Technical Tip: How to use office365 email gateway in FortiSIEM to send out email notification

Navigate to 'ADMIN -> Settings -> Email' in the FortiSIEM GUI and configure as follows:

Basic Authentication:

Email Gateway Server: smtp.office365.com
SMTP port: Port 587
Secure Connection (TLS): Enabled
Authentication: Basic
Server Account ID: username@yourcompanyname.com
Default Email Sender: username@yourcompanyname.com
Account Password: Password of Server Account ID

Or:

OAuth Authentication:

Email Gateway Server: outlook.office.com
SMTP port: Port 587
Secure Connection (TLS): Enabled
Authentication: OAuth
Server Account ID: username@yourcompanyname.com
Default Email Sender: username@yourcompanyname.com
OAuth Provider: Microsoft
Client ID: Enter the Client ID for OAuth
Client Secret: Enter the Client Secret associated with the Client ID

Note:

• If 2FA or MFA is enabled, follow Microsoft documentation and configure the application in Azure portal to match the expected URI and make this URI accessible by Microsoft.
• Make sure that the 'Server Account ID' is the same as the 'Default Email Sender'.