Is it normal to receive too much threat/viruses?

Forum|Forum|8 years ago
August 23, 2017
4 replies
5834 views

Hi,

In my fortimail log (installed in fortimanager) I can find so many threat/viruses, like 1 email with infected file each 2 or 10 Seconds.

With dynamic sources (Majority asia). What I want to know, if you are experiencing the same events in your fortimail? And what are some best practice to reinforce my fortimail and security in general? (I have only fortinet product for security)

Thank you for your answers.

Best answer by neonbit

I sometimes see floods like that when there's a virus outbreak.

My biggest recommendation to reinforce your FortiMail is to get FortiSandbox (either cloud service or local appliance). While the FortiMails virus scanner is great, the FortiSandbox will be able help detect and block 0 day viruses where no signature exists.

I'd also recommend looking at blocking password encrypted files. If your FortiMail cant decrypt it then it can't scan it. FYI there's a new feature with the latest version of FortiMail where it can use words in an email to try and decrypt files but I haven't tested it yet.

neonbitAnswer

New Member

I sometimes see floods like that when there's a virus outbreak.

My biggest recommendation to reinforce your FortiMail is to get FortiSandbox (either cloud service or local appliance). While the FortiMails virus scanner is great, the FortiSandbox will be able help detect and block 0 day viruses where no signature exists.

I'd also recommend looking at blocking password encrypted files. If your FortiMail cant decrypt it then it can't scan it. FYI there's a new feature with the latest version of FortiMail where it can use words in an email to try and decrypt files but I haven't tested it yet.