Technical Tip: Webmail access issue

burakyigit · ‎01-02-2023

Description

This article describes how to solve the webmail access issue on FortiMail

The end-user sees the following error while trying to access Webmail:

'Login Failed. Please try again'.

FortiMail admin sees the following error in the Mail Event:

'WebMail: Login for 'test@example.com' from 192.168.2.10 failed'.

Scope

FortiMail.

Solution

The user is allowed to access the FortiMail portal based on the resource_profile/authentication_profile in the first matching recipient policy (matching the recipient address) and not the sender address.
If there is a policy matching in the recipient address pattern with no resource_profile/authentication_profile, there will be no quarantine webmail access.

In the below example, the end-user (test@example.com) has no webmail access due to there being no authentication profile in the policy ID:2 under the recipient policy.

Make sure to have an authentication profile on the policy such as the one below.

Note.

If the email matches the system policy, no other policies (domain) will be checked. Consider this, while checking the authentication profile on the policy.