Fortinet FortiMail-2000F Series

FortiMail is a top-rated secure email gateway that stops volume-based and targeted cyber threats to help secure the dynamic enterprise attack surface, prevents the loss of sensitive data and helps maintain compliance with regulations. High performance physical and virtual appliances deploy on-site or in the public cloud to serve any size organization — from small businesses to carriers, service providers, and large enterprises.

Threat Prevention

Powerful antispam and antimalware, are complemented by advanced techniques like outbreak protection, content disarm and reconstruction, sandbox analysis, impersonation detection and other technologies to stop unwanted bulkemail, ransomware, business email compromise and targeted attacks.

Data Protection

Robust data loss prevention, identitybased email encryption and archiving help prevent the inadvertent loss of sensitive information and maintain compliance with corporate and industry regulations.

Security Fabric Integration

Integrations with Fortinet products as well as third-party components help customers adopt a proactive approach to security by sharing IoCs across a seamless Security Fabric.

Overview:

Proven Security

FortiMail appliances and virtual appliances are proven, powerful email security platforms for any size organization — from small businesses to carriers, service providers, and large enterprises. Purpose-built for the most demanding messaging systems, FortiMail appliances employ Fortinet's years of experience in protecting networks against spam, malware, and other message-borne threats.

Intelligent Protection

FortiMail prevents your email systems from becoming threat delivery systems. Its inbound filtering engine blocks spam and malware before it can clog your network and affect users. Its outbound inspection technology prevents other antispam gateways from blacklisting your users by blocking outbound spam and malware, including mobile traffic.

Enforce secure content delivery with FortiMail Identity-Based Encryption (IBE), S/MIME, or TLS email encryption options. Prevent accidental and intentional loss of confidential data using predefined HIPAA, GLBA, SOX or customized dictionaries.

High Performance and Unmatched Flexibility

FortiMail appliances provide high-performance email routing and security by utilizing multiple high-accuracy antispam filters. When coupled with industry leading real-time antivirus and antispyware protection from FortiGuard Services, FortiMail provides you with extremely fast and accurate email security that won't affect end users or delay their communications. FortiMail can be deployed in the cloud or on premises and gateway, inline and server modes in a range of appliance or virtual machine form factors. This flexibility allows you to deploy FortiMail in the mode that best suits your environment.

Advanced Threat Protection

In addition to FortiGuard antivirus, FortiMail supports on-board code emulation to identify and block suspicious files based on their intended behavior. Optional cloud-based or on-premise "sandboxing" provide a full, contained, run-time environment to thwart the highly targeted and tailored attacks that increasingly bypass traditional defenses. Rich threat intelligence, actionable insight and the option to share information with FortiGuard Labs in order to receive automated protection updates help organizations reduce the risk of compromise and breach from such sophisticated attacks.

Comprehensive Email Security

• Scalable solution from SME to the largest ISP and carrier networks
• Advanced Threat Outbreak Protection methods to protect against new emerging and targeted attacks
• Apply Identity-Based Encryption in both push and pull methods
• Data Leak Prevention, and Policy- Based Encryption and Archiving enable compliance with SOX, GLBA, HIPAA, PCI DSS
• Enforce email and security policies at a granular level
• Receive real-time security updates from FortiGuard® Services
• Industry leading price/performance
• Flexible deployment modes and architectures support the widest range of organizations
• Multi-layer threat detection delivers highest level of user protection
• Scalable solution delivers long term investment protection

Key Features & Benefits

Features & Benefits:

System

• Transparent, Gateway and Server Mode Deployment Options
• Flexible Interface Configuration Including VLAN and Redundant Interface Support
• Inbound and Outbound Inspection
• Multiple Email Domains with Domain Level Customization
• IPv6 and IPv4 Address Support
• Virtual Hosting using Source and/or Destination IP Address Pools
• Policy-Based Mail Archiving with Remote Storage Options
• SMTP Authentication Support via LDAP, RADIUS, POP3 and IMAP
• LDAP-Based Email Routing
• Per User Inspection using LDAP Attributes on a Per Policy (Domain) Basis
• Comprehensive Webmail Interface for Server Mode Deployments and Quarantine Management
• Mail Queue Management
• Multiple Language Support for Webmail and Admin Interface
• Email RFC Compliance
• Maintains Local Sender Reputation List Based on:
  – Sender Policy Framework (SPF)
  – Domain Keys Identified Mail (DKIM

Antivirus

• FortiGuard Antivirus Service
• Quarantine, Repackage, Replace, and Monitor Actions
• Nested Archive Scanning
• Malware Detection
• On-board code emulation
• Integration with FortiSandbox and FortiGuard Analytics for advanced threat protection
  – Emails are queued by FortiMail whilst FortiSandbox inspects the email contents for threats

Content-Based Protection

• Dictionary-based filtering in inbound or outbound direction
• Predefined HIPAA, GLBA and SOX dictionaries
• Filter by Attachment File Type
• Banned Word Filtering

Management, Logging, and Reporting

• QuickStart Setup Wizard
• Basic / Advanced Management Modes
• Role-Based Administration Accounts Per Domain
• Comprehensive activity and incident logging and reporting
• Configuration Change and Management Event Logging
• Built-in Reporting module
• Centralized logging and reporting with FortiAnalyzer
• Centralized Quarantine for large scale deployments
• SNMP Support using Standard and Private MIB with Threshold-Based Traps
• External or Local Storage Server Support, including iSCSI devices
• External Syslog support

High Availability (HA)

• Supported in all Modes
• Active-Passive Mode
• Configuration Synchronization Mode (Configuration Master and Slave Mode)
• Quarantine and Mail Queue Synchronization
• Device Failure Detection and Notification
• Link Status, Failover and Redundant Interface Support

Denial-of-Service Protection

• Inbound and Outbound Message Rate Limiting
• Recipient Address Attack
• Reverse DNS Check (Anti-Spoofing)
• Forged Sender Address Encryption
• Identity-based Encryption for Push/Pull Delivery of Encrypted Messages
• S/MIME Support for Gateway-to-

Gateway Encryption

• Support for strong-crypto protocols including HTTPS, SMTPS, SSH, IMAPS and POP3S

Antispam Profile

• FortiGuard Antispam Service
  – Global Sender Reputation
  – Spam and phishing URIs and email addresses
  – Spam Object checksums
  – Dynamic Heuristic Rules
• Outbreak Protection
• Greylisting for IPv4, IPv6 addresses and email accounts
• Local Sender Reputation (IPv4, IPv6 and End Point ID-based)
• Behavioral Analysis
• Deep Email Header Inspection
• Flexible Action and Notification Profiles
• Third party Spam URI and Real-Time Blacklists (SURBL/RBL)
• Full category FortiGuard URL Filtering
• Quarantining, tagging and end user reporting
• PDF Scanning and Image Analysis
• Black/White Lists at Global, Domain, and User levels
• Bayesian Statistic Filtering
• Newsletter detection

Server Mode Specific Features

• SMTP, IMAP, and POP3 Email Services
• SMTP over SSL Support
• Disk Quota Policy Support for User Accounts
• Secure WebMail Client Access
• User, Group and Alias List Support
• Local Account and LDAP Authentication
• WebMail Calendar
• Email Auto Reply and Forwarding Preference
• Address Book Synchronize with LDAP