FCP FortiMail
FCP - FortiMail
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Fortinet Certified Professional (FCP) - FortiMail credential is a vendor certification for IT and security professionals who deploy, operate, and troubleshoot FortiMail secure email gateways. It suits mail administrators, network security engineers, SOC analysts handling email threats, and consultants who implement gateway, transparent, or server-mode deployments for organizations. The exam validates practical command of the FortiMail feature set rather than trivia: how the appliance is deployed and initially configured, how mail is routed and delivered across protected and unprotected domains, how antispam, antivirus, and content filtering policies are layered and tuned, and how authentication, encryption, and data loss prevention are applied to outbound and inbound traffic. It also tests monitoring, logging, and reporting, plus high availability, backup, and structured troubleshooting. Preparation should be hands-on. Build a lab with at least one FortiMail VM and a mail server, then work through access control, protected domains, relay and routing rules, recipient policies, antispam profiles, content profiles, TLS and S/MIME settings, and HA failover. Read the current FortiMail administration guide for the release you will be tested on, because GUI paths and feature names shift between versions. Practice reading logs and mail event traces to diagnose delivery failures, and rehearse backup, restore, and configuration synchronization. The exam is multiple choice and scenario-driven, so be ready to interpret a described topology and pick the configuration that produces the intended mail flow. Confirm current exam version, registration, and delivery details with Fortinet's official training and certification pages, since those specifics change.
What you'll study
About FCP FortiMail preparation
Is this an official Fortinet page?
No. This is independent study material for candidates preparing for the FCP - FortiMail exam. It is not affiliated with, endorsed by, or sponsored by Fortinet. Always treat Fortinet's official certification and training pages as the authoritative source for exam objectives, registration, and policy.
What is the exam format?
The exam is delivered as multiple-choice questions, typically including scenario-based items that describe a mail topology and ask you to choose the correct configuration or diagnose the outcome. Confirm the current format, number of items, and delivery options on Fortinet's official certification page, as these details change between versions.
How long is the exam and what does it cost?
Fortinet publishes the current exam duration, fee, and passing score for each certification. Those figures change over time and vary by region, so check the official Fortinet certification page or your Pearson VUE testing account before you register rather than relying on third-party summaries.
How hard is it?
Candidates with production FortiMail experience usually find it manageable; those who only read documentation often struggle with routing and policy questions. The hardest areas are mail routing and access control logic, recipient policy precedence, and diagnosing delivery problems from logs. Hands-on lab time is the strongest predictor of success.
What should I study first?
Start with deployment modes and initial configuration, because everything else depends on them. Then move to routing and delivery, followed by antispam, antivirus, and content profiles. Finish with authentication, encryption, DLP, monitoring, and HA. This order mirrors how a real deployment is built and makes later topics easier to reason about.
Can I retake it if I fail?
Retake rules, waiting periods, and any associated fees are set by Fortinet and its testing provider. Check the official certification policy page for the current retake terms before scheduling. Plan your first attempt when your lab practice is consistent, since repeated attempts cost both time and money.
What are common failure modes?
Weak spots tend to be the order of evaluation between access control rules, recipient policies, and relay settings; confusing gateway and server deployment behavior; and misreading logs when mail is deferred or rejected. Another frequent problem is studying a different FortiMail version than the one the exam targets, so confirm the version first.
Do I need to memorize GUI paths?
Not rote memorization, but you should know where major features live and, more importantly, what each setting does and how it interacts with others. Scenario questions test understanding of behavior and precedence, not menu navigation. Lab repetition builds that familiarity faster than flashcards.
How much lab time is enough?
There is no official figure. A practical approach is to build a full mail flow end to end: inbound filtering, protected domain authentication, outbound DLP and encryption, then HA failover and restore. Once you can predict what happens to a message at each policy stage without checking the guide, you are likely ready.