Contents. Fortinet 4.0 Patch 2

Contents

Contents

Introduction ............................................................................................ 11

Registering your Fortinet product............................................................................... 11

Customer service & technical support ....................................................................... 11

Training .......................................................................................................................... 11

Documentation ............................................................................................................. 12

Scope ............................................................................................................................. 12

Conventions .................................................................................................................. 13

IP addresses............................................................................................................. 13

Cautions, Notes, & Tips ............................................................................................ 13

Typographical conventions ....................................................................................... 13

Command syntax conventions.................................................................................. 14

What’s new ............................................................................................. 17

Key concepts & workflow...................................................................... 19

Management methods .................................................................................................. 19

Configuration workflow ................................................................................................ 20

Modes of operation ....................................................................................................... 20

How FortiMail units process email .............................................................................. 20

Email domains .......................................................................................................... 21

Access control rules.................................................................................................. 21

Recipient address verification................................................................................... 21

Disclaimer messages & customized appearance ..................................................... 21

Advanced delivery features ...................................................................................... 22

Antispam techniques ................................................................................................ 22

Order of execution .................................................................................................... 24

Using regular expressions ........................................................................................... 31

Special characters with regular expressions & wild cards ........................................ 31

Word boundary ......................................................................................................... 32

Case sensitivity......................................................................................................... 32

Syntax....................................................................................................................... 32

Examples .................................................................................................................. 33

About the web-based manager............................................................. 35

System requirements.................................................................................................... 35

URL for access .............................................................................................................. 35

Settings .......................................................................................................................... 36

Basic mode vs. advanced mode.................................................................................. 36

Quick Start Wizard ........................................................................................................ 36

Themes........................................................................................................................... 38

FortiMail™ Secure Messaging Platform Version 4.0 Patch 2 Administration Guide

Revision 6 http://docs.fortinet.com/ • Feedback

3

4

Contents

Buttons, menus, and the displays............................................................................... 38

Language support......................................................................................................... 39

Basic mode ............................................................................................. 41

AntiSpam ....................................................................................................................... 41

Incoming vs. outgoing email ..................................................................................... 42

Incoming ................................................................................................................... 42

Incoming Action ........................................................................................................ 43

Outgoing ................................................................................................................... 45

Outgoing Action ........................................................................................................ 46

Advanced mode ..................................................................................... 49

Monitor .................................................................................................... 51

Viewing overall system statuses ................................................................................. 51

Viewing the dashboard ............................................................................................. 51

Viewing the email statistics....................................................................................... 58

Viewing the list of current IP sessions ...................................................................... 59

Managing the deferred mail queue.............................................................................. 60

Managing undeliverable mail .................................................................................... 62

Managing the quarantines............................................................................................ 63

Managing the personal quarantines ......................................................................... 63

Managing the system quarantine.............................................................................. 69

Viewing the greylist statuses....................................................................................... 73

Viewing the pending & individual automatic greylist entries ..................................... 73

Viewing the consolidated automatic greylist exemptions.......................................... 75

Viewing the sender reputation statuses ..................................................................... 76

Viewing the endpoint reputation statuses.................................................................. 79

Managing archived email ............................................................................................. 81

Searching the archived email ................................................................................... 82

Viewing log messages.................................................................................................. 83

Customizing the log view .......................................................................................... 85

Using the right-click popup menus............................................................................ 87

Searching log messages .......................................................................................... 88

Cross searching log messages................................................................................. 91

Viewing generated reports ........................................................................................... 92

Maintenance ........................................................................................... 97

Backup and restore....................................................................................................... 97

Backing up your configuration using the CLI .......................................................... 100

Backing up your configuration using a FortiManager unit....................................... 100

Restoring the configuration..................................................................................... 101

Restoring the firmware............................................................................................ 101

Backing up and restoring the mailboxes................................................................. 101

FortiMail™ Secure Messaging Platform Version 4.0 Patch 2 Administration Guide

Revision 6 http://docs.fortinet.com/ • Feedback

Contents

Configuring centralized administration .................................................................... 109

Configuring FortiGuard updates & FortiGuard Antispam queries ......................... 110

Downloading a trace file............................................................................................. 119

System .................................................................................................. 121

Configuring network settings .................................................................................... 121

Configuring the network interfaces ......................................................................... 121

Configuring static routes ......................................................................................... 128

Configuring DNS..................................................................................................... 130

Configuring dynamic DNS ...................................................................................... 130

Configuring the time, GUI, & SNMP........................................................................... 133

Configuring the time & date .................................................................................... 133

Configuring the idle timeout & LCD panel options .................................................. 135

Configuring SNMP queries & traps......................................................................... 135

Customizing the appearance .................................................................................. 141

Configuring administrator accounts & access profiles .......................................... 144

About administrator account permissions & domains............................................. 144

Configuring administrator accounts ........................................................................ 147

Configuring access profiles..................................................................................... 149

Configuring RAID ........................................................................................................ 151

About RAID levels................................................................................................... 151

Configuring RAID for FortiMail-400 models ............................................................ 152

Configuring RAID on FortiMail-2000A/B or FortiMail-4000A models...................... 154

Using high availability (HA)........................................................................................ 156

About high availability ............................................................................................. 157

About the heartbeat & synchronization................................................................... 159

About logging, alert email, & SNMP in HA.............................................................. 162

How to use HA........................................................................................................ 162

Monitoring the HA status ........................................................................................ 163

Configuring the HA mode & group.......................................................................... 168

Configuring service-based failover ......................................................................... 175

Example: Failover scenarios................................................................................... 177

Example: Active-passive HA group in gateway mode ............................................ 182

Managing certificates ................................................................................................. 189

Managing local certificates ..................................................................................... 190

Managing certificate authority certificates............................................................... 195

Managing the certificate revocation list................................................................... 196

Managing OCSP server certificates........................................................................ 197

FortiMail™ Secure Messaging Platform Version 4.0 Patch 2 Administration Guide

Revision 6 http://docs.fortinet.com/ • Feedback

5

6

Contents

Mail Settings ......................................................................................... 199

Configuring the built-in MTA & mail server .............................................................. 199

Configuring the host name, port numbers, relay, mail queue, & DSN .................... 199

Configuring global disclaimers................................................................................ 205

Customizing replacement messages & quarantine report contents ....................... 206

Selecting the mail data storage location ................................................................. 208

Configuring protected domains................................................................................. 211

Managing the global address book ........................................................................... 228

Configuring the proxies & implicit relay ................................................................... 229

About the transparent mode proxies....................................................................... 229

Configuring SMTP proxy/implicit relay pick-up ....................................................... 237

User ....................................................................................................... 241

Configuring and managing local user accounts...................................................... 241

Configuring users’ preferences................................................................................. 243

Configuring PKI authentication ................................................................................. 248

Configuring user groups ............................................................................................ 251

Configuring aliases..................................................................................................... 252

Configuring address mappings ................................................................................. 255

Policy..................................................................................................... 259

What is a policy?......................................................................................................... 259

How to use policies..................................................................................................... 260

Whether to use IP-based or recipient-based policies ............................................. 260

Order of execution of policies ................................................................................. 260

Which policy/profile is applied when an email has multiple recipients?.................. 261

Controlling SMTP access & delivery......................................................................... 261

Configuring access control rules............................................................................. 262

Configuring delivery rules ....................................................................................... 269

Controlling email based upon the recipient ............................................................. 272

Controlling email based upon IP addresses ............................................................ 278

Example: Strict & loose IP-based policies .............................................................. 283

Profile .................................................................................................... 285

Configuring session profiles ..................................................................................... 285

Configuring antispam profiles and antispam action profiles ................................. 297

Configuring antispam profiles ................................................................................. 297

Configuring antispam action profiles....................................................................... 312

Configuring antivirus profiles.................................................................................... 315

Viewing information about the FortiGuard Antivirus signatures database .............. 317

FortiMail™ Secure Messaging Platform Version 4.0 Patch 2 Administration Guide

Revision 6 http://docs.fortinet.com/ • Feedback

Contents

Configuring content profiles and content action profiles....................................... 318

Configuring content profiles .................................................................................... 318

Configuring content action profiles ......................................................................... 326

Configuring resource profiles.................................................................................... 329

Configuring authentication profiles .......................................................................... 330

How to enable & configure authentication of email users....................................... 332

Configuring LDAP profiles ......................................................................................... 333

Preparing your LDAP schema for FortiMail LDAP profiles ..................................... 347

Testing LDAP profile queries .................................................................................. 355

Clearing the LDAP profile cache............................................................................. 366

Configuring dictionary profiles.................................................................................. 367

Configuring dictionary groups ................................................................................. 369

Configuring security profiles ..................................................................................... 370

Configuring TLS profiles ......................................................................................... 370

Configuring encryption profiles ............................................................................... 372

Configuring certificate bindings............................................................................... 373

Configuring IP pools................................................................................................... 376

AntiSpam .............................................................................................. 379

Configuring email quarantines & quarantine reports.............................................. 379

Configuring global quarantine report settings ......................................................... 380

Configuring the system quarantine administrator account & disk quota................. 387

Configuring the quarantine control accounts .......................................................... 389

Configuring the black lists & white lists ................................................................... 390

Order of execution of black lists & white lists.......................................................... 390

About black list & white list address formats........................................................... 391

Configuring the global black list & white list............................................................ 392

Configuring the per-domain black lists & white lists................................................ 394

Configuring the personal black lists & white lists .................................................... 396

Configuring the blacklist action ............................................................................... 400

Configuring greylisting............................................................................................... 400

About greylisting ..................................................................................................... 401

Configuring the grey list TTL & initial delay ............................................................ 404

Manually exempting senders from greylisting......................................................... 405

Configuring bounce verification & tagging .............................................................. 409

Configuring endpoint reputation ............................................................................... 412

About endpoint reputation....................................................................................... 413

Manually blacklisting endpoints .............................................................................. 414

Exempting endpoints from endpoint reputation ...................................................... 416

Configuring the endpoint reputation score window................................................. 418

FortiMail™ Secure Messaging Platform Version 4.0 Patch 2 Administration Guide

Revision 6 http://docs.fortinet.com/ • Feedback

7

8

Contents

Training & maintaining the Bayesian databases ..................................................... 419

Types of Bayesian databases................................................................................. 419

Training the Bayesian databases ........................................................................... 421

Example: Bayesian training .................................................................................... 422

Backing up, batch training, & monitoring the Bayesian databases......................... 424

Configuring the Bayesian training control accounts................................................ 429

Email Archiving .................................................................................... 431

Configuring global email archive settings................................................................ 431

Configuring the email archiving policy..................................................................... 433

Configuring email archiving exemptions.................................................................. 434

Log & Report ........................................................................................ 437

About FortiMail logging.............................................................................................. 437

Log types ................................................................................................................ 437

Log message severity levels................................................................................... 438

Configuring logging.................................................................................................... 438

Choosing which events to log ................................................................................. 439

Configuring logging to the hard disk ....................................................................... 439

Configuring logging to a Syslog server or FortiAnalyzer unit.................................. 441

Configuring report profiles & generating reports .................................................... 442

Configuring the time period of a report profile ........................................................ 444

Configuring the query selection of a report profile .................................................. 444

Configuring the schedule of a report profile............................................................ 445

Configuring the protected domain of a report profile .............................................. 446

Configuring incoming or outgoing directionality of a report profile.......................... 446

Configuring email notification for a report profile .................................................... 447

Configuring alert email ............................................................................................... 447

Configuring alert recipients ..................................................................................... 448

Configuring alert categories.................................................................................... 448

Installing firmware ............................................................................... 451

Testing firmware before installing it ......................................................................... 451

Installing firmware ...................................................................................................... 453

Downgrading from version 4.0 to 3.0...................................................................... 455

Reconnecting to the FortiMail unit .......................................................................... 456

Restoring the configuration..................................................................................... 457

Verifying the configuration ...................................................................................... 459

Upgrading ............................................................................................................... 459

Clean installing firmware............................................................................................ 459

Fine tuning............................................................................................ 463

Network topology tuning............................................................................................ 463

System security tuning............................................................................................... 463

FortiMail™ Secure Messaging Platform Version 4.0 Patch 2 Administration Guide

Revision 6 http://docs.fortinet.com/ • Feedback

Contents

High availability (HA) tuning ...................................................................................... 464

SMTP connectivity tuning .......................................................................................... 465

Antispam tuning.......................................................................................................... 466

Policy tuning................................................................................................................ 466

System maintenance tips ........................................................................................... 467

Performance tuning .................................................................................................... 467

Troubleshooting................................................................................... 469

Hardware issues.......................................................................................................... 469

GUI and CLI connection issues ................................................................................. 469

FortiGuard connection issues ................................................................................... 470

MTA issues .................................................................................................................. 471

Antispam issues.......................................................................................................... 474

HA issues..................................................................................................................... 477

Setup for email users........................................................................... 479

Training Bayesian databases..................................................................................... 479

Managing tagged spam .............................................................................................. 480

Accessing the personal quarantine & webmail........................................................ 480

Accessing personal quarantines through FortiMail webmail (gateway and transparent mode)...................................................................................................................... 481

Accessing FortiMail webmail (server mode) ........................................................... 481

Using quarantine reports ........................................................................................ 481

Accessing personal quarantines through POP3 or IMAPv4 (gateway and transparent mode)...................................................................................................................... 483

Accessing mailboxes through POP3 or IMAPv4 (server mode) ............................. 484

Sending email from an email client (gateway and transparent mode)................... 484

Appendix A: Supported RFCs............................................................. 485

Appendix B: Maximum Values Matrix ................................................ 487

Appendix C: Port Numbers ................................................................. 491

Index...................................................................................................... 495

FortiMail™ Secure Messaging Platform Version 4.0 Patch 2 Administration Guide

Revision 6 http://docs.fortinet.com/ • Feedback

9

Contents

10

FortiMail™ Secure Messaging Platform Version 4.0 Patch 2 Administration Guide

Revision 6 http://docs.fortinet.com/ • Feedback