Email filter and policy match:

[rbsskals_rsa]

Hi!

I have a problem understanding if this is a bug or behavior by design. I have created a policy to check forward traffic from wan interface to interface where mail server resides and assigned email filter security policy to tag emails on all protocols, but after inspecting email filter log I've discovered that some mail are tagged as spam although destination address is mail server address and destination port is 110. I have no mail client on mail server. Multi POP is not enabled on those accounts.

Sorry for my English.

[jb_kalm]

Hi, I think it depends on what options you have configured in the email filter profile. For example, if you have Fortiguard > URL Check enabled then if the message contains a URL that is known by Fortiguard to be related to Spam it will be blocked. 

Thanks,

jb