Hi Guys,
I am grateful for this community, some great teachers here, I am learning alot about Fortimail and have done some good work so far.
I have now fully integrated my fortimail in the DMZ, the fortigate fwl, getting smtp traffic, inspection of smtp traffic actually WORKING, thank God.
However, one problem lol. ALOT of false positives and people are squealing. I used the full inspection rules instructed by guide below - antispam, antivirus, content etc and I tell you mails are being inspected hard.
https://ebin.pub/fortinet-fortimail-lab-guide-for-fortimail-72.html
Can anyone here post me a good setup for traffic inspection (not so robust/sensitive)?
I am currently using the recipient policy as that is what was selected by my team. I was the one that configured the fortimail from scratch and deployed it(with the help/knowledge of you guys of course).
@Cajuntank, I never used DNSBL as in my experience FortiGuard (IP Reputation) is best quality and gives much less false positives.
I get that. My thought process on the matter; with the short amount of time I have had the product in production mind you, is I feel better knowing I am not "putting all of my eggs in one basket" for that determination balanced with not going overboard with that logic.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1738 | |
1108 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.