Fortinet FortiMail 3000FH
FortiMail™ for Email Security
Click here to jump to more pricing!
Overview:
Powerful, Scalable Email Security Protection Available in an Array of Deployment Models
With best-in-class performance validated by independent testing firms, FortiMail delivers advanced multi-layered protection against the full spectrum of email-borne threats. Powered by FortiGuard Labs threat intelligence and integrated into the Fortinet Security Fabric, FortiMail helps your organization prevent, detect, and respond to emailbased threats including spam, phishing, malware, zero-day threats, impersonation, and Business Email Compromise (BEC) attacks.
Check the box against:
- Spam
- Phishing
- Spear-phishing and whale phishing
- Malicious Attachments and URLs
- Ransomware
- Zero-day Threats
- Impersonation
- Business Email Compromise (BEC)
Highlights:
- Protection against email-borne threats
- Validated performance
- Fabric-enabled email security
- Powered by FortiGuard Labs
Features:
Protection Against Email-borne Threats
Powerful anti-spam and anti-malware are complemented by advanced techniques like outbreak protection, content disarm and reconstruction, sandbox analysis, impersonation detection, and other technologies to stop unwanted bulk email, phishing, ransomware, business email compromise, and targeted attacks.
Validated Performance
Fortinet is one of the only email security vendors to consistently prove the efficacy of FortiMail through independent testing. FortiMail earned a 99.99% Spam Catch Rate from Virus Bulletin.
Fabric-enabled Email Security
FortiMail is integrated with Fortinet products as well as third-party components help you adopt a proactive approach to security by sharing IoCs across a seamless Security Fabric. It also enables advanced and complementary email security protection for Microsoft 365 and Google Gsuite Cloud email through API-level integration.
Powered by FortiGuard Labs
Fortinet FortiMail is powered by threat intelligence and FortiGuard AI-powered Security Services like antivirus, virus outbreak protection, and antispam, from FortiGuard Labs. With visibility across 600,000 customer environments worldwide, FortiGuard Labs is one of the preeminent threat research teams in existence.
Proactive Email Security
FortiMail addresses the full spectrum of risks that email poses to organizations, fortified by FortiGuard Labs’ global visibility and intelligence on the latest threats.
Multi-Layered Anti-Spam
Multiple sender, protocol and content inspection techniques shield users from spam and junk mail. Using a combination of reputation analysis, connection filtering, authentication and recipient verification methods allows for fast and accurate email protection. Checks include IP, domain, sender, SPF, DKIM, DMARC and geographical restrictions.
Finally, message structure and content are analyzed based on the digital signature, keywords in context, image analysis, embedded URIs, and more advanced techniques such as behavior analysis and spam outbreak protection. Working together, these techniques consistently identify and block a verified 99.99% of spam in real-world conditions.
Powerful Anti-Malware
Combining multiple static and dynamic technologies that include signature, heuristic, and behavioral techniques along with virus outbreak prevention, FortiMail protects against a wide range of constantly evolving threats.
Advanced Threat Protection (ATP)
For an even stronger defense against the very latest threat classes like business email compromise and targeted attacks, FortiMail offers optional content disarm and reconstruction, sandbox analysis, sophisticated spoof detection, and more.
Integrated Data Loss Prevention
A robust set of capabilities for data loss prevention and email encryption safely deliver sensitive emails and protect against the inadvertent loss of data. These features facilitate compliance with corporate policies and industry regulations.
Intuitive Controls
Real-time dashboards, rich reporting, centralized quarantine and simple to use end-user controls allow organizations to get running and realize value quickly. An intuitive user interface combined with flexible MTA and mail-handling capabilities give full visibility and control over email traffic.
Integration with the Fortinet Security Fabric
The future of email security is platform- or fabric-enabled to counter the growing sophistication of threats and multi-vector campaigns. As part of the Fortinet Security Fabric, Indicators of Compromise and other telemetry can be shared for enhanced security across your entire security infrastructure.
IT and security teams are able to more completely connect the dots to identify multi-vector campaigns by sophisticated actors. In addition, intensive and repetitive workflows including response can be automated to reduce the burden on security operations teams.
Intuitive Email Management
Real-time dashboards, rich reporting, centralized quarantines, and end user controls along with full MTA and mail-handling capabilities provide organizations full visibility and easy control over email traffic.
Easy-to-Use Configuration
Easy-to-use configuration controls make setting up and managing email security – even advanced security capabilities - easy for organizations of all sizes and use cases
High Performance, Flexible Deployment
Scale easily to handle millions of messages per hour. Serving organizations of all sizes, Fortinet provides a wide range of deployment models and operation modes to best match your organization’s email security needs.
Deployment Models
Appliances and Virtual Machines
FortiMail appliances and virtual machines are for organizations that prefer full control and management over their email security infrastructure for on-premise and cloud use cases.
- Appliances for on-premise environments
- Virtual machines for running on:
- Popular hypervisor platforms including:
- VMWare
- Citrix XenServer
- Hyper-V
- KVM
- Major cloud platforms:
- AWS
- Azure
- Google Cloud
- Oracle
- AliCloud
- Popular hypervisor platforms including:
FortiMail Cloud
FortiMail Cloud for organizations that want simple, easyto-use email security as-a-service for both on-premise and cloud-based email services.
Operation Modes
Gateway Mode
Provides inbound and outbound proxy mail transfer agent (MTA) services for existing email gateways. A simple DNS MX record change redirects email to FortiMail for analysis. FortiMail then relays safe email to its destination email server for delivery.
Microsoft and Google Cloud Email API Integration
FortiMail can be deployed out of line to simplify deployment, so no MX record change is required, and leverage the native Microsoft and Google APIs to deliver threat detection and post-delivery message clawback. Broad flexibility is possible with clawback to create policies that address compliance or unique business requirements, such as building search parameters based on keywords, file name, or content type. These capabilities can serve as powerful complements to native Microsoft and Google security features to bolster overall efficacy and reduce risk.
Transparent Mode
Transparent mode eliminates the need to change the DNS MX record, or to change the existing email server network configuration. Transparent mode is particularly appealing for service providers that want to extend email security services to their customer bases. Not available with FortiMail Cloud.
Server Mode
The FortiMail device acts as a standalone messaging server with full SMTP email server functionality, including flexible support for secure POP3, IMAP, and WebMail access.
Feature Bundles:
| We want full control. | |||
|---|---|---|---|
| Feature | Base Bundle | Enterprise Advanced Threat Protection Bundle | Ent. ATP with Cloud Email API Support Bundle |
| 99.99% Spam Capture Rate | |||
| Advanced Multi-Layer Malware Detection | |||
| Inbound and Outbound Filtering | |||
| Integration with Customer LDAP | |||
| Secure Message Delivery (TLS) | |||
| Message Tracking | |||
| Virus Outbreak Service | |||
| Identity-Based Encryption (IBE) | |||
| Reporting | |||
| Email Data Loss Prevention | |||
| Content Disarm and Reconstruction | |||
| URL Click Protection | |||
| Impersonation Analysis | |||
| Cloud Sandboxing | |||
| Real-time Scanning of Microsoft and Google Mailboxes | |||
| Scheduled Scanning of Microsoft and Google Mailboxes | |||
| Post-delivery Clawback of Newly Discovered Email Threats | |||
Additional Add-on Capabilities
Email Continuity
Email Continuity for FortiMail Cloud is designed to protect valuable productivity by providing emergency mailbox services when organizations experience an outage of their email services.
Dynamic Image Analysis Service
Protects your organization and employees against inappropriate and sexually explicit images
Integrations with Fortinet Solutions
Specifications:
| FortiMail 2000F | FortiMail 3000F | FortiMail 3000FH | |
|---|---|---|---|
| Recommended Deployment Scenarios | |||
| Large enterprise, education, and government departments | Highest performing appliance for the largest corporate, university, ISP, and carriers | Highest performing appliance for the largest corporate, ISP, and carriers requiring more memory | |
| Hardware Specifications | |||
| 10/100/1000 Interfaces (Copper, RJ45) | 4 | 4 | 4 |
| SFP Gigabit Ethernet Interface | 2 | 2 | 2 |
| SFP+ 10 Gigabit Ethernet Interface | — | 2 | 2 |
| Redundant Hot Swappable Power Supplies | |||
| Storage | 2× 2 TB SAS (6× 2 TB Optional) | 2× 2 TB (10× 2 TB Optional) | 2× 2 TB (10× 2 TB Optional) |
| Secure Encrypted Drives (SED) | — | — | — |
| RAID Storage Management | Hardware; 1, 5, 10, 50, Hot Spare (Based on drive count) |
Hardware; 1, 5, 10, 50, Hot Spare (Based on drive count) |
Hardware; 1, 5, 10, 50, Hot Spare (Based on drive count) |
| Memory | 32 GB | 64 GB | 512 GB |
| Form Factor | Rack Mount, 2U | Rack Mount, 2U | Rack Mount, 2U |
| Trusted Platform Module (TPM) | |||
| Power Supply | Dual | Dual | Dual |
| System Specification | |||
| Protected Email Domains* | 1000 | 2000 | 2000 |
| Recipient-Based Policies (Domain / System) | 800 / 3000 | 1500 / 7500 | 1500 / 7500 |
| Server Mode local mailboxes | 2000 | 3000 | 3000 |
| Antispam, Antivirus, Authentication, and Content Profiles (per Domain / per System) | 50 / 400 | 50 / 600 | 50 / 600 |
| Data Loss Prevention | |||
| Centralized Quarantine | |||
| Microsoft 365 and Google G‑suite Email API Integration | Optional | Optional | Optional |
| Performance (Messages/Hour) [Without queuing based on 100 KB message size] | |||
| Email Routing (per hour)** | 1.6 Million | 3.5 Million | 3.5 Million |
| FortiGuard Antispam + Virus Outbreak (per hour)** | 1.1 Million | 2.6 Million | 2.6 Million |
| FortiGuard Enterprise ATP (per hour)** | 800 K | 2.1 Million | 2.1 Million |
| Cloud API Performance (Messages/Hour) [Without queuing based on 100 KB message size] | |||
| Email Routing (per hour)** | 372 K | 705 K | 705 K |
| FortiGuard Antispam + Virus Outbreak (per hour)** | 280 K | 560 K | 560 K |
| FortiGuard Enterprise ATP (per hour)** | 233 K | 465 K | 465 K |
| Dimensions | |||
| Height x Width x Length (inches) | 3.5×17.2×25.5 | 3.5×17.2×25.5 | 3.5×17.2×25.5 |
| Height x Width x Length (mm) | 89×437×647 | 88×440×745 | 88×440×745 |
| Weight | 32 lbs (14.5 kg) | 55.8 lbs (25.3 kg) | 55.8 lbs (25.3 kg) |
| Environment | |||
| Power Source | 100–240 V AC, 50–60 Hz | 100–240 V AC, 50–60 Hz | 100–240 V AC, 50–60 Hz |
| Maximum Current | 10.0 A / 110 V, 3.5 A / 240 V | 9.8 A / 110 V, 4.9 A / 220 V | 9.8 A / 110 V, 4.9 A / 220 V |
| Maximum Power Required | 219 W | 592.9 W | 592.9 W |
| Power Consumption (Average) | 189 W | 485.1 W | 485.1 W |
| Heat Dissipation | 781 BTU/h | 1325 BTU/h | 1325 BTU/h |
| Forced Airflow | Front to back | Front to back | Front to back |
| Humidity | 8% to 90% non‑condensing | 8% to 90% non‑condensing | 8% to 90% non‑condensing |
| Operating Temperature | 41 °F to 95 °F (5 °C to 35 °C) | 50 °F to 95 °F (10 °C to 35 °C) | 50 °F to 95 °F (10 °C to 35 °C) |
| Storage Temperature | –40 °F to 140 °F (–40 °C to 60 °C) | –40 °F to 158 °F (–40 °C to 70 °C) | –40 °F to 158 °F (–40 °C to 70 °C) |
| Compliance and Cetification | |||
| Compliance | FCC Part 15 Class A, RCM, VCCI, CE, UL/cUL, CB, BSMI, RoHS | ||
| Certification | VBSpam and VB100 rated. Common Criteria evaluation in process (NIAP). NIST CMVP Implementation under test (FIPS140‑3). | ||
* Protected Email Domains is the total number of email domains that can be configured on the appliance. Domain Associations can be used to enable additional domains which share configuration with the primary domain to which they are assigned. Advanced management license increases the protected domain limit by 50%.
** Tested using FortiMail 7.0
Features Summary:
System
- Wide range of deployment and operation options
- On-premise or public or private cloud deployment
- Gateway, Microsoft and Google API connectors, Transparent, and Server Mode
- Inbound and Outbound Inspection
- Support for multiple email domains with per-domain customization
- MSSP multi-tenant support with white label support
- Multi-tier administration
- IPv4 and IPv6 Address Support
- Virtual Hosting using Source and/or Destination IP Address Pools
- SMTP Authentication Support via LDAP, RADIUS, POP3 and IMAP
- LDAP-Based Email Routing
- Per User Inspection using LDAP Attributes on a Per Policy (Domain) Basis
- Geographic IP location-based policy
- Comprehensive Webmail Interface for Server Mode Deployments and Quarantine Management
- Mail Queue Management
- Multiple Language Support for Webmail and Admin Interface
- SMTP RFC Compliance
- Modern HTML 5 GUI
- Independently tested by SELabs, and Virus Bulletin
- Compatibility with cloud services e.g. Microsoft 365, Google Workspace, Amazon AWS, and Microsoft Azure
- DNS-based Authentication of Named Entities (DANE) support
Antispam
- FortiGuard Antispam Service
- Sender and domain reputation
- Spam and attachment signatures
- Dynamic heuristic rules
- Outbreak protection
- Full FortiGuard URL Category Filtering includes
- Spam, malware and phishing URLs
- Pornographic and adult URLs
- Newly registered domains
- Greylisting for IPv4, IPv6 addresses and email accounts
- Local sender reputation (IPv4, IPv6 and End Point ID-based)
- Behavioral analysis
- Integration with third-party spam URI and real-time blacklists (SURBL/RBL)
- Newsletter (greymail) and suspicious newsletter detection
- PDF Scanning and image analysis
- Block/safe lists at global, domain, and user levels
- Support for enterprise sender identity standards
- Sender Policy Framework (SPF)
- Domain Keys Identified Mail (DKIM)
- Domain-Based Message Authentication (DMARC)
- Flexible action and notification profiles
- Multiple system and per-user self-service quarantines
Targeted Attack Protection
- Content Disarm and Reconstruction
- Neutralize Office and PDF documents (remove macros, active content, attachments, and more)
- Neutralize email HTML content by removing hyperlinks / rewrite URLs
- Business Email Compromise (BEC)
- Multi-level anti-spoof protection
- Impersonation analysis
- manual and automatic address impersonation detection
- Cousin domain detection
- URL Click Protect to rewrite URLs and rescan on access
- Integration with FortiIsolator Browser Isolation platform to neutralize browser-based threats
API Integration
- Microsoft 365 and Google Gsuite Email Integration
- Post-delivery threat clawback
- Scheduled scan
- Real-time scanning
- Internal mail scanning
Content Detection
- FortiGuard Antivirus Service detection
- CPRL signature checking
- Heuristic based behavioral detection
- Greyware detection
- FortiGuard Virus Outbreak Protection Service
- Global threat intelligence and data analytics
- Active content detection (PDF & Office Documents)
- Rescan for threats on quarantine release
- Custom file hash checking Mime and file type detection
- Comprehensive data-loss prevention with file fingerprinting and sensitive data detection
- Automatic Windows fileshare and manual upload file fingerprinting
- Healthcare, Finance, personally identifiable information and profanity detection
- Automatic decryption of Archives, PDF and Office Documents using built-in and administrator-defined password lists and word detection within email body
- PDF Scanning and image analysis
- Dynamic Image Analysis Service
- Identify and report on illicit and sexually explicit content
Encryption
- Comprehensive encryption support
- Server to server TLS with granular ciphersuite control and optional enforcement
- S/MIME
- Clientless encryption to the recipient desktop using Identity Based Encryption (IBE)
- Optional Outlook plugin to trigger Identity Based Encryption (IBE)
Management, Logging, and Reporting
- Basic/advanced management modes
- Per domain, role-based administration accounts
- Comprehensive activity, configurations change and incident logging and reporting
- Built-in reporting module
- Detailed message tracking
- Centralized quarantine for large scale deployments
- Optional centralized logging and reporting with FortiAnalyzer
- SNMP support using standard and private MIB with threshold-based traps
- Local or external storage server support, including iSCSI devices
- External Syslog support
- Open REST API for configuration and management
High Availability (HA)
- High availability supported in all deployment scenarios
- Active-Passive mode
- Active-Active configuration synchronization mode
- Quarantine and mail queue synchronization
- Device failure detection and notification
- Link status, failover and redundant interface support
Advanced
- Policy-based e-mail archiving with remote storage options
- Support for Exchange journal archiving
- Advanced Email Server feature set including
- Comprehensive webmail interface
- POP3, IMAP mail access
- Calendaring functions
- Undo Send
- SAML 2.0 SSO and ADFS integration for webmail and quarantine access
Support
- Simple support options with inclusive bundles
- Advanced RMA Support
- Professional services and installation support options
Documentation:
Download the Fortinet FortiMail Datasheet (PDF).