FortiMail Messaging Security

Comprehensive Messaging Security

 

 

Proven Security FortiMail

 

The FortiMail family of appliances is a proven, powerful messaging security platform for any size organization, from small businesses to carriers, service providers, and large enterprises. Purpose-built for the most demanding messaging systems, theFortiMail appliances utilize Fortinet’s years of experience in protecting networks against spam, malware, and other message-borne threats.

 

Intelligent Protection

You can prevent your messaging systems from becoming threat delivery systems with FortiMail. Its inbound filtering engine blocks spam and malware before it can clog your network and affect users. Its outbound inspection technology prevents outbound spam or malware from causing other antispam gateways to blacklist your users (including 3G mobile traffic). FortiMail’s dynamic and static user blocking gives you granular control over all of your policies and users.

 

Secure Content Delivery

FortiMail enables identity-based encryption (IBE) to ensure secure delivery of confidential or regulated content. IBE uses full public key encryption to encrypt messages for your customers, employees, or partners, without an additional cost. There is no additional hardware or software to install, no user provisioning, and no pre-enrollment for recipients, making it extremely easy to deploy.

You can enable automatic encryption of messages based on the attributes you choose, such as subject content, message body, or recipient domain. FortiMail IBE also offers the choice of push or pull delivery options, delivering encrypted emails directly to your users, or storing them on the FortiMail for retrieval, or a combination of the two options.

 

Data Loss Prevention

FortiMail includes customizable, predefined dictionaries that detect the accidental or intentional loss of confidential or regulated data. You can choose to block messages containing data matching a range of patterns, including credit card numbers, social security and social insurance numbers, and bank routing numbers. Alternatively, you can create policies to require the encryption of messages carrying this data.

 

FortiMail Deployment Options

You have the option of deploying FortiMail in Transparent, Gateway, or Sever mode, to meet your specific messaging security requirements and minimize infrastructure changes or service disruptions:

 

Gateway Mode

Provides inbound and outbound proxy mail transfer agent (MTA) services for existing email gateways. A simple DNS MX record change redirects email to FortiMail for antispam and antivirus scanning. The FortiMail unit receives messages, scans for viruses and spam, then relays email to its destination email server for delivery.

 

 

Transparent Mode:

Each network interface includes a proxy that receives and relays email. Each proxy can intercept SMTP sessions even though the destination IP is not the FortiMail appliance. FortiMail scans for viruses and spam, and then transmits email to destination email server for delivery. Eliminates the need to change the DNS MX record or change the existing mail server network configuration.

 

 

Server Mode

The FortiMail unit acts as a stand-alone messaging server and delivers full-featured SMTP mail server functionality, with flexible support for secure POP3, IMAP and WebMail access. It receives messages, scans for viruses and spam, and then delivers to its email users’ mailboxes. External MTAs connect to the FortiMail server, as it is its own protected email server.