| Table of Contents | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
About The Device
FortiMail FortiMail delivers advanced multi-layered protection against the full spectrum of email-borne threats, it helps your organization prevent, detect, and respond to email-based threats including spam, phishing, malware, zero-day threats, impersonation, and Business Email Compromise (BEC) attacks.
...
Port Requirements
Source | Destination | Port |
|---|---|---|
FortiMail Email Security Fortinet FortiMail | CyberHub | 601 (TCP) |
Device Configuration
Log in to the FortiMail unit’s web UI.
Go Navigate to Log & Report > Log Setting > Remote.
...
Click New to create a new entry, a dialog will appear.
...
Enable status to allow logging to a remote host.
Enter a Name.
In Server name/IP, enter the IP address of the CyberHub.
In Server Port, enter the TCP port number as 601.
In Protocol, select Syslog to send logs to CyberHub.
In Mode, select TCP
From Level, select the severity level Information. FortiMail unit logs all messages at and above the selected severity level.
From Facility, select the facility identifier that the FortiMail unit will use to identify itself when sending log messages. To easily identify log messages from the FortiMail unit when they are stored on a remote logging server, enter a unique facility identifier, and verify that no other network devices use the same facility identifier.
Deselect CSV format.
Under Logging Policy Configuration, enable all types of events/logs to be forwarded to CyberHub.
...
Property | Default Value | Description |
|---|---|---|
IP Address | FortiMail Email Security Fortinet FortiMail interface IP address | Hostname or IP address of the device which forwards logs to the CyberHub. |