Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
PKH
New Contributor

How to exclude html signatures from beeing quarantined

Hi there

we have a problem that emails from extern being quarantined when there is an html signature file in there. Who can i be shure that bad web links in the mailcontend will be filtered but the signature will keep unaffected?

 

thanks

Tom

FortiGate 100D V5.6 // Fortimail 200D V5.4

FortiGate 100D V5.6 // Fortimail 200D V5.4
8 REPLIES 8
abelio
Valued Contributor

Hi

PKH wrote:

Who can i be shure that bad web links in the mailcontend will be filtered but the signature will keep unaffected?

 

In advance?

You can't.

 

If signature is part of message body, any url should be analyzed too.

If your senders are trusted, you could whitelist their signature urls.

 

 

regards




/ Abel

regards / Abel
PKH
New Contributor

Hi abelio

 

thanks for answering, i thouged that... But, how can i trust signature urls? I know how to whitliste email adresses, but urls... ?

FortiGate 100D V5.6 // Fortimail 200D V5.4

FortiGate 100D V5.6 // Fortimail 200D V5.4
Dirty_Wizard_FTNT

On 5.3: AntiSpam > URL Exempt List.

On 5.4: Security > URL Exempt List.

Carl_Windsor_FTNT

Can you DM me a sample of the Sig URLs which are triggering?

Dr. Carl Windsor Field Chief Technology Officer Fortinet

PKH

It's not easy, it's a lot different because we work with many companies and doctors. Most of the links are on their homepage and on their Facebook page.

I think i have to go another way...

FortiGate 100D V5.6 // Fortimail 200D V5.4

FortiGate 100D V5.6 // Fortimail 200D V5.4
Carl_Windsor_FTNT

Then I am surprised that they are triggering the block, unless you have the FML to quarantine on unrated.    Can you share the relevant logs?

Dr. Carl Windsor Field Chief Technology Officer Fortinet

PKH
New Contributor

What kind of Logs exact do u need?

in eatch html signatures are jpg or png, this is also a reason to quarantine for the FortiMail... i see in the Log that each picture is scaned by antivirus with result "clean" but on next step there is an rult to quarantine images/jpg and images/png

Make that sense when the FM scaned with result clean?

FortiGate 100D V5.6 // Fortimail 200D V5.4

FortiGate 100D V5.6 // Fortimail 200D V5.4
Carl_Windsor_FTNT

>What kind of Logs exact do u need?

 

Find a few examples where there is a block in the History Log, right mouse click the log and Cross Search (Message) > 10 Minutes then download the resulting logs.

Dr. Carl Windsor Field Chief Technology Officer Fortinet

Labels
Top Kudoed Authors