FortiClient EMS - SMTP STARTTLS without username

[miciti]

Hello everyone,

I am currently testing FortiClient EMS. When trying to set smtp server to STARTTLS a username and password field appears - well I do not have a username password because the mail filter gets verified with our external ip address (microsoft 365 mail connector). 

Any workaround on this? (Having the same smtp server on my fortigate, I do not need username & password there but it seems to be mandatory in FortiClient EMS... ).

[ozkanaltas]

Hello @miciti ,

According to my research, unfortunately, there is no workaround for this. You can create an account for FortiClientEMS and you can enter that information into the relevant area.

[miciti]

I do not really understand which account I should create for FortiClientEMS. Do you mean a local account on the FortiClient EMS side? (There is no solution to create a user for microsoft 365 mail connector as far as I know).

[ozkanaltas]

Hello @miciti ,

I knew the O365 connector worked like a proxy. Because of that, I said you can create a mail account and enter this information related area.

If O365 doesn't work like this, you need to create a mail account enter this area, and need to give access mail server from FortiClientEMS.

[miciti]

According to "How to set up a multifunction device or application to send emails using Microsoft 365 or Office 36... SMTP Auth will be removed in September 2025 and currently disabled in the Microsoft Security Defaults. SMTP AUTH would be the only solution that works with username / password.

Looking in the future there must be a way to send mails without creating accounts (as the current setup on the FortiGate allows)

[ozkanaltas]

Hello @miciti ,

Thank you for the information. 

You can create a case and you want a feature request from Fortinet. Also, your Fortinet sales representative can forward your request to the internal team.