Technical Tip: Configuring FortiGate Email Alerts in a Multi-VDOM Environment
Description
This article describes how to configure email alerts on a FortiGate device with multiple VDOMs.
Scope
FortiGate.
Solution
To configure email alerts on FortiGate, refer to the following documents:
Troubleshooting Tip: Email alert
In a multi-VDOM environment, since SMTP traffic is triggered by the management (root) VDOM, a firewall policy must be defined to allow SMTP/SMTPS traffic from the source interface 'inter-vdom link' to the destination interface 'external port'.
Under the global VDOM, define a loopback IP or the IP of the physical interface as the FortiGuard source IP. Then, on the firewall policy, set this IP (configured under FortiGuard) as the source.
config system fortiguard
set source ip <---- Can be a loopback IP or IP of the physical interface.
set interface-select-method sdwan <----- If SD-WAN is used.
'All' can also be used as the source in the firewall policy, eliminating the need for the above configuration change.