FortiMail
FortiMail provides advanced, multi-layer protection against the full spectrum of email-borne threats
srahmat
Staff
Staff
Article Id 319783
Description This article describes how BEC-Impersonation Analysis cannot be detected if the user's display name has an apostrophe.
Scope FortiMail Cloud and FortiMail v7.4.x, v7.6.x.
Solution

This issue happens when the 'Display Name Pattern' in the Impersonation Profile has an apostrophe such as 'Drake O'Sulli'  and the 'Pattern Type' uses a wildcard such as the example below.

 

image.png

 

For a workaround, change the 'Pattern Type' to 'Regular expression' and the Display name pattern to 'Drake O\'Sulli'. The image below is an example:

 

image.png