Technical Tip: Append specific keywords to email s...

FortiMail

FortiMail provides advanced, multi-layer protection against the full spectrum of email-borne threats

Article Id 305056

Description

This article describes how to tag all incoming email messages that contain a password-protected attachment.

Scope

FortiMail.

Solution

Enable DLP using the following hidden command:

config system global

set data-loss-prevention enable

end

Navigate to Data Loss Prevention -> Rule & Profile -> Rule in the GUI. Create a new DLP rule:

password attachment.png

Screenshot 2024-03-18 083334.png

Go to Data Loss Prevention -> Rule & Profile -> Profile in the GUI. Create a new profile as below:

To configure the DLP action:

tag subject.png

DLP profile.png

Apply the new DLP profile to the current Recipient Policy accordingly.

Result:

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Append specific keywords to email subjects if the email contains a password-protected attachment