Configuring a protection profile Firewall Protection Profile
FortiGate Version 4.0 MR1 Administration Guide
500 01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
Figure 287: Protection Profile Email Filtering options (SSL content scanning and inspection)
FortiGuard Email Filtering Also called FortiGuard Antispam. Select one or more check boxes to
enable protocols (IMAP, POP3, SMTP), then apply the options that
you need. If your FortiGate unit supports SSL content scanning and
inspection you can also enable FortiGuard Antispam for IMAPS,
POP3S, and SMTPS.
IP address check Select to enable the FortiGuard AntiSpam IP address blacklist.
URL check Select to enable the FortiGuard AntiSpam URL blacklist.
E-mail checksum check Select to enable the FortiGuard Antispam email message checksum
blacklist.
Spam submission Select to add a spam submission message and a link to the
message body of all email messages marked as spam by
FortiGuard Antispam. If the receiver considers that the email
message is not spam, he or she can use the link in the message to
inform FortiGuard Antispam. You can change the content of this
message by going to System > Config > Replacement Message and
customizing the Spam > Spam submission message. For more
information, see “Spam replacement messages” on page 257.
IP address BWL check Select to compare the IP address of email message senders to the
selected IP address black/white list and, if a match is found, to take
the action configured in the list for the IP address. For more
information, see “IP address and email address black/white lists” on
page 573.
IP address BWL check
list
Select the IP address black/white list to add to the protection profile.
For more information, see “Creating a new IP address list” on
page 573.
HELO DNS lookup Select to look up the source domain name (from the SMTP HELO
command) for SMTP email messages.
E-mail address BWL check Select to compare the email address of message senders to the
selected email address black/white list and if a match is found to
take the action configured in the list for the email address. For more
information, see “IP address and email address black/white lists” on
page 573.
E-mail address BWL list Select the email address black/white list to add to the protection
profile. For more information, see “Creating a new email address list”
on page 576.
Return e-mail DNS check Select to enable checking that the domain specified in the reply-to or
from address has an A or MX record.