Server mode deployment Example 2: FortiMail unit in front of a firewall
FortiMail™ Secure Messaging Platform Version 4.0 Patch 1 Install Guide
Revision 2 149
http://docs.fortinet.com/ • Feedback
• Configuring the firewall policy
Configuring the firewall addresses
In order to create the outgoing firewall policy that governs traffic from the IP addresses of
local email users to the IP address of the FortiMail unit, you must first define the IP
addresses of the local email users and the FortiMail unit by creating firewall address
entries.
To add a firewall address for local email users
1 Go to Firewall > Address > Address.
2 Select Create New.
3 Complete the following:
4 Select OK.
To add a firewall address for the FortiMail unit
1 Go to Firewall > Address > Address.
2 Select Create New.
3 Complete the following:
4 Select OK.
Configuring the service group
In order to create a firewall policy that governs only FortiMail-related traffic, you must first
a create service group that contains services that define protocols and port numbers used
in that traffic.
To add a service group for email user traffic to the FortiMail unit
1 Go to Firewall > Service > Group.
2 Select Create New.
3 In Group Name, enter a name to identify the service group entry, such as
local_email_users_services.
4 In the Available Services area, select HTTP, HTTPS, SMTP, POP3, and IMAP, then
select the right arrow to move them to the Members area.
Note: The following procedures use a FortiGate unit running FortiOS v3.0 MR7. If you are
using a different firewall appliance, consult the appliance’s documentation for completing
similar configurations.
Name Enter a name to identify the firewall address entry, such as
local_email_users_address.
Type Select Subnet/IP Range.
Subnet /IP Range Enter 172.16.1.0/24.
Interface Select internal.
Name Enter a name to identify the firewall address entry, such as
FortiMail_address.
Type Select Subnet/IP Range.
Subnet /IP Range Enter 10.10.10.5/32.
Interface Select wan1.
To Next Page
Loading...
