FCP FortiMail study plan

Diagram the FortiMail deployment modes (gateway, transparent, server) and select the appropriate mode for three given network scenarios

Configure a basic gateway-mode FortiMail with protected domains, relay hosts, and recipient routing using the web UI

Walk through the antispam processing pipeline and identify where each scanner (IP reputation, Bayesian, heuristic, DNSBL, SURBL) applies

Enable and tune the default antispam profiles for inbound and outbound mail

List the default ports and protocols used by FortiMail services and document any changes needed for a NAT deployment

Configure antivirus profiles with FortiGuard and heuristic scanning, and test detection with the EICAR test file

Build content filter rules for attachment blocking, file-type restrictions, and keyword scanning

Create and apply a content disarm and reconstruction (CDR) policy to sanitize inbound attachments

Explain how FortiMail integrates with FortiSandbox and configure sandboxing for suspicious attachments

Document the order of antispam, antivirus, and content filter processing within a policy

Configure access control rules (IP, sender, recipient, authentication) and explain their evaluation order

Build inbound and outbound mail routing policies with relay hosts, smart hosts, and fallback routes

Configure protected domains, domain-level and user-level quarantine settings, and release procedures

Trace a message through the mail queue using the web UI and CLI, and clear or requeue stuck messages

Set up a secure TLS delivery policy for outbound mail to a partner domain

Configure SMTP authentication (SMTP AUTH) and recipient verification (LDAP or local) for inbound and outbound mail

Deploy and test S/MIME or IBE encryption for a user group, including certificate management

Create a DLP profile with a sensitive-data pattern (e.g., credit card numbers) and apply it to outbound mail

Explain how DKIM signing, SPF checking, and DMARC policy enforcement work in FortiMail and configure each

Document the interaction between authentication, encryption, and DLP in the outbound policy flow

Configure high availability (HA) in active-passive mode, including heartbeat and failover settings

Test HA failover and verify mail flow continuity and session synchronization

Back up and restore the FortiMail configuration, and document the backup schedule

Configure logging to a FortiAnalyzer or syslog server and verify log receipt

Explain the differences between configuration backup and mail-data backup, and when to use each

Build a monitoring dashboard that displays mail volume, spam ratio, virus detections, and queue depth

Create and schedule reports for antispam effectiveness and top senders/recipients

Configure alert emails for critical events such as HA failure, queue buildup, and license expiry

Use CLI diagnostic commands (e.g., diagnose, get, execute) to troubleshoot a simulated mail delivery failure

Analyze a message tracking log to identify the cause of a delayed or rejected message

Review weak areas from previous weeks and re-lab the corresponding configurations

Complete a timed practice exam covering all domains and record domain-level scores

Re-read official documentation on antispam, encryption, and DLP to close knowledge gaps

Create flashcards for key CLI commands, default ports, and policy evaluation orders

Explain the end-to-end mail flow for an inbound and an outbound message, including all inspection points

Complete a second full-length practice exam and compare results with week 7

Perform a final review of HA, backup, and troubleshooting scenarios using hands-on labs

Re-verify configuration of routing, authentication, and DLP on a fresh lab instance without notes

Review exam objectives and confirm confidence level for each domain

Prepare a one-page quick-reference sheet of critical facts and commands for final review