221 - FortiMail Email Filtering
System Configuration
System Configuration
Module 2
2013 Fortinet Inc. All rights reserved.
The information contained herein is subject to change without notice. No part of this publication including text, examples, diagrams
1
or illustrations may be reproduced, transmitted, or translated in any form or by any means, electronic, mechanical, manual, optical
or otherwise, for any purpose, without prior written permission of Fortinet Inc. 06-50000-0221-20130726
Module Objectives
By the end of this module, you will be able to:
Use CLI and web UI administrative interfaces
Configure initial settings on the FortiMail system
Search FortiMail system logs to obtain data
06-50000-0221-20130726
221 - FortiMail Email Filtering
System Configuration
Web Access
Admin Login
https://192.168.1.99/admin
Webmail Login
https://192.168.1.99
Admin Web UI
06-50000-0221-20130726
221 - FortiMail Email Filtering
System Configuration
System Status
Admin Menu
Menu options available in the Admin web UI include the following:
06-50000-0221-20130726
221 - FortiMail Email Filtering
System Configuration
System
Dashboard JAVA Based Console
Provides direct access to the command line interface via the web GUI
Login Customization
06-50000-0221-20130726
221 - FortiMail Email Filtering
System Configuration
Context Sensitive On-line Help
Basic and Advanced Mode
Basic Mode
Commonly used options only
Day-to-day operation
Advanced Mode
Full set of menu options
10
06-50000-0221-20130726
221 - FortiMail Email Filtering
System Configuration
CLI Tree
Command
Object
config
system interface
Table
Subcommand
edit
<port_name>
Option
set status {up | down}
Field
set ip
next
<interface_ipv4mask>
end
Value
11
Quick Start Wizard
Effective way to have the unit up and running in no time by configuring
the following parameters:
Default password for the administrator account
Network and time settings
Local host settings
Protected domains
Incoming and outgoing antispam and antivirus
Access control rules for SMTP Relay
Note: The operational mode cannot be set though the Quick Start Wizard
12
06-50000-0221-20130726
221 - FortiMail Email Filtering
System Configuration
Configuring Network Interfaces
13
Link Status Propagation
Link status of a port is
propagated to other port(s)
Status of an interface is
linked to the status of another
interface
If associated interface is
down, the interface goes
down too
14
06-50000-0221-20130726
221 - FortiMail Email Filtering
System Configuration
Link Status Propagation
MTA
3.
FORTIMAIL IS
REMOVED FROM
THE LB POOL
2. STATUS
PROPAGATION
If the outgoing interface is
down FortiMail unit will
disable the incoming
interface and vice-versa
Downstream load-balancer:
Detects the failure
Removes the appliance from
the LB algorithm to stop mail
forwarding
1. FAILURE
DETECTION
Sends messages to other units
available in the pool
15
Configuring Routing
16
06-50000-0221-20130726
221 - FortiMail Email Filtering
System Configuration
Route Selection
The destination IP address is compared to those of the static routes to
determine which route a packet will take
The most specific route will always be chosen
If there is more than one specific route available in the routing table,
the FortiMail unit will apply the route with the smallest index number
The index number is a unique value used to identify a route entry in
the routing table and can be determined with the following CLI
command:
get system route
17
DNS Settings
Primary and secondary DNS can be configured using the web UI or the CLI
CLI Configuration:
config system dns
set primary 10.0.1.1
set secondary 208.91.112.52
end
18
06-50000-0221-20130726
221 - FortiMail Email Filtering
System Configuration
Administration Options
19
Access Profiles
Access Profiles are used to:
Control which areas an administrator can access
Define the level of permissions in that area
20
06-50000-0221-20130726
10
221 - FortiMail Email Filtering
System Configuration
Password Policies
Enforce complex passwords
Apply to administrators, webmail and IBE users
21
Admin Authentication
Authentication types supported include local, RADIUS,
RADIUS+Local, PKI and LDAP
22
06-50000-0221-20130726
11
221 - FortiMail Email Filtering
System Configuration
Enable and Disable Message Services
Allows you to turn SMTP, POP3 or IMAP services ON/OFF
Required for vulnerability and security assessment tests when those
services are not in use
CLI configuration:
config system mailserver
set smtp-service enable|disable
set pop3-service enable|disable
set imap-service enable|disable
23
FortiMail Log Types
The following types of log messages can be recorded:
History
Emails handled by the FortiMail unit
Event
System and admin related logs
Antivirus
Virus detection and inspection logs
Antispam
Spam related messages
Encryption
Encryption subsystem such as IBE and S/MIME
24
06-50000-0221-20130726
12
221 - FortiMail Email Filtering
System Configuration
Log Message Severity Levels
Levels
Description
0 Emergency
System unstable
1 Alert
Immediate action required
2 Critical
General functionality affected
3 Error
Error condition exists
4 Warning
Functionality could be affected
5 Notification
Notification about normal events
7 Information
General system operation
25
History Log Disposition and Classifier
Disposition and Classifier are used to provide extra information
regarding email processing
Disposition defines the action taken by the FortiMail unit
Classifier explains why such action was taken
For a complete list of Dispositions and Classifiers, refer to the FortiMail
Admin Guide
26
06-50000-0221-20130726
13
221 - FortiMail Email Filtering
System Configuration
Logging Storage
Log messages can be
logged to local disk
(default option) or to a
remote device (for
example, FortiAnalyzer
system, generic syslog)
Different logging
policies can be
configured based on the
logging location
27
Log Message Correlation
Since different types of log files record different activities, the same
SMTP session may be logged in different types of log files
Click on the Session ID link to display all the logs generated for a
specific SMTP session
28
06-50000-0221-20130726
14
221 - FortiMail Email Filtering
System Configuration
Reports
Reports can be
generated directly
from the FortiMail Unit
Generated reports
appear in Monitor >
Reports
29
SNMP
SNMP agent can be enabled on the FortiMail unit to generate SNMP
traps when certain system events or thresholds have been reached
Up to three SNMP communities can be configured on the FortiMail unit
30
06-50000-0221-20130726
15
221 - FortiMail Email Filtering
System Configuration
SNMP Support
SNMP message integrity, authentication and encryption
SNMP v1, v2c
SNMP v3
31
SNMP v3 Configuration
32
06-50000-0221-20130726
16
