FortiMail

Why do you need FortiMail?

91% of cyberattacks start with phishing. Business Email Compromise (BEC) causes losses of $2.4 billion annually. Native M365 and Gmail filters let through 10-15% of advanced phishing attacks.

FortiMail is an email security gateway with AI-powered detection that protects against phishing, BEC, malware, and zero-day threats. FortiSandbox integration analyzes attachments, and native integration with M365/Google provides cloud email protection.

How does it work?

AI Anti-Phishing

Multi-layered phishing detection:

• Machine learning classification
• URL rewriting and time-of-click analysis
• Brand impersonation detection
• Lookalike domain identification
• Zero-day phishing protection

Business Email Compromise Protection

Protection against fraud:

• Display name spoofing detection
• Domain authentication (SPF, DKIM, DMARC)
• Behavioral anomaly analysis
• Executive impersonation alerts
• Payment fraud prevention

Advanced Threat Protection

Zero-day malware defense:

• FortiSandbox integration
• Content Disarm & Reconstruction (CDR)
• FortiGuard threat intelligence
• Attachment analysis
• Macro-enabled document inspection

Key Features

Inbound Protection

• Anti-spam (99%+ catch rate)
• Anti-malware multi-engine
• URL analysis and sandboxing
• Attachment filtering
• Quarantine management

Outbound Security

• DLP (Data Loss Prevention)
• Compliance scanning
• Encryption enforcement
• Brand protection
• Outbound spam prevention

Email Encryption

• Policy-based encryption
• TLS enforcement
• Identity-Based Encryption (IBE)
• S/MIME and PGP
• Secure message portal

Archiving & Compliance

• Long-term email retention
• eDiscovery capabilities
• Legal hold
• GDPR, HIPAA, PCI compliance
• Audit reporting

Deployment Models

Model	Users	Throughput	Use Case
VM	Variable	Variable	Cloud/Virtual
60F	300	180K msg/hr	SMB
200F	1,000	480K msg/hr	Mid-size
400F	2,500	1.2M msg/hr	Enterprise
2000F	10,000+	4.8M msg/hr	Service provider

FortiMail Cloud: SaaS deployment without infrastructure

Cloud Email Integration

Microsoft 365:

• API-based integration
• Inline protection
• Retroactive scanning
• Impersonation protection

Google Workspace:

• Native integration
• Real-time filtering
• Gmail protection
• Drive scanning

Who is it for?

• Organizations needing advanced email protection
• Enterprises with Microsoft 365 or Google Workspace
• Companies with compliance and archiving requirements
• Industries exposed to BEC (finance, legal, executive)

Benefits

For IT: Multi-deployment options, easy M365/Google integration, central management

For security: AI anti-phishing, BEC protection, FortiSandbox ATP

For business: Email continuity, compliance ready, reduced fraud risk

Specifications

Spam detection	99%+ accuracy
Phishing detection	AI/ML powered
ATP	FortiSandbox integration
Deployment	Appliance, VM, Cloud, M365/Google

FAQ

Does FortiMail replace native M365 filters? It enhances them. FortiMail detects threats that pass through Microsoft/Google native filters.

How does FortiSandbox integration work? Suspicious attachments automatically sent to sandbox. Verdict in seconds, blocking before delivery.

What is BEC protection? Detection of Business Email Compromise - spoofed executives, payment fraud, impersonation attacks.

Does it support email encryption? Yes. TLS, IBE, S/MIME, PGP. Policy-based automatic encryption.

How does M365 integration work? API-based or MX redirection. Retroactive scanning of already delivered messages.

What is CDR? Content Disarm & Reconstruction - removing active content from documents while preserving usability.

Is archiving available? Yes. Compliant archiving, eDiscovery, legal hold, long-term retention.

How does DLP work? Content inspection, regulatory templates (GDPR, HIPAA, PCI), custom dictionaries, fingerprinting.

Does FortiMail work as SaaS? Yes. FortiMail Cloud - fully managed, pay-per-user, without infrastructure.

How does support work? Fortinet 24/7 TAC. nFlo as partner offers email security deployment and policy tuning.