Select how the link will behave when click handling applies, and a user clicks a link.

Select which URL rating category a URL must match in order to receive click handling.

For all other URL categories not selected, you can use sandbox-status {enable | disable} to send them to FortiSandbox for more scanning

Select which URL rating category a URL must match in order to be reached through FortiIsolator.

isolator-img-src-status {enable | disable}

Enable to use FortiIsolator with the URLs of images that are stored on remote web servers for HTML email.

Enter the prefix https:// and then the FQDN or IP address of FortiIsolator.

Note: The https:// protocol prefix is required.

Select whether to remove or rewrite an HTML tag if it is malformed.

Select which URL rating category a URL must match in order to be neutralized.

neutralize-img-src-status {enable | disable}

Enable to neutralize URLs of images that are stored on remote web servers.

Note: When you update FortiMail firmware from a previous version, default values are applied to any new settings. If this setting is new, the default results in a change in behavior. If you prefer the previous behavior, then enter:

set neutralize-img-src enable

Select which URL rating category a URL must match in order to be removed.

remove-img-src-status {enable | disable}

Enable to remove the URLs of images that are stored on remote web servers.

rewrite-category {all | default | phishing | unrated}

Select which URL rating category a URL must match in order to be rewritten.

rewrite-img-src-status {enable | disable}

Enable to rewrite the URLs of images that are stored on remote web servers.

Note: When you update FortiMail firmware from a previous version, default values are applied to any new settings. If this setting is new, the default results in a change in behavior. If you prefer the previous behavior, then enable this setting.

Enter the prefix https:// and then the FQDN or IP address of FortiMail. When users click a hyperlink, they will be directed to the rewritten URL on FortiMail first.

Note: The https:// protocol prefix is required.

Tip: The URL is rewritten in the format:

https://example.com/fmlurlsvc/?fewReq/baseValue&url=originalUrlEscaped

where originalUrlEscaped is the original URL in URL-encoded format. If you want to convert it back to see the original URL, you can use a text editor or online service such as:

https://www.urldecoder.org

sandbox-click-action {allow-with-confirmation | block | submit-only}

Select how the link will behave when a user clicks a link during a FortiSandbox scan:

• allow-with-confirmation: Allow access with a warning.

• block: Block access.

• submit-only: Allows access while sending the URLs for scanning.

sandbox-status {enable | disable}

For all other URL categories not selected in click-category {all | default | phishing | unrated},enable this setting if you want to send them to FortiSandbox for scanning

sandbox-timeout <timeout_int>

When the URLs are sent to FortiSandbox for scanning, it can take some time to get the results. Enter how long (in seconds) to wait for FortiSandbox scan results. If FortiMail does not get a reply in this time, then click handling instead uses the action specified in sandbox-timeout-action {allow | allow-with-confirmation | block}.