Skip to main content
pvsbremen
New Member
March 5, 2018
Question

Mailencryption by using Subjecttitel

  • March 5, 2018
  • 1 reply
  • 6195 views

Hello,

we are using Fortimail VM (v5.3,build568). We want to use IBE Encryption by using a word in the subject. I have done these steps: http://cookbook.fortinet.com/how-do-i-add-encryption-to-confidential-emails/

But it dont works. I have create a new profile (Profiles/conten-action). See image i have attached

 

When i have "pvsmail" in the subject, the mail goes out whithout an encryption. The encryption works, when i chenge the policy access control, delivery. But then every mail is encrypted.

I hope anyone can help me whith this problem

 

Thangs

 

MJ

    1 reply

    abelio
    SuperUser
    SuperUser
    March 5, 2018

    Hi

    Two things are probably happening:

    - your content profile it's not applied to policy actually controlling desired traffic

    - something it's not being matched in your dictionary

     

    Use LOGS to check. Use the Policy ID column in History logs to follow the traffic

     

     

    pvsbremen
    pvsbremenAuthor
    New Member
    March 6, 2018

    Hi,

    thank you for the quick answere.

    I have check the policy ( policy/Recipient Policy/Outbound). I change the field content to our encryption profile. I have configure the Dictionary Profile by using the Howto from Fortinet. See images I have attached.Is that the right way?

    Yesterday i updated the fortimail to:  v5.4,build714,180111 (5.4.4 GA)

     

    Sorry it is my first fortimail, I dont know where i can search in the logs. Where can i find the Policy ID?

     

    Thangs

     

    Marc

     

    abelio
    SuperUser
    SuperUser
    March 6, 2018

    Hello

    Monitor -> Log-> History Logs

    Policy ID is one column of these logs.

    You could see there 3 numbers separated by colons.

    first one stand for access list id

    second -> IP policy id

    third -> recipient policy id

     

    i.e: 1:3:7 mean access list id 1, IP policy id 3 and recipient policy id 7.

     

    Then, you could catch exactly which acl/policies are controlling your email traffic

     

     

    I hope it helps