Skip to main content
NeoRant
Explorer III
March 11, 2026
Solved

FML cloud mail delivery

  • March 11, 2026
  • 8 replies
  • 745 views

Details:

Could you kindly explain fml cloud working with an on-prem exchange server?

Best answer by NeoRant

Thanks for all the responses, will have to do added google research then to get more insight then.

8 replies

AEK
SuperUser
SuperUser
March 12, 2026

Tell Exchange admin to do the following and he should understand:

  • Set MTA relay for external delivery to FortiMail_IP
  • Set incoming SMTP Host to FortiMail_IP

If you want your domain not flagged as SPAM by remote MTAs, you need to have delivrability score 10/10. Before you put in prod always check with mail-tester.com or equivalent. You need to have score 10/10.

AEK
NeoRant
NeoRantAuthor
Explorer III
March 17, 2026

Thank you @AEK 

AEK
SuperUser
SuperUser
March 29, 2026

Hi NeoRant

Unfortunately I don't have MS Exchange in my lab and I'm not specialist in MS Exchange.

In all my FML integrations with MS exchange I always ask the Exchange admin to set MTA relay for external delivery and set incoming SMTP Host.

Hope some more experienced member can help.

AEK
Andrianv
New Member
March 23, 2026

Dealing with emails that get stuck in spam folders is annoying, especially when you think everything is set up right.

 

It usually comes down to small mistakes in your SPF or DKIM records that are hard to spot just by looking at the raw code. Testing your setup before sending out a big batch is the only way to know for sure if those technical bits are actually working.

 

You should check this tool https://unspam.email/ to see how your mail looks to filters. It gives a good breakdown of what might be tripping up the sensors. Getting that green light early saves you from a lot of trial and error later on.

NeoRant
NeoRantAuthor
Explorer III
March 31, 2026

Thank you @Andrianv 

SkylarDe
New Member
April 1, 2026

Setting up the mail flow for FortiMail Cloud can be a bit of a head-scratcher at first, especially when you're trying to make sure all the MX records and SPF entries align perfectly. I’ve found that the trickiest part is usually ensuring the 'Internal Hosts' are defined correctly so you don't accidentally end up with an open relay or blocked outbound mail.

One thing that helped me was double-checking the receive connectors on the Microsoft 365 or Google Workspace side to make sure they’re specifically trusting the FortiMail IP ranges. If those aren't locked down, you might see some intermittent 'Access Denied' errors. It’s definitely worth a quick audit of those connector settings just to be safe.

NeoRant
NeoRantAuthor
Explorer III
April 1, 2026

Thank you @SkylarDe 

NeoRant
NeoRantAuthorAnswer
Explorer III
April 2, 2026

Thanks for all the responses, will have to do added google research then to get more insight then.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!