FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
sselvam
Staff
Staff
Article Id 198035

Description

 

This article describeshow to configure email alerts because sometimes the FortiGate cannot access to the account in order to send the email alert.

 

Scope

 

FortiGate.

Solution

 

This is an example of the configuration in FortiGate:

Configure Microsoft office365 account in the FortiGate.

Go to System -> Advanced -> Email Service option.

 SMTP SERVER: smtp.office365.com
 PORT: 587 
 AUTHENTICATION: example@domain.it
 Password: xxxxxxxxx
 SECURITY MODE: STARTTLS.

Note: The password entered should be the app password generated from Microsoft account

  • An App Password is a 16-digit passcode that gives a less secure app or device permission to access the Microsoft Account.
  • App Passwords can only be used with accounts that have 2-Step Verification turned on.

 

For more information on how to set up App Password on the Microsoft account, refer to the below document:

https://support.microsoft.com/en-us/account-billing/manage-app-passwords-for-two-step-verification-d...

 

 
To configure alert email from GUI.
Go to Log & Report -> Email Alert Settings.
 
 
On the same page, select the events for the alerts.
 
 
To configure alert email from CLI.
 
config system email-server
    set port 587
    set server smtp.office365.com
    set authenticate enable
    set username example@domain.it
    set password *************
end
 config alertemail setting
    set username example@domain.it
    set mailto1 admin1@example.com
    set mailto2 admin2@example.comend
 
Following this, it will be possible to send alert mails.

Test this with following command:
 
diagnose log alertmail test

 

Related article:

Wildcard FQDN firewall address should not be used in a firewall policy