Configuring FortiMail

FortiMail can be authorized into the Security Fabric using either the gutter on the Fabric Connectors page, or by pre-authorizing using the FortiMail serial number or certificate.

To join the Security Fabric from FortiMail:

1. Go to System > Customization and click the Corporate Security Fabric tab (or the Corporate Security Fabric tab in FortiMail 6.4.2 and earlier).
2. Click the toggle to enable the Fabric.
3. Enter the Upstream IP Address (root FortiGate) and the Management IP of the FortiMail.
4. Click Apply.

Authorizing using FortiOS

If the FortiMail was added to the Security Fabric but not pre-authorized, you can authorize it in FortiOS on the Fabric Connectors page.

To authorize FortiMail:

1. Go to Security Fabric > Fabric Connectors.
2. In the topology tree, hover over the FortiMail and click Authorize.

   

3. Verify the certificate is correct, then click Accept.

Pre-authorizing using the FortiMail certificate

FortiMail can be pre-authorized using its serial number or certificate. When you pre-authorize, the FortiMail can join at any time, and you will not need to authorize it FortiOS. In this example, FortiMail is pre-authorized using a certificate.

To pre-authorize FortiMail using a third-party or default certificate:

1. Log in to FortiMail.
2. Download the certificate. For example, in Chrome:
   1. In the left side of the address bar, click the icon to view the site information.
   2. Click Certificate.
   3. Click the Details tab, then click Copy to File.

      

   4. The Certificate Export Wizard opens. Click Next to continue.
   5. For the file format, select Base-64 encoded X.509 (.CER), then click Next.

      

   6. Browse to the folder location and enter a file name, then click Next.
   7. Click Finish, then click OK to close the dialog box.
3. In FortiOS, go to Security Fabric > Fabric Connectors and double-click the Security Fabric Setup card.
4. Beside Device authorization, click Edit and configure the following:
   1. Enter the FortiMail serial number.
   2. For Authorization type, select Serial Number.
   3. For Certificate, upload the .CER file you saved previously.

      

   4. Click OK.