Email filter with FortiOS 7.4

[Yoda1]

I am new to Fortigate, until now we used Sophos and Watchguard FWs and several products for Antispam.

A read a little about email filtering with 7.2 and now I installed the demo with 7.4 and I am wondering about the reduced ruleset in contrast to 7.2. The documentation says now:

FortiGuard-based filters

The FortiGate consults FortiGuard servers to help identify spammer IP address or emails, known phishing URLs, known spam URLs, known spam email checksums, and others. For more information, refer to the FortiGuard website.

There are five FortiGuard spam filtering options:

• IP address check
• URL check
• Detect phishing URLs in email (requires URL check to be enabled)
• Email checksum check
• Spam submission

I miss the option to deny SPF failed mails, as well options to configure quarantine, allowed attachment types and so on. Beyond that, happens email filtering only on the local appliance or will some emails be uploaded to fortigate cloud services?

Is let's encrypt certificate autoenrollment for SMTP available?

Finally, is this product capable to filter company emails from spam with good results or should I consider another solution for professional email filtering?

Thank you

[gfleming]

Where did you learn that 7.0 will work and 7.2 and 7.4 won't work? That doesn't seem right to me...

Have you spoken to TAC yet?

You can review the LifeCycle document for support dates: https://support.fortinet.com/Information/ProductLifeCycle.aspx

[phillipevans]

While there have been changes in the ruleset compared to 7.2, FortiGate's FortiGuard-based filters are quite effective in identifying spammer IP addresses, phishing URLs, and known spam. However, I understand your concern about missing options like SPF failed mail denial and attachment type configuration.
To address these specific needs, you might want to consider using external tools like mail tester to complement FortiGate's filtering. MailTester can help you check SPF records and validate email addresses, adding an extra layer of email security.