Technical Tip: How to change the 'FROM' email address field when an automatic stitch is triggered

Description

This article describes that when an automatic stitch is triggered the email comes from noreply@exampleserveraddress.com.

Also, describes two methods to configure email alerts:
- Automation stitches.
- Alert emails.

Solution

The ‘From:’ field is picked up from email alert settings config of 'server':

# config system email-server
    set reply-to "noreply@forti.lab"
    set server "smtp.fortinet.net"  <--- The MAIL FROM is derived from here.
    set port 465
    set authenticate enable
    set username "fortigate-smtp"
    set password **********
    set security smtps
end

Note: The 'MAIL FROM' is not picked up with the 'reply-to', which is another regular SMTP field.

However, to make sure the correct email address in ‘From:’ field when an automatic stitch is triggered then make the below changes:

# config system automation-action
    edit "Config Change_email"
        set action-type email
        set email-to "admin@forti.lab" "manager@example.com"
        set email-subject "Configuration Change Detected"
        set email-from yyyyyy        <----- Set the email address here.
end

Note: The 'MAIL FROM' addresses domain (user@domain.TLD) must be known to the SMTP server as its managed domain, otherwise the email will likely get rejected with an error that relaying is not permitted.

Make sure that email alerts settings are configured as below document:
https://docs.fortinet.com/document/fortigate/6.4.3/administration-guide/526019/email-alerts#Alert