Skip to main content
h_celik
h_celik
New Member
October 21, 2024
Solved

Same domain Outbreak-protection delay

  • October 21, 2024
  • 1 reply
  • 1391 views

Hello,
We have a hybrid configuration on our domain. When we receive mail from our M365 mailboxes to our on-prem exchange mailboxes, the mail is classified as fortiguard spam outbreak. We has opened a case. Tac engineer gave the following suggestion;
1) Change the level from 'High' to 'Medium'.
2) Place the domain or sender IP in the Safe list (it will bypass the entire AntiSpam profile).
3) Create a specific Recipient policy with the AntiSpam profile where FortiGuard Spam outbreak protection is disabled.
4) Set the spam outbreak protection time to minimum (6 minutes).

I wonder if I change the outbreak protection level to low or medium, how will this affect us?

Best answer by AEK

Hi Celik

The default value is medium.

I always find the default values in FML the best values for most usage, and I usually don't change default value except if I know what I'm doing.

Medium or low means less mail types will be deferred for outbreak.

Ref:  https://docs.fortinet.com/document/fortimail/7.6.0/cli-reference/18342/system-fortiguard-antispam

 

 

1 reply

AEK
SuperUser
AEKAnswer
SuperUser
October 21, 2024

Hi Celik

The default value is medium.

I always find the default values in FML the best values for most usage, and I usually don't change default value except if I know what I'm doing.

Medium or low means less mail types will be deferred for outbreak.

Ref:  https://docs.fortinet.com/document/fortimail/7.6.0/cli-reference/18342/system-fortiguard-antispam

 

 

AEK
    h_celik
    h_celikAuthor
    New Member
    October 21, 2024

    Hello,

    I changed high to medium, and I'll monitor logs this week

     

    Thanks, sincerely

      h_celik
      h_celikAuthor
      New Member
      October 28, 2024

      Hello,

       

      It works.

        Terms & ConditionsAccessibility statement