Description
This article describes that if spam outbreak protection is enabled in an antispam profile, FortiMail will temporarily hold suspicious emails for a certain time if the enabled FortiGuard antispam check (block IP and/or URI filter) returns no result.
After the specified time interval, FortiMail will query the FortiGuard server for the second time. This provides an opportunity for the FortiGuard antispam service to update its database in case a spam outbreak occurs.
It is recommended not to lower the spam outbreak protection period to less than 20 minutes to give enough time for FortiMail to query FortiGuard servers.
Scope
FortiMail.
Solution
- To view the email on hold, go to Monitor -> Mail Queue -> Spam Outbreak.
- To edit the spam outbreak protection period, edit via CLI as the following: (Default is 30 Minutes).
config system fortiguard antispam
set outbreak-protection-period 20
end
- To edit the spam outbreak protection period, edit via the GUI as the following:
