QR Code URL Scan

[Muri]

Hello,

is there any option to set QR Code URL Scan?

we had today an incident, that e-mail was having a QR code which has leading to malicious webpage.

is there any option to scan those images with QR code with fortimail?

[ozkanaltas]

Hello @Muri ,

You can find a solution for this request in regarding link.

https://community.fortinet.com/t5/FortiMail/Technical-Tip-QR-code-URL-detection/ta-p/228594

[Muri]

Hello,

I set this in CLI (set qr-code-url-scan-status enable) but the qr code still normally appears in recipient email client.

[ozkanaltas]

Hello @Muri ,

FortiMail scan this QR code and queries the URL from FortiGuard. If the link is safe FortiMail doesn't do anything. Like a normal URL sent in the mail body.

I think this URL is miscategorized. When I checked the category for this link, FortiGuard said information technology. In my opinion, because of that FortiMail is not marked as spam. 

[Muri]

Hello @ozkanaltas ,

Ok, we don't use fortigate as Firewall - maybe this is the the Reading why this doesn't work?

Br

[ozkanaltas]

Hello @Muri ,

Some of you are right. If you were using Fortigate, the link in QR would be visitable. However, your users would most likely not be able to visit the other link on the relevant page. Because the other link is in the newly observed domains category.