is not cleaned up properly and thus causes high mail disk usage and SMTP connection rejection.

Scheduled scan in Microsoft 365 View is not logged.

More granular AV/AS log fields to improve search efficiency on FortiAnalyzer.

"Show Remote Content" does not show inline images for email in domain quarantine.

Font viewed in webmail Sent folder is different from the font used when composing email.

Fail to open attachments of secondary accounts.

Domain admins cannot view release logs under release log search.

The administrator list cannot be sorted by status (enabled or disabled).

When admin web access is disabled, new IBE user registration page displays incorrectly.