Description If spam outbreak protection is enabled in an antispam profile, FortiMail will temporarily hold suspicious email for a certain period of time if the enabled FortiGuard antispam check (block IP and/or URI filter) returns no result. After the specified time interval, FortiMail will query the FortiGuard server for the second time. This provides an opportunity for the FortiGuard antispam service to update its database in cases a spam outbreak occurs.
This article describes how to view and edit spam outbreak protection period.
Solution 1) To view the email on hold, go to Monitor -> Mail Queue -> FortiGuard Outbreak Protection. 2) To edit the spam outbreak protection period, edit via CLI as the following: (Default is 30 Minutes).
# config system fortiguard antispam set outbreak-protection-period 20 end
