Technical Tip: How to disable the Sender Alignment check by using the sender IP in FortiMail

[cysaw]

Description	This article describes how to disable the Sender Alignment check by using the sender IP in FortiMail
Scope	FortiMail.
Solution	Navigate to Profile -> AntiSpam  -> AntiSpam. Clone one of the AntiSpam profiles used and configure a name for it. For example, the profile name is: 'SenderAlignmentDisabled-AS_Inbound'. Edit the cloned AntiSpam profile. Look for 'Business email compromise', disable the option 'Sender alignment', and select 'Create'. Navigate to Policy -> IP Policy -> IP Policy. Create a new IP Policy. Configure the Public IP of the sender as 'Source'. Add the newly created AntiSpam profile 'SenderAlignmentDisabled-Inbound_AS'. Consider adding any other profiles like AntiVirus, Content Profile and etc to this IP policy. Expand the option 'Miscellaneous'. Enable this option, 'Take precedence over recipient based policy match'. Select Create. Move this new IP Policy on top of the existing IP policies.