configuring Fortianalyser to use gmail email server

[sihenderson121]

I am following the guide below to configure gmail as my email server in Fortianalyser.

I am using this command to test the connection : 

diag test connection mailserver gmail <simonhenderson611@gmail.com> <sihenderson@hotmail.com>

It seems to be connecting to the mail server ok but fails later in the process, here are my results below :

I would appreciate any help towards getting this working.

Thanks Simon

https://community.fortinet.com/t5/FortiManager/Technical-Tip-Configuring-FortiManager-and-FortiAnaly... 

diag test connection mailserver gmail <simonhenderson611@gmail.com> <sihenderson@hotmail.com>

Testing SMTP server gmail, please wait...

* Host smtp.gmail.com:587 was resolved.

* IPv6: 2a00:1450:400c:c04::6c

* IPv4: 74.125.206.108

*   Trying 74.125.206.108:587...

* Connected to smtp.gmail.com (74.125.206.108) port 587

< 220 smtp.gmail.com ESMTP 5b1f17b1804b1-4710f29da7fsm17475225e9.9 - gsmtp

> EHLO FAZVM64-HV

< 250-smtp.gmail.com at your service, [194.72.71.94]

< 250-SIZE 35882577

< 250-8BITMIME

< 250-STARTTLS

< 250-ENHANCEDSTATUSCODES

< 250-PIPELINING

< 250-CHUNKING

< 250 SMTPUTF8

> STARTTLS

< 220 2.0.0 Ready to start TLS

* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519 / id-ecPublicKey

* Server certificate:

*  subject: CN=smtp.gmail.com

*  start date: Sep 22 08:41:50 2025 GMT

*  expire date: Dec 15 08:41:49 2025 GMT

*  issuer: C=US; O=Google Trust Services; CN=WR2

*  SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.

*   Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using sha256WithRSAEncryption

*   Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption

*   Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption

> EHLO FAZVM64-HV

* old SSL session ID is stale, removing

< 250-smtp.gmail.com at your service, [194.72.71.94]

< 250-SIZE 35882577

< 250-8BITMIME

< 250-AUTH LOGIN PLAIN XOAUTH2 PLAIN-CLIENTTOKEN OAUTHBEARER XOAUTH

< 250-ENHANCEDSTATUSCODES

< 250-PIPELINING

< 250-CHUNKING

< 250 SMTPUTF8

> MAIL FROM:<simonhenderson611@gmail.com>

< 530-5.7.0 Authentication Required. For more information, go to

< 530 5.7.0  https://support.google.com/accounts/troubleshooter/2402620. 5b1f17b1804b1-4710f29da7fsm17475225e9.9 - gsmtp

* MAIL failed: 530

> QUIT

< 221 2.0.0 closing connection 5b1f17b1804b1-4710f29da7fsm17475225e9.9 - gsmtp

* Closing connection

Failed to send a test email to <sihenderson@hotmail.com> through gmail.

Please check your configuration.

Command fail. Return code 55

[AEK]

You need to enable authentication

config system mail
  edit "gmail"
    set auth enable
  next
end

[AEK]

But Gmail requires from you to create an App password first.

https://support.google.com/accounts/answer/185833?visit_id=638962318058681685-4218634980&p=InvalidSe...

This is because Gmail doesn't allow to use your password as a single factor of authentication.