This FortiMail feature is used to control traffic generated by computers in home and small offices or
mobile devices without a static IP address. When a device changes its IP address and if the new IP address is associated with a past device that had been generating suspicious traffic, the new device could be affected.
In order to avoid this problem, the endpoint
reputation feature needs to be activated, so it can control the spam from SMTP clients with dynamic
addresses.
In the analysis Endpoint reputation does not
use the IP address directly as unique identifier, but associates the subscriber
ID, login ID or MSISDN or any other identifier. MSISDN is an identifier that is
associated with a device such as a SIM card to a cell phone.
Once this feature has been activated, it records the reputation of every device that passes spam traffic, but takes in
account information in order to keep track of the traffic for each
device connected in an unique way,
endpoints can be blocked by MSISDN regardless the IP address used or a threshold can be set up so that,
once reached, a specific action will be preformed to protect mail service.
