Hi there
we have a problem that emails from extern being quarantined when there is an html signature file in there. Who can i be shure that bad web links in the mailcontend will be filtered but the signature will keep unaffected?
thanks
Tom
FortiGate 100D V5.6 // Fortimail 200D V5.4
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi
PKH wrote:In advance?Who can i be shure that bad web links in the mailcontend will be filtered but the signature will keep unaffected?
You can't.
If signature is part of message body, any url should be analyzed too.
If your senders are trusted, you could whitelist their signature urls.
regards
/ Abel
Hi abelio
thanks for answering, i thouged that... But, how can i trust signature urls? I know how to whitliste email adresses, but urls... ?
FortiGate 100D V5.6 // Fortimail 200D V5.4
On 5.3: AntiSpam > URL Exempt List.
On 5.4: Security > URL Exempt List.
Can you DM me a sample of the Sig URLs which are triggering?
Dr. Carl Windsor Field Chief Technology Officer Fortinet
It's not easy, it's a lot different because we work with many companies and doctors. Most of the links are on their homepage and on their Facebook page.
I think i have to go another way...
FortiGate 100D V5.6 // Fortimail 200D V5.4
Then I am surprised that they are triggering the block, unless you have the FML to quarantine on unrated. Can you share the relevant logs?
Dr. Carl Windsor Field Chief Technology Officer Fortinet
What kind of Logs exact do u need?
in eatch html signatures are jpg or png, this is also a reason to quarantine for the FortiMail... i see in the Log that each picture is scaned by antivirus with result "clean" but on next step there is an rult to quarantine images/jpg and images/png
Make that sense when the FM scaned with result clean?
FortiGate 100D V5.6 // Fortimail 200D V5.4
>What kind of Logs exact do u need?
Find a few examples where there is a block in the History Log, right mouse click the log and Cross Search (Message) > 10 Minutes then download the resulting logs.
Dr. Carl Windsor Field Chief Technology Officer Fortinet
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1634 | |
1063 | |
751 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.