Skip to main content
NeoRant
Explorer III
May 1, 2024
Solved

Fortigate 100D - URL clicks in Email - logs/history

  • May 1, 2024
  • 2 replies
  • 1435 views

Good day all.

 

Just some general knowledge.

 

What is the quickest method to find history/logs blocked hyperlinks/urls in emails and who (source lan ip) clicked on them, i.e. the amount of hits on that url link in email body. We are doing a penetration test and the fortimail purchased has not been put online as that would be the perfect place for logs. I have not logged on to the fortigate box enough as yet to peruse. A cli and/or even gui method is fine. This will be very helpful for knowledge base.

Best answer by hbac

Hi @NeoRant,

 

You can check the Anti-Spam logs. However, I'm not sure if it will provide the hyperlinks/urls. Please refer to https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/688059/checking-the-email-filter-log

 

Regards, 

2 replies

AEK
SuperUser
SuperUser
May 2, 2024

Hi NeoRant

I don't know such feature on FortiGate.

But I guess you might be looking for FortiPhish.

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortiphish.pdf

AEK
hbac
Staff
hbacAnswer
Staff
May 2, 2024

Hi @NeoRant,

 

You can check the Anti-Spam logs. However, I'm not sure if it will provide the hyperlinks/urls. Please refer to https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/688059/checking-the-email-filter-log

 

Regards, 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!