Question - FortiMail Cloud

Forum|Forum|3 years ago
June 18, 2022
2 replies
1316 views

Hi guys!

I've been looking into the cloud version of FortiMail appliance, but I've a question that I'm sure someone knows the answer (I'm sure it is a "easy" question).

Configuring the FortiMail Cloud is the same as configuring a physical / virtual appliance "in house" where the mail server is, the thing is, in this setup all the inbound SMTP traffic is port forwarded to the FortiMail before reaching the email server, causing 100% of the emails to pass by the FortiMail first.

But with FortiMail Cloud, although the MX Records will point to the cloud appliance, the mail server will have to be exposed to the internet in order to receive the inbound emails from the cloud appliance, making it possible for someone to deliver emails directly to the mail server, if they know the public IP. Is there any specific implementation setup recommended to avoid exposing the mail server to the internet? Or the only solution is using a firewall to only allow inbound SMTP traffic from the cloud appliance?

Thanks!

FortiMail

A

Anonymous_User

Contributor

Hello @urvasjets ,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

A

Anonymous_User

Contributor

Hello @urvasjets ,

As per my research on your query, I would suggest adding the trusted host which is the IP address of the administrator. This can be configured under System > Administrator.

"In the Trusted Hosts fields, enter an IPv4 or IPv6 address or subnet that the administrator can use to log in. To allow the administrator to access FortiMail from any IP address. Enter 0.0.0.0 / 0.0.0.0. To add more trusted hosts, click the + (plus) icon."

Screenshot 2022-06-22 122619.png