The article provides steps on how to use office365 email gateway in FortiSIEM to send out email notification
Scope
FortiSIEM
Solution
Navigate to 'ADMIN -> Settings -> Email' in the FortiSIEM GUI and configure as follows:
Basic Authentication:
Email Gateway Server: smtp.office365.com SMTP port: Port 587 Secure Connection (TLS): Enabled Authentication: Basic Server Account ID: username@yourcompanyname.com Default Email Sender: username@yourcompanyname.com Account Password: Password of Server Account ID
Or:
OAuth Authentication:
Email Gateway Server: outlook.office.com SMTP port: Port 587 Secure Connection (TLS): Enabled Authentication: OAuth Server Account ID: username@yourcompanyname.com Default Email Sender: username@yourcompanyname.com OAuth Provider: Microsoft Client ID: Enter the Client ID for OAuth Client Secret: Enter the Client Secret associated with the Client ID
Note:
If 2FA or MFA is enabled, follow Microsoft documentation and configure the application in Azure portal to match the expected URI and make this URI accessible by Microsoft.
Make sure that the 'Server Account ID' is the same as the 'Default Email Sender'.
