problem to intercept redirect url with FortiMail

[GiuseppeB]

Hello,

I don't know how to solve a problem with the fortimail filters, I'm getting emails where the link inside points to a URL that is not categorized as malicious (e.g. Information Technology) but then it redirects to a URL that is actually malicious and fortimail does not intercept this.

How could I resolve this situation? How could I make fortimail intercept links that cause redirects in the email?

BR,

Giuseppe

[AEK]

Hello Giuseppe

When you hover the link what do you see?

In case you see the bad link then it can be filtered by FML. But if you see the good link then I don't think FortiMail can help further, and the problem could be on the target site itself.

[GiuseppeB]

When I go over the link I see the link before the redirect to the phishing URL. So potentially this method is enough to evade fortimail, which leaves me quite perplexed that there isn't a method that checks the links that cause redirects.

[AEK]

FortiMail uses FortiGuard rating, so if the site is rated "information technology" it will be allowed.

Nevertheless you will be lucky if you have enterprise license, as it contains a feature called "URL Click Protection".

Check data sheet on page 7.

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/FortiMail.pdf

Check the feature if that is what you are looking for.

https://docs.fortinet.com/document/fortimail/7.4.2/administration-guide/922690/configuring-content-d...