Fortishield Effective

[#1]

Hi...we are in the process of evaluating Fortishield (as many appear to be) and I had a couple of basic questions (hopefully) a) Does the Fortishield simply discard the spam, or tag it?? b) If you are using Fortishield should you disable all other methods (since the fortishield is doing all the work) c) We have a number of scenarios where the mail servers (smtp and pop) are hosted externally outside of the fortigate unit..will fortishield still work?? Thanks!!

[#2]

Hi, 1) Fortishield will only tag spam mails for pOP and IMAp. For smtp , you have the option to either tag or discard it. 2) Fortishield is still not so effective in that it relies only on the blacklist. I thought it was based on heuristics method which gives you 97% spam prevention. trend and symantec uses this method.... As such many porn attachments or even any other attachments that shud be classified as spam is still being let through . Fortishield fails here:( 3) I really dont have an idea on your 3rd query.

[#3]

Hi, thanks for the response.. Yeah we' re still seeing a lot of the porn stuff come in as well, I thought it WAS based on the heuristics method as well?????? Crap Crap...I' m hoping this will be resolved or we' re gonna have to find another solution (most likely Postini) Could this be a difference between the trial and paid versions??? My 3d question does appear to be answered as I' d say about 50% of the spam IS being tagged so it appears to be working... Thanks and I' ll keep my fingers crossed

[#4]

The Spam Functionality is definitely not as strong compared to Trend Micro and Symantec . That' s why Fortinet has launched Fortimail.

[wellington]

FortiShield is SPAM URL and RBL based. What made you think it was heuristic based?

[#6]

[Deleted by Admins]

[Alex_Libenson]

According to 2.8 MR8 Release notes you can also enable URL scan in FortiGuard-AntiSpam: 3.11.2 FortiShield Antispam Description: FortiShield Antispam adds URL look-up to the existing IP address look-up to check for known spam sources and spam emails. The firewall protection profiles now have an option to enable FortiShield URL checking. The WebUI has a new check-box option, while the CLI adds a new command: config firewall profile edit <profile-entry> set <smtp/pop3/imap> spamfsurl end

[#8]

Hi to you all.. Interesting Feedback, as this is what I have done (Enable Fortishield and use in conjunction with the other tools) ... however.. as a consultant looking to recommend solutions to clients, we have been very pleased with the fortinet units overall but Spam is becoming a real problem...if the Fortishield (or Fortiguard Anti-Spam or whatever) can not provide good protection, AND it requires overhead to deal with (tagging messages is a pain) we will have to compare its price/performance against a service like symantec or Postini..upgrading to yet ANOTHER appliance such as the Fortimail is not a viable option for the large degree of users in the 50-A to 200 range which is what our product base is right now.. Bummer as I had great hopes for this...thanks again to you all

[#9]

Hey you guyz Does anybody know why in several machines I' ve installed up till now, the SPAM tagging never works, but rather it throws away all emails recognized as SPAM ?? I' d really appreciate resolving this problem. Thnx.

[#10]

its part of the MR8 changes. If you enabled AV then you can no longer tag spam, just discard it. I guess the guys with the long foreheads decided that it is not important to tag spam.