SPF CHECK SET TO SEND TO JUNK FOLDERS OF PROTECTED DOMAINS
Please is it possible mails from external domains with NO SPF Record or SPF=Hard fail to be sent to the junk folders of our protected domains instead of coming in to our system quarantine. So with that, the administrators of the protected domains can decide whether to release the mail or not.
you should have on FortiMail a message that alerts the receiver of SPAM such as this. The end users can decide to release it from quarantine by clicking on the link in the mail.
Is the FortiMail hosting the mails or just forwarding to a mail server?
I don't know FortiMail enough for it, but would think it might be possible for certain mails to be moved to certain folders, if the FortiMail is hosting the mail. If it is a gateway only, you can try tagging the mail with SPFFAIL for example in the mail header. On the mail server you can create another rule to move these mails (fitting a header SPFFAIL) to a certain folder.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.