This FortiMail feature is used to control traffic generated by computers in home and small offices or mobile devices without a static IP address. When a device changes its IP address and if the new IP address is associated with a past device that had been generating suspicious traffic, the new device could be affected.
In order to avoid this problem, the endpoint reputation feature needs to be activated, so it can control the spam from SMTP clients with dynamic addresses.
In the analysis Endpoint reputation does not use the IP address directly as unique identifier, but associates the subscriber ID, login ID or MSISDN or any other identifier. MSISDN is an identifier that is associated with a device such as a SIM card to a cell phone.
Once this feature has been activated, it records the reputation of every device that passes spam traffic, but takes in account information in order to keep track of the traffic for each device connected in an unique way, endpoints can be blocked by MSISDN regardless the IP address used or a threshold can be set up so that, once reached, a specific action will be preformed to protect mail service.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.