Technical Tip: How to enable email and spam filter logs

[cfirpo_FTNT]

Description
This article describes how to enable email and spam filter logs. It may indeed be useful to enable these logs in case a troubleshooting is needed.

All of these logs are disabled by default for the services listed below as it can cause unnecessary processing on the unit and should only be enabled if it is a requirement and/or for troubleshooting purposes:

IMAP
POP3
SMTP
MAPI
MSN, Yahoo, Gmail

Solution
In this example IMAP logging will be enabled with the default profile.

# config spamfilter profile
    edit default
    config imap
        set log enable
end

Repeat the operation for all additional services or different filter profiles, as illustrated below:

# config spamfilter profile
    edit default
        show full-configuration

config spamfilter profile
    edit "default"
        set comment "Malware and phishing URL filtering"
        set flow-based disable
        set replacemsg-group ''
        set spam-log enable
        set spam-filtering disable
        set external disable
        unset options
        config imap
            set log disable
        end
        config pop3
            set log disable
        end
        config smtp
            set log disable
        end
        config mapi
            set log disable
        end
        config msn-hotmail
            set log disable
        end
        config yahoo-mail
            set log disable
        end
        config gmail
            set log disable
        end
        set spam-bword-threshold 10
        unset spam-bword-table
        unset spam-bwl-table
        unset spam-mheader-table
        unset spam-rbl-table
        unset spam-iptrust-table
        set spam-log-fortiguard-responsed disable
    next
end