Compatibility and Prerequisites

Following are the compatibility and prerequisites for deploying the FortiPhish Alert Button in Microsoft Exchange environments.

Feature	Environment
	Exchange On-Premises (Exchange 2016 or later)	Exchange Online / Microsoft 365	Hybrid Environment
Required XML File	FAB_OnPrem.xml	FAB_Online.xml	FAB_Online.xml (for Online mailboxes) FAB_OnPrem.xml (for On-premises mailboxes)
Supported Outlook Clients	Outlook 2016 or later (Windows/Mac) Outlook Web App (OWA) or Outlook on the web	Outlook 2016 or later (Windows/Mac) Outlook Web App (OWA) or Outlook on the web Outlook Mobile (iOS/Android)	Varies by mailbox environment type
Microsoft Graph Permissions	No	Yes	Yes (for Exchange Online mailboxes)

General Limitations Across All Environments:

• Only Azure AD (Microsoft Entra ID) work or school accounts can fully use FAB's reporting features. Personal Microsoft accounts can install the add-in but cannot authenticate to report.

• Guest users cannot use centrally deployed FAB add-ins across tenants. They must install FAB within their own tenant to report phishing.

• For assistance with FortiPhish Alert Button (FAB) in sovereign/government cloud environments (GCC, GCCH, DoD), contact Fortinet Support.

• Outlook accounts configured with POP/IMAP do not support add-ins, making FAB incompatible.

• Mobile Outlook (iOS/Android) and modern web clients are unsupported for on-premises Exchange Servers.