Fortigate 100D - URL clicks in Email - logs/history

[NeoRant]

Good day all.

Just some general knowledge.

What is the quickest method to find history/logs blocked hyperlinks/urls in emails and who (source lan ip) clicked on them, i.e. the amount of hits on that url link in email body. We are doing a penetration test and the fortimail purchased has not been put online as that would be the perfect place for logs. I have not logged on to the fortigate box enough as yet to peruse. A cli and/or even gui method is fine. This will be very helpful for knowledge base.

[AEK]

Hi NeoRant

I don't know such feature on FortiGate.

But I guess you might be looking for FortiPhish.

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortiphish.pdf

[hbac · Accepted solution]

Hi @NeoRant,

You can check the Anti-Spam logs. However, I'm not sure if it will provide the hyperlinks/urls. Please refer to https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/688059/checking-the-email-filter-log

Regards,