Troubleshooting Tip: FortiMail DMARC fail but did not quarantine the email

[alya]

Description	This article describes how to troubleshoot when the FortiMail did not quarantine an email when DMARC failed.
Scope	FortiMail.
Solution	FortiMail combines non-final actions set in the antispam profile with the actions set in the DMARC DNS record policy. If the antispam profile DMARC actions are non-final, such as 'Tag subject' and 'Notify', then they are combined with the actions in the DMARC DNS record policy: none, reject, or quarantine.  This happens when the FortiMail configuration is: config antispam settings     set dmarc-failure-action use-profile-action-with-none end Refer to the following document to know more about FortiMail actions: How FortiMail processes email. Solution: To configure FortiMail to use antispam profile action, run the below command: config antispam settings     set dmarc-failure-action use-profile-action end As a result, if the email fails the DMARC check, the action configured in the Antispam profile of FortiMail will be applied and the DMARC record policy will be ignored.