Skip to main content
Cajuntank
Cajuntank
Contributor III
May 15, 2026
Question

FortiMail Cloud and Threat Feeds

  • May 15, 2026
  • 2 replies
  • 62 views

I am using FortiMail Cloud - hosted and wondering about Threat feeds. I see in the documentation it’s supposed to be a configurable option under the Security section (admin guide reports this). I have the option showing under my AntiSpam profile to choose one, but of course none exist and I cannot find it anywhere to setup/configure. Am I to assume this was just not removed from the full code as it got ported for cloud use and not allowed or is this something I need to open a TAC case and request to “open up” as it’s treated on a case by case basis? 

2 replies

AEK
SuperUser
AEK
SuperUser
May 17, 2026

  

Hi Ehtisham

Did you enable Advanced view on the ?

 

 

Otherwise which FML version are you using?

AEK
    Cajuntank
    CajuntankAuthor
    Contributor III
    May 17, 2026

    Yes, I normally work in Advanced view unless I need to claw something back from my Office 365 tenant. Then I swap to the Microsoft API view (those are my only two views shown to me). According to my instance, Fortinet has me on 26.1 which I think equates to 7.6 of the normal FortiMail, I just am not sure about a minor rev equivalence.

    AEK
    SuperUser
    AEK
    SuperUser
    May 17, 2026

    I know on FML appliance the feature was introduced in version 7.6, but on FML Cloud it is not clear.

    https://docs.fortinet.com/document/fortimail/7.6.0/cli-reference/985815/system-threat-feed

    Does the command “config system threat-feed” exist on your FML Cloud? If so then try use CLI to configure it and see if it helps.

    AEK
      Cajuntank
      CajuntankAuthor
      Contributor III
      May 18, 2026

      Just looked. “threat-feed” was not an available sub-command to “config system” 

      AEK
      SuperUser
      AEK
      SuperUser
      May 18, 2026

      Then it is probably not implemented yet on FML Cloud.

      As a workaround you may use threat feed on the firewall instead. You can then block the bad IP list at FW level before they reach FML.

      AEK
      Terms & ConditionsAccessibility statement