FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
mdeparisse_FTNT
Article Id 213771
Description This article describes how to configure FortiManager and Fortianalyzer to use the GMAIL SMTP service.
Scope How to configure Gmail service on FortiManager Fortianalyzer and Gmail to accept the connection.
Solution
  1. Gmail account in the FortiManager or FortiAnalyzer:

 

config system mail
    edit "gmail"
        set passwd "user"

        set port 587
        set secure-option starttls
        set server "smtp.gmail.com"
        set user "test"
    next
end

 

Following the configuration in the FortiGate, it is needed to configure the Gmail account to allow connections from less secure applications, in this case, the FortiManager and FortiAnalyzer.

 

  1. Configure the Gmail account to use an App Password:

 

An App Password is a 16-digit passcode that gives a less secure app or device permission to access the Google Account.

App Passwords can only be used with accounts that have 2-Step Verification turned on.

 

  1. Following this, it will be possible to send test email:

    diag test connection mailserver gmail <source SMTP address> <destination SMTP address

 

  1. Troubleshooting command if any issues:

 

exe tac report
diagnose debug application fazmaild 255
diag debug enable

diag test connection mailserver gmail <source SMTP address> <destination SMTP address>

 

Flow capture for FortiManager / FortiAnalyzer 7.6 or above:

 

diagnose test application fazmaild ?

<Integer> Debug level (08).

diagnose debug application fazmaild 8

diagnose debug timestamp enable

diagnose debug enable

 

  1. Capture and send us the results:

 

diagnose debug disable <- To stop it.

diagnose debug reset

 

Related articles:

Technical Tip: How to configure email alerts for config and policy status changes on FortiManager

Technical Tip: How to set up Email Notifications with notification.fortinet.net