SECURITY MAIL SYSTEM OF FORTINET

Technology Solutions

1. FortiMail product

Today's Email service is an important part of any organization or company and plays an important role in all daily business and administration activities. Over the years, that core service is suffering more than ever since
- Spam
- Spyware
- Virus
- Phising
- Data Leakage
Fortinet's total security solution for Email service with FortiMail product provides total security system for Email service from security risks and threats of all enterprise sizes.
In addition, according to the needs of complicated operation to meet the company's own privacy policy, FortiMail solution provides advanced email management features such as encryption, set sending / permission policies. receive email.

2. Operation mode of FortiMail

FortiMail supports 03 (three) different modes of operation depending on the needs of users:
- Email Relay/Gateway
In this mode, FortiMail will act as a Message Transfer Agent (MTA), performing virus scanning, anti-spam, monitoring, content retention and reporting of email system activity.
The system needs to change the DNS MX Record to direct the SMTP data streams to FortiMail before moving to the Email Server. FortiMail can also be configured as an Email Gateway for internal outbound SMTP streams.

- Transparent
This mode allows you to deploy FortiMail without having to change the existing network. FortiMail will be placed Inline right in front of Email Server, to provide full Antivirus / Antispam features, monitor, store and report the activity of Email service. Does not have to change DNS MX Record.

- Server
FortiMail will act as an Email Server. In addition to fully supporting the features available in the Transparency and Email Gateway modes, FortiMail also allows creating Mailboxes, secure Webmail interfaces with SSL, and supports Email Client SMTP, POP3, IMAP.
Depending on the capacity of the device and the needs of the user, the number of Mailbox FortiMail supported will vary.

3. Encryption according to user identity - Identity-Based Encryption

In addition to supporting popular email encryption standards such as S / MIME, FortiMail also supports an encryption mechanism by the user's identity (Identity-Based Encryption - IBE).

This mechanism is based on the Public Key encryption architecture to generate an encryption key based on unique and unique information:
• Master Key
• User Identifier (Email address)
• Special Parameter (Timestamp)
The IBE will use the encryption policy to decide the email encryption. This policy is based on attributes of the Email such as keywords on the title or body of the Email, Email address, domain name.

4. High Availability (HA) feature

FortiMail supports 2 HA modes for all 3 modes of implementing Transparent, Gateway and Server.