FortiMail

1
© Fortinet Inc. All Rights Reserved.
We’ve put together a collection of Fortinet Security Awareness and Training Service content for
your use. Be sure to peruse the whole deck to see what is here you can leverage.
Instructions
Limited time? Use the version
best suited for the time you have.
1
Move in/out slides as you need
them to help tell your story.
2
Delete slides you
don’t need.
3
:
0 5 0 0
:
1 5 0 0
:
3 0 0 0

2
Security Awareness and Training Pitch
: 0
0
5
0
Use these core slides to insert into your larger presentation deck.

3
Access &
Endpoint
Security
Cloud
Security
Open
Ecosystem
Secure
Networking
FortiGuard
Threat
Intelligence
Network
Operations
Security
Operations
The future of
email security
goes beyond
email.

4
Comprehensive Protection
Validated Performance
Security Fabric Integration
Powered by FortiGuard Labs
Industry-Leading Cost to Performance
Introducing FortiMail
Advanced protection
against the full spectrum
of email-borne threats.
On-premise
Exchange
Cloud-based
Email
Hybrid Email

5
Comprehensive protection
Malicious Content
Malicious Files
Malicious URLs
Appliance
Deployment Types
VM FortiMail Cloud
Operation Modes
Gateway Transparent Server O365 API
API
SECURE INBOUND EMAILS
Phishing/Spear/Whale Phishing
Impersonation
Business Email Compromise
Advanced/Targeted Attacks
Email-based Ransomware Threats
Illicit/Adult Content
Spam
DETECT BUILDING BLOCKS
SECURE OUTBOUND EMAILS
Responses to malicious emails
Intentional data exfiltration
Data leak prevention
Email encryption
Man-in-the-middle attacks

6
High marks in performance across 3rd party testers
99.8%
Detection of malicious
threats in emails.
90%
Total Accuracy Rate
94%
Overall Detection Rate
91%
Protection and Legitimate
Handling Rate
99.90%
Spam Catch Rate
100%
Malware Detected
Jan 2022

7
Frost Radar™: Global Email Security Market Report
Download the report.
“Fortinet’s broader company vision places
emphasis on the value of the Fortinet
Security Fabric that integrates its extensive
portfolio of security solutions.”
“Fortinet FortiMail is integrated into the
Fortinet Security Fabric to enable
advanced security outcomes in email
(such as Sandbox, browser isolation,
EDR), as well as contribute to the sharing
of IOCs across security infrastructure in
use by customers.”

8
: 0
0
5
1

9
01
02
03
Our Vision
About FortiMail
Additional Services
04
Next Steps

10
Access &
Endpoint
Security
Cloud
Security
Open
Ecosystem
Secure
Networking
FortiGuard
Threat
Intelligence
Network
Operations
Security
Operations
The future of
email security
goes beyond
email.

11
The new workplace is anywhere.
The new workday isn’t 8 to 5,
it’s timezone to timezone.
More surface points.
More data everywhere.
Secure the Workday

12

14
Email’s use as a primary threat vector…
15X
Increased use of
“Misrepresentation” in Social
Engineering-related
incidents.
36%↑
Percent of breaches
involving phishing, up from
25% YoY.
↑
BEC
58%
Percent of Business Email
Compromise (BEC) attacks
that resulted in loss of
money.
Statistics from Verizon Data Breach Investigations Report 2021.
↑
Percent of breaches
involving ransomware, up
from ~5% the prior year.*
10%

15
Ransomware intensity (FortiGuard Labs)
0
50
100
150
200
250
Detect Ransomware Attacks on Devices (K)
Source: Fortinet – July 2021
Number
of
Unique
Devices
(K)
Weekly average (June ‘21) = 149,000
July Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun
10X
Growth

16
Advanced protection
On-premise
Exchange
Cloud-based
Email
Hybrid Email

17
Malicious Content
Malicious Files
Malicious URLs
Appliance
Deployment Types
VM FortiMail Cloud
Operation Modes
API
Impersonation
Spam
Email encryption

18
Advanced multi-layer
security against:
• Known threats
• Suspected threats
• Unknown threats/Zero-days
• Impersonation attempts
• Business Email Compromise
FortiMail
Impersonation Analysis
Cousin Domain Detection
FortiGuard URL Filtering
FortiGuard Anti-Spam
FortiGuard Antivirus
SPF, DMARC, DKIM
Newsletter Greymail
Click Protection
Outbreak Protection
Behaviour Analysis
Content Disarm

19
FortiMail
SIEM
SOAR
Sandbox
Authentication
Privacy & Encryption
Anti-Virus
Content Disarm
Content Analysis
Dynamic Directory
and File
Fingerprinting
Archival
security against:
• Accidental disclosures
• Exfiltration
• Man-in-the-Middle Attacks
Facilitate automated
response workflows.

20
99.8%
threats in emails.
90%
Total Accuracy Rate
94%
91%
Handling Rate
99.90%
Spam Catch Rate
100%
Malware Detected
Jan 2022

21
Options for any organization size and deployment
Appliances
• 5 appliance models
• Filter up to 3.2M
messages per hour
• Support for 10GE
SaaS/API*
• Fully-managed by Fortinet
• Gateway or Server mode
• Standard or Premium
• Per mailbox per year
Virtual Machines
• 6 VM models
• CPU and domain-based
• Perpetual licensing or
subscription
We want full control.
Solutions for organizations that prefer full control and
management over their email security.
Manage it for us.
Solutions for organizations that want email
security-as-a-service.

22
FortiMail
Feature Base Bundle
Enterprise Advanced Threat
Protection Bundle
Ent. ATP with Microsoft O365 API
Support Bundle
99.7% Spam detection rate ● ● ●
Advanced multi-layer malware detection ● ● ●
Inbound and outbound filtering ● ● ●
Integration with customer LDAP ● ● ●
Secure message delivery (TLS and DANE) ● ● ●
Message tracking ● ● ●
Virus Outbreak Service ● ● ●
Identity-Based Encryption (IBE) ● ● ●
Reporting ● ● ●
Email Data Loss Prevention ● ● ●
Content Disarm and Reconstruction ● ●
URL Click Protection ● ●
Impersonation Analysis ● ●
Cloud Sandboxing ● ●
Real-time scanning of Microsoft 365 mailboxes ●
Scheduled scanning of Microsoft 365 mailboxes ●
Post-delivery clawback of newly discovered email threats ●

23
Manage it for us.
Feature Cloud Gateway Cloud Gateway Premium
Cloud Gateway Premium with
Microsoft 365 API Support
Managed Service (infrastructure) ● ● ●
99.999% Service availability ● ● ●
Identity-Based Encryption (IBE) ● ●
Email Data Loss Prevention ● ●
FortiMail Cloud

25
Email continuity available with FortiMail Cloud
Email Continuity is designed to protect valuable productivity by providing emergency mailbox
services when organizations experience an outage in their email services.
Mitigates the impacts of downtime
and keep end users productive
during business outages.
Reduces recovery time to near zero
as employees and users access
queued email directly on FortiMail
when email services are down.
Queues emails up to 30 days and is
available before or during an
outage.

26
FortiIsolator - Safe Content Rendering
Allows users to browse the web in an isolated environment which renders safe content
in a remote container.
Directly accessed using Chrome Accessed via FortiIsolator using Chrome

27
Protects the network against sexually
explicit images
• Identifies suspect image attachments in emails
• Educates users about the company policy when
questionable content is detected
• Monitors and logs/archives emails to provide
visibility of misuse
• Enforces company policy by taking appropriate
action on emails containing explicit content
• Ensures adherence to Policy and effective
compliance
Dynamic Image Analysis Service

28
Introducing Fortinet Security Awareness and Training
Created by the Fortinet Training Institute, the Fortinet Security Awareness and Training service helps IT,
Security and Compliance leaders build a cyber-aware culture where employees recognize and avoid falling
victim to cyberattacks. For compliance-sensitive organizations, the service also helps leaders satisfy
regulatory or industry compliance training requirements.
High Quality
Security Training
Engaging
Communication
& Reinforcement
Resources
Easy to Use
Administration &
Management
Active
Monitoring &
Reporting
Partner Ready FortiPhish Integration
with Remediation
Training
Your
Brand
Here
Purpose-built aligned to NIST-800-50 and NIST 800-16 Guidelines
Designed by
Security Experts

29
CTAP Email Risk Assessment
Test drive FortiMail for detecting email-borne threats and stopping spam.
Exchange Server 2016

30
Part of the Fortinet Security Fabric.
The future of email
security goes
beyond email.
Fortinet FortiMail provides advanced
email security protection against the full
spectrum of email-based threats.
Powered by threat intelligence from
FortiGuard Labs.
FortiMail
Efficacy validated by independent testers
Start an Email Risk Assessment or POC.

31
: 0
0
0
3

33
01
02
03
Our Vision
About FortiMail
Additional Services
04
Next Steps

34
Access &
Endpoint
Security
Cloud
Security
Open
Ecosystem
Secure
Networking
FortiGuard
Threat
Intelligence
Network
Operations
Security
Operations
The future of
email security
goes beyond
email.

35

36
The new workplace is anywhere.
The new workday isn’t 8 to 5,
it’s timezone to timezone.
More surface points.
More data everywhere.
Secure the Workday

37
RISK
Employee-centric Threat Defense
Secure the Workday
Web browsing/
researching
SaaS Application Usage
Endpoint(s)
Integrity
Access
Employee Awareness
Email

38
RISK
Employee-centric Threat Defense
Secure the Workday
Web Protection
SaaS Security
Endpoint Security
Access
Security Awareness and Training
Email Security

39
RISK
Fortinet Solutions for Employee-centric Threat Defense
Secure the Workday
Access
 FortiAuthenticator
 FortiToken
Web Protection
 FortiSASE
 FortiProxy
 FortiIsolator
Email Security
 FortiMail
Endpoint Security
 FortiClient
 FortiEDR
SaaS Security
 Fortinet CASB
SAT
 Fortinet Security
Awareness and
Training Service
 FortiPhish

40
Complement technology with
awareness programs for
workforces
Secure user behavior while also
improving the user experience
Share indicators of compromise
across broader security infrastructure
Drive automation of workflows
including response
How You Secure the Workday

42
Email’s use as a primary threat vector…
15X
Increased use of
“Misrepresentation” in Social
Engineering-related
incidents.
36%↑
Percent of breaches
involving phishing, up from
25% YoY.
↑
BEC
58%
Percent of Business Email
Compromise (BEC) attacks
that resulted in loss of
money.
Statistics from Verizon Data Breach Investigations Report 2021.
↑
Percent of breaches
involving ransomware, up
from ~5% the prior year.*
10%

43
Ransomware intensity (FortiGuard Labs)
0
50
100
150
200
250
Detect Ransomware Attacks on Devices (K)
Source: Fortinet – July 2021
Number
of
Unique
Devices
(K)
July Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun
10X
Growth

44
Advanced protection
On-premise
Exchange
Cloud-based
Email
Hybrid Email

45
Enhance Cloud-based Controls
Optimal Email Security Effectiveness
Bolster email security by addressing known gaps in the
efficacy of cloud-based email services’ native controls.
Prevent Outbound Threats
Optimal Email Security Effectiveness
Protect PII, PHI, and other sensitive data from exfiltration
or accidental disclosure. Address compliance.
FortiMail Use Cases
EMAIL SECURITY
Secure Inbound Emails
Mitigate #1 Threat Vector
Stop spam, viruses/malware, ransomware, phishing,
targeted attacks, business email compromise.
Mitigate Email Outages
Risk Mitigation and Cost Avoidance
Minimize the impact to productivity and related cost
when email services experience an outage.
Email Usage Insights
Proactively Manage Email Use and Abuse
Quickly gain insights to understand security posture,
drill-in via detailed logs.

46
Malicious Content
Malicious Files
Malicious URLs
Appliance
Deployment Types
VM FortiMail Cloud
Operation Modes
API
Impersonation
Spam
Email encryption

47
security against:
• Known threats
FortiMail
SPF, DMARC, DKIM
Newsletter Greymail
Click Protection
Outbreak Protection
Behaviour Analysis
Content Disarm

48
FortiMail
SIEM
SOAR
Sandbox
Authentication
Privacy & Encryption
Anti-Virus
Content Disarm
Content Analysis
Dynamic Directory
and File
Fingerprinting
Archival
security against:
• Accidental disclosures
• Exfiltration
• Man-in-the-Middle Attacks
Facilitate automated
response workflows.

49
FortiMail
Content-based Email
Threat Defense
• Spam, phishing & greymail
Solution:
Deal with the volumetric spam
problem quickly and efficiently.
THREAT MITIGATION #1
SPF, DMARC, DKIM
Newsletter Greymail
Click Protection
Outbreak Protection
Behaviour Analysis
Content Disarm

50
FortiMail
Attachment-based Email
Threat Defense
• Malware & Phishing
Solution:
Advanced capabilities like sandboxing
analyze suspicious attachments.
SPF, DMARC, DKIM
Newsletter Greymail
Click Protection
Outbreak Protection
Behaviour Analysis
Content Disarm

51
FortiMail
URL-based Email Threat Defense
• Malsites & phishing
• Leveraging Web as an
infection vector
Solution:
Tight security fabric integration to
secure URLs while enabling
business operations.
SPF, DMARC, DKIM
Newsletter Greymail
Click Protection
Outbreak Protection
Behaviour Analysis
Content Disarm

52
FortiMail
Business Email
Compromise Prevention
• Whaling & spear-phishing
• Targeted attacks
Solution:
Advanced methods to detect
targeted BEC attacks.
SPF, DMARC, DKIM
Newsletter Greymail
Click Protection
Outbreak Protection
Behaviour Analysis
Content Disarm

53
Appliance
Virtual
Hosted
Cloud
Agent
Container
Fortinet
Security
Fabric
Broad
visibility and protection of the entire
digital attack surface to better
manage risk
Integrated
solution that reduces management
complexity and shares threat
intelligence
Automated
self-healing networks with AI-driven
security for fast and efficient
operations
Access &
Endpoint
Security
Cloud
Security
Open
Ecosystem
Secure
Networking
FortiGuard
Threat
Intelligence
Network
Operations
Security
Operations

54
FortiGuard Labs – Industry-leading Threat Intelligence
Founded in 2002, FortiGuard Labs is Fortinet’s elite cybersecurity threat intelligence and research organization. A pioneer and
security industry innovator, FortiGuard Labs develops and utilizes leading-edge machine learning and AI technologies to
provide customers with timely and consistently top-rated protection and actionable threat intelligence.
Ai/ML-driven Threat
Intelligence
Over 100B global security events
analyzed to provide over 1B
security updates daily
Actionable Information
and Services
• Incident Response
• Zero Day Research
• Penetration Testing
• Anti-Phishing training
• And More
Actionable Information
and Services
ADVANCED THREAT PROTECTION UNIFIED THREAT PROTECTION ENTERPRISE PROTECTION
Content Security Web Security Device Security SOC/NOC Tools
Optimized to monitor and protect
against file-based attack tactics
Optimized to monitor and protect
against web-based attack tactics
Optimized to protect against device
& vulnerability-based attack
Additional a-la-carte services for
your SOC team

55
99.8%
threats in emails.
90%
Total Accuracy Rate
94%
91%
Handling Rate
99.90%
Spam Catch Rate
100%
Malware Detected
Jan 2022

56
Industry-leading price to performance
+ =
Proven performance
through independent
testing.
Advanced features
priced competitively.
Email security efficacy
affordable for any
organization.

57
Options for any organization size and deployment
Appliances
• 5 appliance models
• Filter up to 3.2M
messages per hour
• Support for 10GE
SaaS/API*
• Fully-managed by Fortinet
• Gateway or Server mode
• Standard or Premium
• Per mailbox per year
Virtual Machines
• 6 VM models
• CPU and domain-based
• Perpetual licensing or
subscription
Solutions for organizations that prefer full control and
management over their email security.
Manage it for us.
Solutions for organizations that want email
security-as-a-service.

58
Operation modes
Transparent Mode (Appliance)
Physically located in the SMTP path. No configuration changes
required to the email infrastructure. Commonly used in the ISP
and Carrier environment.
Server Mode (Cloud and Appliance)
FortiMail is deployed as a full mail server providing POP3,
IMAP, Webmail and calendaring in addition to security functions.
Microsoft 365 API Clawback (Cloud and Appliance)
FortiMail operates out-of-line, scans and claws back threats
directly from Microsoft 365 using the Graph API. Can also be
used in Gateway mode.
Gateway Mode (Cloud and Appliance)
Mail is delivered to FortiMail via MX, sanitized and forwarded to
destination mail server.

59
FortiMail
Feature Base Bundle
Enterprise Advanced Threat
Protection Bundle
Ent. ATP with Microsoft O365 API
Support Bundle
Identity-Based Encryption (IBE) ● ● ●
Email Data Loss Prevention ● ● ●

60
Manage it for us.
Feature Cloud Gateway Cloud Gateway Premium
Cloud Gateway Premium with
Microsoft 365 API Support
Managed Service (infrastructure) ● ● ●
99.999% Service availability ● ● ●
Identity-Based Encryption (IBE) ● ●
Email Data Loss Prevention ● ●
FortiMail Cloud

62
Email continuity available with FortiMail Cloud
Email Continuity is designed to protect valuable productivity by providing emergency mailbox
services when organizations experience an outage in their email services.
Mitigates the impacts of downtime
and keep end users productive
during business outages.
Reduces recovery time to near zero
as employees and users access
queued email directly on FortiMail
when email services are down.
Queues emails up to 30 days and is
available before or during an
outage.

63
Email continuity Productivity Cost = E x % x C x H
SMALL COMPANY MID-SIZED ENTERPRISE
E = # of Employees 250 2,500 10,000
% = 25% of their working productivity 25% 25% 25%
C = $75,000/2,080 hours = $36 per hour $36 $36 $36
H = 3 Hours 3 3 3
Productivity Cost (One Outage) -$6,750 -$67,500 -$270,000
An outage of Microsoft 365 Exchange services affects three different organizations:
Email Continuity Cost (List Price) $1,750 $17,500 $70,000
Email continuity is a fraction of the
cost associated with an outage of
email services.
Email continuity pays for itself
within the first outage.
Clear value for organizations using
Microsoft 365.

64
FortiIsolator - Safe Content Rendering
Allows users to browse the web in an isolated environment which renders safe content
in a remote container.
Directly accessed using Chrome Accessed via FortiIsolator using Chrome

65
Protects the network against sexually
explicit images
• Identifies suspect image attachments in emails
• Educates users about the company policy when
questionable content is detected
• Monitors and logs/archives emails to provide
visibility of misuse
• Enforces company policy by taking appropriate
action on emails containing explicit content
• Ensures adherence to Policy and effective
compliance
Dynamic Image Analysis Service

66
Fortinet Security Awareness and Training Service
Train Users
Monitor Progress
Build Campaigns

67
Introducing Fortinet Security Awareness and Training
Created by the Fortinet Training Institute, the Fortinet Security Awareness and Training service helps IT,
Security and Compliance leaders build a cyber-aware culture where employees recognize and avoid falling
victim to cyberattacks. For compliance-sensitive organizations, the service also helps leaders satisfy
regulatory or industry compliance training requirements.
High Quality
Security Training
Engaging
Communication
& Reinforcement
Resources
Easy to Use
Administration &
Management
Active
Monitoring &
Reporting
Partner Ready FortiPhish Integration
with Remediation
Training
Your
Brand
Here
Purpose-built aligned to NIST-800-50 and NIST 800-16 Guidelines
Designed by
Security Experts

68
Investment and innovation in FortiMail
• URI Click protection
• Content disarm and reconstruction
• Password decryption of office docs
• BEC protection
• Security fabric integration
v6.0 v6.2 v6.4 v7.0 v7.2
May 2021
• Microsoft O365 API integration
• FortiIsolator integration
• Antispam enhancements
• 365 scheduled scanning
• MSSP SKU
MSSPs
Partners
• Email Continuity
• DANE support
• Threat Protection
Enhancements
• FortiPhish
Enhanced
Protections

69
CTAP Email Risk Assessment
Test drive FortiMail for detecting email-borne threats and stopping spam.
Exchange Server 2016

70
Part of the Fortinet Security Fabric.
The future of email
security goes
beyond email.
Fortinet FortiMail provides advanced
email security protection against the full
spectrum of email-based threats.
Powered by threat intelligence from
FortiGuard Labs.
FortiMail
Efficacy validated by independent testers
Start an Email Risk Assessment or POC.

73
FortiMail Cloud
security against:
• Known threats

74
FortiMail Management Portal
• Enterprise-grade configurability
• Single and multi-tenancy
• Context-based views
• Simplified and advanced views

75
FortiIsolator Key Features
Integration with
FortiMail, FortiProxy
and FortiGate for
decision based
remote browsing
isolation
Large, highly
available cluster
scale to 1000
connections per
node and 255
nodes
License sharing
and cookie
sharing within
clusters for a
seamless,
clientless
browsing
experience
Simple to use
profile controls
allow
customization of
the user
experience based
on policy
Document viewing,
FortiSandbox
integration and ICAP
support provide
comprehensive client
protection

76
FortiMail Cloud Data Center Footprint
Current DC location
FortiMail Cloud
San Jose
United States
Ottawa
Canada
Sophia Antipolis
France
Vancouver
Canada
Dallas
United States
Frankfurt
Germany

FortiMail

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to FortiMail

Similar to FortiMail (20)

Recently uploaded

Recently uploaded (20)

FortiMail