FortiMail

TM

Comprehensive Email Security

Proven Security
FortiMail appliances and virtual appliances are proven, powerful email security
platforms for any size organization from small businesses to carriers, service
providers, and large enterprises. Purpose-built for the most demanding messaging
systems, FortiMail appliances employ Fortinets years of experience in protecting
networks against spam, malware, and other message-borne threats.

Intelligent Protection
FortiMail prevents your email systems from becoming threat delivery systems. Its
inbound filtering engine blocks spam and malware before it can clog your network
and affect users. Its outbound inspection technology prevents other antispam
gateways from blacklisting your users by blocking outbound spam and malware,
including mobile traffic.
Enforce secure content delivery with FortiMail Identity-Based Encryption (IBE),
S/MIME, or TLS email encryption options. Prevent accidental and intentional loss of
confidential data using predefined HIPAA, GLBA, SOX or customized dictionaries.

Key Features & Benefits

Deploy appliances or virtual
appliances in Transparent,
Gateway, or Server modes

FortiMail can be deployed in gateway, transparent mode and

uniquely as a fully featured mail server. It can be deployed as
CPE or in the cloud and in hardware or VM form factors. FortiMail
is flexible enough to cater for every customer requirement.

Apply Data Loss Prevention

and Identity-Based
Encryption

Detect sensitive or regulated information using defined data

patterns, block unauthorized delivery and ensure secure delivery
when authorized with no additional hardware or software to
install, no user provisioning, no recipient pre-enrollment.

Prevent phishing and other

advanced threats

Apply embedded URL inspection, top rated antimalware and

optional sandbox integration to detect highly targeted attacks.

Identify and Block

SpammingEndpoints

Prevent blacklisting of legitimate subscribers by identifying and

blocking endpoints sending spam, including Smart phones. Ideal
for Carriers and Service Providers.

No per-user or
per-mailboxpricing

Complete, multi-layered antivirus, antispam, antispyware and

antiphishing protection for an unlimited number of users. Greatly
reduces TCO.

FortiCare

FortiGuard

Worldwide 24x7 Support

Threat Research & Response

support.fortinet.com

www.fortiguard.com

Comprehensive
Email Security
Scalable solution from SME to the
largest ISP and carrier networks
Advanced Threat Outbreak Protection
methods to protect against new
emerging and targeted attacks
Apply Identity-Based Encryption in
both push and pull methods
Data Leak Prevention, and PolicyBased Encryption and Archiving
enable compliance with SOX, GLBA,
HIPAA, PCI DSS
Enforce email and security policies at
a granular level
Receive real-time security updates
from FortiGuard Services
Industry leading price/performance
Flexible deployment modes and
architectures support the widest range
of organizations
Multi-layer threat detection delivers
highest level of user protection
Scalable solution delivers long term
investment protection

www.fortinet.com

High Performance and Unmatched Flexibility

Advanced Threat Protection

FortiMail appliances provide high-performance email routing

and security by utilizing multiple high-accuracy antispam filters.
When coupled with industry leading real-time antivirus and
antispyware protection from FortiGuard Services, FortiMail
provides you with extremely fast and accurate email security
that wont affect end users or delay their communications.
FortiMail can be deployed in the cloud or on premises and
gateway, inline and server modes in a range of appliance
or virtual machine form factors. This flexibility allows you to
deploy FortiMail in the mode that best suits your environment.

In addition to FortiGuard antivirus, FortiMail supports on-board

code emulation to identify and block suspicious files based on
their intended behavior. Optional cloud-based or on-premise
sandboxing provide a full, contained, run-time environment to
thwart the highly targeted and tailored attacks that increasingly
bypass traditional defenses. Rich threat intelligence, actionable
insight and the option to share information with FortiGuard
Labs in order to receive automated protection updates help
organizations reduce the risk of compromise and breach from
such sophisticated attacks.

features
System
Transparent, Gateway and Server Mode
DeploymentOptions
Flexible Interface Configuration Including VLAN and
Redundant Interface Support
Inbound and Outbound Inspection
Multiple Email Domains with Domain Level
Customization
IPv6 and IPv4 Address Support
Virtual Hosting using Source and/or Destination IP
Address Pools
Policy-Based Mail Archiving with Remote
StorageOptions
SMTP Authentication Support via LDAP, RADIUS,
POP3 and IMAP
LDAP-Based Email Routing
Per User Inspection using LDAP Attributes on a Per
Policy (Domain) Basis
Comprehensive Webmail Interface for Server Mode
Deployments and Quarantine Management
Mail Queue Management
Multiple Language Support for Webmail and
AdminInterface
Email RFC Compliance
Maintains Local Sender Reputation List Based on:

- Sender Policy Framework (SPF)

- Domain Keys Identified Mail (DKIM)

Management, Logging,
andReporting

QuickStart Setup Wizard

Basic / Advanced Management Modes
Role-Based Administration Accounts Per Domain
Comprehensive activity and incident logging
andreporting
Configuration Change and Management
EventLogging
Built-in Reporting module
Centralized logging and reporting with FortiAnalyzer
Centralized Quarantine for large scale deployments
SNMP Support using Standard and Private MIB with
Threshold-Based Traps
External or Local Storage Server Support, including
iSCSI devices
External Syslog support

High Availability (HA)

Supported in all Modes
Active-Passive Mode
Configuration Synchronization Mode
(ConfigurationMaster and Slave Mode)
Quarantine and Mail Queue Synchronization
Device Failure Detection and Notification
Link Status, Failover and Redundant
InterfaceSupport

Antispam Profile

FortiGuard Antispam Service

- Global Sender Reputation
- Spam and phishing URIs and email addresses
- Spam Object checksums
- Dynamic Heuristic Rules
Outbreak Protection
Greylisting for IPv4, IPv6 addresses and
emailaccounts
Local Sender Reputation (IPv4, IPv6 and End Point
ID based)
Behavioral Analysis
Deep Email Header Inspection
Flexible Action and Notification Profiles
Third party Spam URI and Real-Time Blacklists
(SURBL/RBL)
Full category FortiGuard URL Filtering
Quarantining, tagging and end user reporting
PDF Scanning and Image Analysis
Black/White Lists at Global, Domain, and User levels
Bayesian Statistic Filtering
Newsletter detection

Antivirus
FortiGuard Antivirus Service
Quarantine, Repackage, Replace, and
MonitorActions
Nested Archive Scanning
Malware Detection
On-board code emulation
Integration with FortiSandbox and FortiGuard
Analytics for advanced threat protection

- Emails are queued by FortiMail whilst
FortiSandbox inspects the email contents
forthreats

Content-Based Protection
Dictionary-based filtering in inbound or
outbounddirection
Predefined HIPAA, GLBA and SOX dictionaries
Filter by Attachment File Type
Banned Word Filtering

Denial-of-Service Protection

Inbound and Outbound Message Rate Limiting

Recipient Address Attack
Reverse DNS Check (Anti-Spoofing)
Forged Sender Address

Encryption
Identity-based Encryption for Push/Pull Delivery of
Encrypted Messages
S/MIME Support for Gateway-to-Gateway
Encryption
Support for strong-crypto protocols including
HTTPS, SMTPS, SSH, IMAPS and POP3S

Server Mode Specific Features

SMTP, IMAP, and POP3 Email Services

SMTP over SSL Support
Disk Quota Policy Support for User Accounts
Secure WebMail Client Access
User, Group and Alias List Support
Local Account and LDAP Authentication
WebMail Calendar
Email Auto Reply and Forwarding Preference
Address Book Synchronize with LDAP

FortiMail Deployment Options

Choose from three modes of deployment Transparent, Gateway, or Server mode to meet your specific email security
requirements, while minimizing infrastructure changes and service disruptions:
Gateway Mode: Provides inbound and
outbound proxy mail transfer agent (MTA)
services for existing email gateways. A
simple DNS MX record change redirects
email to FortiMail for antispam and
antivirus scanning. The FortiMail device
receives messages, scans for viruses
and spam, then relays email to its
destination email server for delivery.
Transparent Mode: Each network
interface includes a proxy that receives
and relays email. Each proxy can
intercept SMTP sessions even though
the destination IP address is not the
FortiMail appliance. FortiMail scans
for viruses and spam, then transmits
email to the destination email server
for delivery. This eliminates the need
to change the DNS MX record, or
to change the existing email server
network configuration.
Server Mode: The FortiMail device
acts as a stand-alone messaging
server with full SMTP email server
functionality, including flexible support
for secure POP3, IMAP and WebMail
access. FortiMail scans email for
viruses and spam before delivery. As in
Server mode, external MTAs connect
to FortiMail, allowing it to function as a
protected server.

Deploy on-site or in the cloud

Onsite deployment along side mail server

Full mail server and groupware functionality

in addition to AS

Identity-Based Encryption (IBE)

IBE allows FortiMail to deliver confidential and regulated email securely without requiring additional hardware, software user
provisioning, or extra license fees. Use IBE to eliminate paper-based communications and reduce costs.

Notification of encrypted email

Recipient

Sender

User authenticates

User views decrypted email

Policy-Based Encryption: Automatically

encrypt messages for compliance, based on
content or recipient.
Push or Pull Mode: Use Push, Pull,
ora combination of modes to meet your
requirements.
Easy to Deploy, Use, and Manage:
Deploy IBE in any mode, including Transparent mode, without user provisioning or
additional hardware or software.

specifications
FORTIMAIL 200D

FORTIMAIL 400C

FORTIMAIL 1000D

FORTIMAIL 3000C

FORTIMAIL 3000D

Small businesses, branch offices,

and organizations with fewer
than 400 users*

Small-to-midsized organizations
with up to 1,000 users*

Mid to large enterprise,

education and government
departments with up to
3,000 users*

Universities, Large enterprise,

ISP, Carrier

Highest performing appliance for

the largest University, corporate,
ISP and carrier customers

Recommended Deployment Scenarios

Hardware Specifications
10/100/1000 Interfaces (Copper, RJ-45)

SFP Gigabit Ethernet Interface

Internal Backplane Base /

Fabric Channel Interfaces

0
Yes

Redundant Hot Swappable Power Supplies

No

No

Yes

Yes

Storage

1x 1 TB

2x 1 TB

2x 2 TB (2x 2 TB Optional)

2x 1 TB (4x 1 TB Optional)

2x 2 TB (6x 2 TB Optional)

RAID Storage Management

No

Software: 0, 1

Hardware:
1, 5, 10, 50, Hot Spare
(Based on Drive Count)

Hardware:
1, 5, 10, 50, Hot Spare
(Based on Drive Count)

Hardware:
1, 5, 10, 50, Hot Spare
(Based on Drive Count)

Form Factor

Rack Mount Appliance

Rack Mount Appliance

Rack Mount Appliance

Rack Mount Appliance

Rack Mount Appliance

System Specifications
Email domains

20

100

800

2,000

2,000

Recipient-based policies (per Domain /

per System) incoming or outgoing

60 / 300

600 / 3,000

1,500 / 7,500

1,500 / 7,500

1,500 / 7,500

Server Mode Mailboxes

150

400

1,500

3,000

3,000

Antispam, Antivirus, Authentication, and

Content Profiles (per Domain / per System)

50 / 60

50 / 200

50 / 600

50 / 600

50 / 600

Performance (Messages/Hour) [Without queuing based on 100 KB message size]

Email Routing

76K

150K

680K

900K

1.5 Million

FortiGuard Antispam

68K

140K

620K

830K

1.4 Million

FortiGuard Antispam + Antivirus

58K

120K

500K

730K

1.3 Million

Dimensions
Height x Width x Length (in)

1.75 x 17.05 x 13.86

1.70 x 17.10 x 14.30

3.46 x 17.24 x 14.49

3.46 x 17.40 x 29.00

3.46 x 18.99 x 29.00

Height x Width x Length (mm)

45 x 433 x 352

44 x 435 x 364

88 x 438 x 368

88 x 442 x 737

88 x 482 x 737

Weight

13.4 lbs (6.1 kg)

16.1 lbs (7.3 kg)

57.5 lbs (26.1 kg)

50.0 lbs (22.7 kg)

71.5 lbs (32.5 kg)

Maximum Power Required

1.00A/110V, 0.50A/220V

4.00A/110V, 2.00A/220V

3.50A/110V, 1.75A/220V

7.0A/110V, 3.5A/220V

10.0A/110V, 5.0A/220V

Power Consumption (AVG)

60 W

100 W

115 W

200 W

340 W

Environment
Power Source

100240 VAC, 5060 Hz

Heat Dissipation

205 BTU/h

342 BTU/h

471 BTU/h

683 BTU/h

1160 BTU/h

Humidity

595% non-condensing

1090% non-condensing

595% non-condensing

595% non-condensing

2090% non-condensing

Operating Temperature

32104F (0 40C)

32104F (040C)

32104F (040C)

5095F (1035C)

5095F (1035C)

Storage Temperature

-13158F (-2570C)

-4158F (-2070C)

-13158F (-2570C)

-40149F (-4065C)

-40149F (-4065C)

Compliance
FCC Part 15 Class A, C-Tick, VCCI, CE, UL/cUL, CB

FCC Part 15 Class A, C-Tick, VCCI, CE, BSMI, KC, UL/cUL, CB, GOST

Certifications
VBSpam and VB100 rated

VBSpam and VB100 rated,

Common Criteria EAL 2+,
FIPS 140-2 Validation

VBSpam and VB100 rated

VBSpam and VB100 rated,

Common Criteria EAL 2+,
FIPS 140-2 Validation

* Recommended sizing for Gateway and Transparent deployments. For Server Mode, see Server Mode Mailbox metric.
If unsure, please validate the model selection by checking the peak mail flow rates and average message size detail with a FortiMail specialist.

FortiMail 400C

FortiMail 200D

FortiMail 3000C

FortiMail 1000D

FortiMail 3000D

VBSpam and VB100 rated

specifications
VIRTUAL APPLIANCES

VM00

VM01

VM02

VM04

VM08

Demo, testing, training and

small enterprise use with fewer
than 100 users*

Small businesses, branch offices,

and organizations with fewer
than 400 users*

Small-to-midsized organizations
with up to 1,000 users*

Mid to large enterprise with

up to 3,000 users*

Large Enterprise

Recommended Deployment Scenarios

Technical Specifications
Hypervisors Supported

VMware ESXi / ESX 4.1 / 5.0 / 5.1 / 5.5

Virtual Machine Form Factor

Open Virtualization Format (OVF)

Maximum Virtual CPUs Supported

Virtual NICs Required (Min/Max)

1/4

1/4

1/4

1/4

1/4

Virtual Machine Storage Required (Min/Max)

50 GB / 1 TB

50 GB / 1 TB

50 GB / 2 TB

50 GB / 4 TB

50 GB / 8 TB

Virtual Machine Memory Required (Min/Max)

1 GB / 2 GB

1 GB / 2 GB

1 GB / 4 GB

1 GB / 8 GB

1 GB / 16 GB

Performance (Messages/Hour) [Without queuing based on 100 KB message size] **

Email Routing

3.6K

34K

67K

306K

675K

FortiGuard Antispam

3.1K

30K

54K

279K

630K

FortiGuard Antispam + Antivirus

2.7K

26K

52K

225K

585K

System Specifications
Email Domains

20

100

800

2,000

Recipient-Based Policies (Domain/System)

15 /30

60 /300

600 / 3,000

1,500 / 7,500

1,500 / 7,500

Server Mode Mailboxes

50

150

400

1,500

3,000

Profiles (Domain/System)

10 / 15

50 / 60

50 / 200

50 / 600

50 / 600

** Recommended sizing for Gateway and Transparent deployments. For Server Mode, see Server Mode Mailbox metric.
If unsure, please validate the model selection by checking the peak mail flow rates and average message size detail with a FortiMail specialist.
** Hardware dependent. Indicative figures based on multiple VMs running on a shared system.

GLOBAL HEADQUARTERS

EMEA SALES OFFICE

APAC SALES OFFICE

LATIN AMERICA SALES OFFICE

Fortinet Inc.
899 Kifer Road
Sunnyvale, CA 94086
United States
Tel: +1.408.235.7700
Fax: +1.408.235.7737

120 rue Albert Caquot

06560, Sophia Antipolis,
France
Tel: +33.4.8987.0510
Fax: +33.4.8987.0501

300 Beach Road #20-01

The Concourse
Singapore 199555
Tel: +65.6513.3730
Fax: +65.6223.6784

Prol. Paseo de la Reforma 115 Int. 702

Col. Lomas de Santa Fe,
C.P. 01219
Del. Alvaro Obregn
Mxico D.F.
Tel: 011-52-(55) 5524-8480

Copyright 2014 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiCare and FortiGuard, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may
also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained
in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing
herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinets General
Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics
expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinets internal lab tests.
Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication
without notice, and the most current version of the publication shall be applicable.
FST-PROD-DS-ML FML-DAT-R30-201409