Description
This article describeshow to configure email alerts because sometimes the FortiGate cannot access to the account in order to send the email alert.
Scope
FortiGate.
Solution
This is an example of the configuration in FortiGate:
Configure Microsoft office365 account in the FortiGate.
Go to System -> Advanced -> Email Service option.
SMTP SERVER: smtp.office365.com
PORT: 587
AUTHENTICATION: example@domain.it
Password: xxxxxxxxx
SECURITY MODE: STARTTLS.
Note: The password entered should be the app password generated from Microsoft account
- An App Password is a 16-digit passcode that gives a less secure app or device permission to access the Microsoft Account.
- App Passwords can only be used with accounts that have 2-Step Verification turned on.
For more information on how to set up App Password on the Microsoft account, refer to the below document:

To configure alert email from GUI.
Go to Log & Report -> Email Alert Settings.

On the same page, select the events for the alerts.

To configure alert email from CLI.
config system email-server
set port 587
set server smtp.office365.com
set authenticate enable
set username example@domain.it
set password *************
end
set port 587
set server smtp.office365.com
set authenticate enable
set username example@domain.it
set password *************
end
config alertemail setting
set username example@domain.it
set mailto1 admin1@example.com
set mailto2 admin2@example.comend
Following this, it will be possible to send alert mails.
Test this with following command:
Test this with following command:
diagnose log alertmail test
Related article:
Wildcard FQDN firewall address should not be used in a firewall policy