FortiMail - Navigating the GUI

The following post outlines my notes from the FortiMail training at the Fortinet Academy for the Navigating the GUI section.

Access the administration and webmail interfaces.

FortiMail has two interfaces:

  • Admin interface. Used for administration of the device
    https://<FortiMail FQDN or IP>/admin


  • User interface. Used to users to access the inbox in server mode or the quarantine mailbox in gateway and transparent modes:
    https://<FortiMail FQDN or IP>


 Note the differences for these two interfaces is the /admin at the end of the URL.


Navigate the GUI

The user inbox for server mode has the following folders:


The quarantine inbox for gateway mode has the following folders:

Note that the Inbox folder is not present when the FortiMail is in gateway mode.

 

Quick Start Wizard

You can use the quick start wizard to configure the following:

  • Password for the admin account
  • Network and time settings
  • Local host settings
  • Protected domains
  • Incoming and outgoing antispam and antivirus scan settings
  • Access control rules for SMTP relay
  • Note: you cant select the operation mode using the quick start wizard


Simple and Advanced View

The FortiMail has two administrative views: Simple and Advanced



Simple View

Shows the commonly used operations which you would be expected to use in Day-to-day operations. These include:


Advanced View

Advanced View shows all of the menu options, allowing you to see Encryption, Data Loss Prevention and Email Archiving. Its not expected that you will use these in day to day operations and as such are hidden under simple view to streamline the administrative experience.



Access the CLI

 You can connect to the CLI via the Console, Web GUI or via SSH

The CLI interface is similar to the FortiOS Syntax, however in FortiMail you will not use it as often for configuration tasks as the majority of configuration tasks can be completed from the GUI.

This being said there are some configuration tasks you will complete in the CLI. For example:
To make sure FortiMail complies with information security standards, you should disable the local POP3 and IMAP services if they are not being used.

config system mailserver
     set pop3-service <enable/disable>
     set imap-service <enable/disable>
end


Adding FortiMail to the Security Fabric

You can connect FortiMail to an upstream FortiGate so that it becomes part of the Security Fabric. This enables coordinated actions amongst security devices within your infrastructure and allows offloading of tasks to other more specialized devices in the Security Fabric.

To do this from the Security Fabric menu you specify the IP address and account of the upstream FortiGate. On the FortiGate you then approve the FortiMail joining the Fabric.






Comments

Post a Comment

Popular posts from this blog

NSE8 Lab Study Resources - Narbik CCIE R&S v5.1 Foundations

Image
 Hey All, I have been working on putting together some scenarios for lab practice and I've found myself falling back on some of the study materials I used when preparing for the CCIE EI (yet to obtain, on the list after the NSE8). A legendary trainer in this area is Narbik Kocharians CCIE 12410 who is the president of Micronics Networking and Training - his CCIE prep courses and text books are considered almost required reading for any serious candidate for this certification. His text books work through hands on labs that are focused on specific topics to help cement the theory of the different topics in the exam.  His textbook CCIE Routing and Switching 5.1 Foundations: Bridging the Gap between CCNP and CCIE is well aimed at the skill level required of the NSE8 and fortunately there is actually quite a bit of overlap in its 1100 pages. The chapters within the textbook are: 1. Physical Topology 2. Physical and Logical Topologies 3. Spanning Tree Protocol 4. Point-to-Point Protocol
Read more

Journey to the NSE8 - Change in tactic

 I've previously been studying the Secure Wireless LAN content in order to pass the final exam required for my NSE6 (on the way to the NSE8). Going over the material again at the moment I'm noticing that my study sessions are becoming a bit of a blur and I'm not absorbing the content as well as I should be, and I can see this track of study becoming like quicksand if I don't give myself a break from it. The NSE6 fortunately covers a lot of technologies, including FortiAuthenticator and FortiADC which are both heavily featured on the NSE8 blueprint. So from here Im going to review the training for the FortiADC and have a crack at that exam to finish off my NSE6
Read more

Specifying a domain name suffix for DHCP clients on a FortiGate (FortiOS)

Image
Domain Name Suffix You can specify a domain name suffix in a DHCP address pool on the FortiGate DHCP server . With this suffix assigned, the client only needs to input part of a domain name, and the system adds the domain name suffix for name resolution. For example a client can type in https://fortimanager in their web browser to access your fortimanager instance, instead of the FQDN of https://fortimanager.domain.local In FortiOS (current as of December 2022) this is configured via the CLI.   Configuration config system dhcp server     edit <#>          set domain <domain suffix>   In a full context this would be config system dhcp server     edit 1          set domain "lab.example.com"          set default-gateway 192.168.1.1          set netmask 255.255.255.0          set interface "port1"          config ip-range               edit 1                    set start-ip 192.168.1.100                    set end-ip 192.168.1.200               next         
Read more