Staff

Technical Tip: Configuring FortiManager and FortiAnalyzer to use Gmail

Forum|Forum|4 years ago
June 3, 2022
0 replies
2981 views

Description

This article describes how to configure FortiManager and FortiAnalyzer to use the Gmail SMTP service.

Scope

FortiManager, FortiAnalyzer.

Solution

Configure the Gmail account to use an App Password: It is needed to configure the Gmail account to allow connections from less secure applications, in this case, the FortiManager/FortiAnalyzer. A Sign in with app passwords is a 16-digit passcode that gives a less secure app or device permission to access the Google Account. App Passwords can only be used with accounts that have Turn on 2-Step Verification.
Add mail settings on the FortiManager or FortiAnalyzer:

config system mail
edit "gmail"
set auth enable

set user "email_account"

set passwd "16-digit-password"

set port 587
set secure-option starttls
set server "smtp.gmail.com"
next
end

Example using a Gmail account 'fortinet.example@gmail.com':

config system mail
edit "gmail"
set auth enable
set passwd 16-digit-password
set port 587
set secure-option starttls
set server "smtp.gmail.com"
set user "fortinet.example"
next
end

Following this, it will be possible to send a test email:

diagnose test connection mailserver gmail <email source> <email destination>

Example:

diagnose test connection mailserver gmail fortinet.example user1@gmail.com
Testing SMTP server gmail, please wait...
* Host smtp.gmail.com:587 was resolved.
* Connected to smtp.gmail.com (173.194.208.109) port 587
.....
> MAIL FROM:<fortinet.example>
> RCPT TO:<user1@gmail.com>
A test email has been sent to user1@gmail.com through gmail.