FCP FortiMail flashcards
FCP FortiMail · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- Gateway mode
- FortiMail sits inline between the external MTA and the protected mail server, relaying SMTP in both directions while the mail server keeps its own IP and mailbox store.
- Transparent mode
- FortiMail operates as a Layer 2 bridge, so clients and the mail server keep their existing IP addresses and no routing changes are required on the network.
- Server mode
- FortiMail acts as the final MTA and MDA, storing mailboxes locally and serving POP3, IMAP, and webmail directly to end users without a separate mail server.
- Offload mode
- FortiMail performs antispam, antivirus, and content scanning on inbound mail, then relays clean messages to an internal mail server that still owns the mailboxes.
- Factory reset
- The CLI command 'execute factoryreset' wipes the configuration and reboots; 'execute factoryreset keep-ips' preserves the current management IP settings.
- Access control rule
- A rule that classifies connecting SMTP clients as trusted relay, protected-domain sender, or untrusted; rules are evaluated top-down and the first match wins.
- Relay host
- The next-hop SMTP server FortiMail forwards mail to; it is selected by matching the recipient domain in the routing table or by the default relay entry.
- Recipient policy
- A domain-level policy that applies antispam, antivirus, content, and DLP profiles to mail addressed to a protected domain, and defines the action for matches.
- Recipient mapping
- A rewrite of the envelope recipient so mail sent to an alias or old address is delivered to the real mailbox or forwarded to an external address.
- Mail queue
- The store of messages awaiting delivery or retry; administrators can flush, delete, or inspect individual messages and their SMTP deferral reasons.
- Greylisting
- A technique that temporarily rejects first-seen sender/recipient/IP triplets with a 4xx code; legitimate MTAs retry, while many spam bots do not.
- SPF check
- The antispam profile verifies the sending IP against the domain's SPF record; a fail or softfail result adds spam score or triggers the configured action.
- DKIM verification
- FortiMail validates the cryptographic signature added by the sending domain; a valid signature lowers spam score, while a broken signature raises it.
- DMARC policy
- The domain's published DMARC record tells receivers whether to take no action, quarantine, or reject mail that fails SPF and DKIM alignment.
- Bayesian filter
- A statistical antispam engine trained on known spam and legitimate mail; FortiMail uses it to score messages based on token probabilities.
- Antispam profile
- A set of antispam checks (DNSBL, SURBL, greylisting, SPF, DKIM, heuristics) with score thresholds that determine tag, quarantine, or reject actions.
- True file type
- Attachment filtering by MIME sniffing of the actual file content rather than the filename extension, which catches renamed executables that extension filters miss.
- Personal quarantine
- A per-user quarantine visible to the end user through webmail, where the user can release or delete their own quarantined messages without administrator involvement.
- SMTP AUTH
- Authentication of the sending user during SMTP submission, typically on port 587, enabling per-user policies and preventing unauthorized relay through FortiMail.
- IBE encryption
- Identity-Based Encryption uses a FortiMail key server; the recipient authenticates to a secure portal to retrieve the private key, so no pre-shared certificate is needed.
- S/MIME scanning
- FortiMail decrypts inbound S/MIME messages using stored user or domain certificates, scans the content, then re-encrypts before delivering to the recipient.
- DLP sensor
- A pattern-matching rule (credit card, SSN, custom regex) that inspects message body and attachments and applies log, quarantine, block, or encrypt actions.
- Outbound TLS enforcement
- A per-domain or global setting requiring TLS for outbound SMTP; if the remote server does not offer TLS, delivery can be deferred or rejected.
- LDAP authentication profile
- A configuration that binds to an LDAP or Active Directory server to validate user credentials for SMTP AUTH, webmail login, and per-user policy lookup.
- FortiView
- A real-time monitoring dashboard in FortiMail showing top senders, recipients, spam sources, and message volume aggregated from recent log data.
- Remote logging
- Forwarding FortiMail logs to a syslog server or FortiAnalyzer for long-term retention and correlation; configured under Log & Report > Log Config.
- Scheduled report
- A recurring report (daily or weekly) generated from the local log database or FortiAnalyzer and emailed to administrators for review.
- SNMP monitoring
- Enables traps and queries for device health metrics such as CPU, memory, disk usage, mail queue depth, and HA state under System > SNMP.
- Active-passive HA
- One FortiMail node handles all mail while a secondary node stays synchronized and takes over the virtual IP if the primary fails.
- HA queue synchronization
- An HA option that replicates the mail queue to the secondary node so in-flight messages are not lost when a failover occurs.
- Configuration backup
- An export of the FortiMail configuration under System > Maintenance > Backup; it contains passwords and certificates and must be protected.
- diagnose debug application smtpd
- A CLI command that enables SMTP daemon debugging output to the console, useful for tracing mail-flow and authentication problems in real time.