FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
btan
Staff & Editor
Staff & Editor
Article Id 381156
Description This article explains how to configure the Google SMTP server in FortiClient EMS to send email alerts.
Scope FortiClient EMS v7.0 and v7.2
Solution

Since September 2024, Microsoft SMTP server smtp.office365.com has no longer accepted SMTP authentication, hence it can no longer be used in FortiClient EMS to send email alerts.

 

In FortiClient EMS Diagnostic Logs, the below error logs can be seen:

 

2025-02-20 15:25:07,834 DEBUG ems_logger 7 7 Default Error connecting to SMTP server (535, b'5.7.139 Authentication unsuccessful, basic authentication is disabled. [KL1PR0401CA0021.apcprd04.prod.outlook.com 2025-02-20T07:25:07.843Z 08DD50FDFB8FBD43]').
2025-02-20 15:25:12,836 DEBUG ems_logger 7 7 Default Email Error: (530, b'5.7.57 Client not authenticated to send mail. Error: 535 5.7.139 Authentication unsuccessful, basic authentication is disabled.

2025-02-20T15:31:53.959+0800DEBUGservice/regular_timeout.go:1678[site:default]: log = <56> date=2025-02-20 time=15:31:25 type=event subtype=ems-reports logid=0000000007 emsserial=FCTEMSXXXXXXXXXX devid=FCTEMSXXXXXXXXX vd="default" msg="Default Error connecting to SMTP server (535, b'5.7.8 Username and Password not accepted. For more information, go to\n5.7.8 https://support.google.com/mail/?p=BadCredentials d2e1a72fcca58-7324273e34bsm13427470b3a.108 - gsmtp')."

 

As an alternative, configure the Google SMTP server smtp.gmail.com to send email alerts.

Prerequisites for this setup are:

  • A proper working Gmail account.
  • 2-step verification on this Gmail account must be turned on.

 

  1. Login to https://myaccount.google.com/ with a Gmail account.
  2. On the left navigation panel, select Security.
  3. Ensure that 2-step verification is ON, if not, configure it accordingly, and use the Google Authenticator app if possible.
  4. Once 2-step verification is ON, open a new browser tab and go to https://myaccount.google.com/apppasswords
  5. Input the app name, for example, EMS, then it will provide a 16-character password.

app-p1.PNG

 

  1. In FortiClient EMS -> System Settings -> SMTP Server, configure the settings as per the below screenshot. In the password field, enter the 16-character password given in 5.

 

gmail-SMTP-1.PNG

 

  1. Select 'Send Test Email'.
  2. Verify if the Test Email is being sent to the configured 'Test recipient' after 5 minutes. If yes, the SMTP server configuration is set up correctly.
Contributors