FortiMail: Secure Email Gateway

Stop advanced email threats and prevent data loss

Shift to Proactive Security
Available in:
  • Appliance
  • Virtual Machine
  • Hosted
  • Cloud

FortiMail Secure Email Gateway


Email remains a key productivity tool for today's organizations, as well as a successful attack vector for cyber criminals.  According to the Verizon 2018 Data Breach Investigations Report, 49% of malware was installed via malicious email.  Gartner asserts that "Advanced threats (such as ranwomware and business email compromise) are easily the signature-based and reputation-based prevention mechanisms that a secure email gateway (SEG) has traditionally used."

FortiMail Secure Email Gateway utilizes the latest technologies and security services from FortiGuard Labs to deliver consistently top-rated protection from common and advanced threats while integrating robust data protection capabilities to avoid data loss. 


FortiMail News

May 29, 2018. FortiMail 6.0 Keeps Organizations Ahead of Evolving Email Threats. Email continues to be a major attack vector. 

April 25, 2018.  GandCrab 2.1 Ransomware on the Rise with New Spam Campaign.  Recently, FortiGuard Labs has been observing a surge in an email spam campaign delivering the latest GandCrab v2.1 ransomware. This article provides a basic overview of this malicious campaign, and points out details that can help users identify it.

January 26, 2018. Fortinet certified by ICSA for Advanced Threat Protection. The challenge is that most all email security vendors say the same thing: “99.9% catch rate, no false positives, easy to manage” and so forth, which is why Fortinet is firmly committed to regular participation in independent testing. Consider, for example, the Advanced Threat Defense certification testing conducted by ICSA Labs.


FortiMail videos

Stop Targeted Attacks with Advanced Threat Protection

Stop Targeted Attacks with Advanced Threat Protection

Stop Targeted Attacks with ATP

Watch Now

Where to Deploy Your Sandbox

Where to Deploy Your Sandbox

Today, organizations are looking at adding sandboxing to their security infrastructure. There are many ways and places to deploy this powerful technology. Learn why integrating it with your Secure Email Gateway is one of the best.

Watch Now


FortiMail Product Details

Organizations typically select FortiMail to shield users, and ultimately data, from a wide range of cyber threats. These include: ever growing volumes of unwanted spam, socially-engineered phishing and business email compromise, accelerating variants of ransomware and other malware, increasingly targeted attacks from adversaries of all kinds, and more. At the same time, FortiMail can be used to protect sensitive data of all types, reducing the risk of inadvertent loss and/or non-compliance with regulations like HIPAA, PCI, GDPR, and more.


Features and Benefits

icon benefits spam

Top-rated Antispam and Antiphishing

Maintain productivity by shieldning end users from unwanted spam and malicious phishing attacks
icon vulnerability

Independently certified advanced threat defense

Thwart cyber criminals intent on stealing data, holding systems for ransomware, conducting fraud, and other malicious purposes
icon benefits secure authentication

Integrated data protection

Maintain the privacy of personal information and confidentiality of sensitive data in compliance with regulatory and corporate guidelines
icon benefits management

Enterprise-class management

Free staff and end users to drive the business by reducing time spent on email administration 
high performance icon

High-performance mail handling

Speed the delivery of legitimate email at an affordable cost

FortiMail Models and Specifications

FortiMail is available in many different high performance, low administration form factors with many different options to choose.  This ensures that, large or small, FortiMail can fit seamlessly in to your exact on-premise or cloud environment.

Model Throughput- Email Routing (msg/hr)
Throughput- AS + AV (msg/hr)  Ports Recommended for:
FortiMail 60D 6K 7K 4 x RJ45 Small locations <100 users
FortiMail 200E 80K 61K 4 x RJ45
Medium locations with <400 users
FortiMail 400E 157K 126K
4 x RJ45
Medium locations with <1000 users
FortiMail 1000D 680K 500K

6 x RJ45 

2 x SFP

Mid-to Large organizations with <3000 users
FortiMail 2000E 1.1M 900K

4 x RJ45

2 x SFP

Large organizations
FortiMail 3000E 1.8M 1.5M

4 x RJ45

2 x SFP

Very large organizations and service providers
FortiMail 3200E 1.8M 1.5M

4 x RJ45

2 x SFP

Very large organizations and service providers


Model Throughput- Email Routing (msg/hr)
Throughput- AS + AV (msg/hr)  vCPU Other
FortiMail VM00 6K 2.7K 1 Small locations <100 users
VM01 34K 26K 1 Medium locations with <400 users
VM02 67K 52K 2 Medium locations with <1,000 users
VM04 306K 225K 4 Mid-to-Large locations with <3,000 users
VM08 675K 585K 8 Large organizations
VM16 875K 758K 16 Large organizations
VM32 1.2M 1.0M 32 Very large organizations

With cloud-based email services—such as those in Microsoft Office 365 and Google G-Suite—on the rise, more and more customers are choosing to let their security vendor of choice host their email security solutions too. Take advantage of the top-rated security effectiveness and integrated data protection of FortiMail, with all the necessary policy controls,  without the hassle of managing, maintaining, or upgrading the email security infrastructure. Offered on a per-user per-year basis, it’s easy and affordable.

FortiGuard Services for FortiMail

FG AntiSpam


FortiGuard Antispam provides a comprehensive and multi-layered approach to detect and filter spam processed by organizations. Dual-pass detection technology can dramatically reduce spam volume at the perimeter, giving you unmatched control of email attacks and infections.

FG Antivirus


FortiGuard Antivirus protects against the latest viruses, spyware, and other content-level threats. It uses industry-leading advanced detection engines to prevent both new and evolving threats from gaining a foothold inside your network and accessing its invaluable content.

Product Category Thumb SS virus outbreak

Virus Outbreak Protection Services

FortiGuard Virus Outbreak Protection Service (VOS) closes the gap between antivirus updates with FortiCloud Sandbox analysis to detect and stop malware threats discovered between signature updates before they can spread throughout an organization. OS initiates a real-time look-up to our Global Threat Intelligence database.

Product Category Thumb SS security audit

Content Disarm and Reconstruction

Content Disarm & Reconstruction (CDR) strips all active content from files in real-time, creating a flat sanitized file. All active content is treated as suspect and removed. CDR processes all incoming files, deconstructs them, and removes all elements that do not match firewall policies

Icon cloudsandbox

FortiSandbox Cloud

FortiSandbox Cloud Service is an advanced threat detection solution that performs dynamic analysis to identify previously unknown malware. Actionable intelligence generated by FortiCloud Sandbox is fed back into preventive controls within your network—disarming the threat.

Service Bundles (for physical and virtual appliances)



Get top-rated protection from traditional and emerging threats with Antispam, Antivirus and Outbreak Protection services, along with the integrated data loss prevention, email encryption, and email archiving functions.


For stronger protection against the most sophisticated and/or targeted attacks, the Enterprise Advanced Threat Protection Bundle includes all the services in the Base bundle, plus FortiSandbox, Content Disarm & Reconstruction, and Click Protect services, along with features like Impersonation Analysis.

Product Demo

FortiMail Demo

This full working demo shows our all-in-one secure email gateway, which combines threat and data protection with high-performance mail handling. Have a look at the system configuration, management, and monitoring. Set security policies and profiles. See pre-defined dictionaries and other data detection methods. Manage quarantines and end-user settings. Walk through report creation and scheduling. As a bonus, note how it can be deployed in either gateway or server mailbox mode. 

Access the demo

FortiMail: Secure Email Gateway

ICSA Certified for Advanced Threat Defense

With data breaches continuing to make headlines, new product and solutions designed to detect and prevent the advanced attacks often at the root of these breaches have emerged. To help organizations assess the effectiveness of these new offerings, ICSA Labs, an independent division of Verizon (author or the annual Data Breach Investigations Report or DBIR), recently introduced a new independent, Advanced Threat Defense certification, and Email certification.

Virus Bulletin Antispam Testing

For more than seven years, VBSpam has been conducting continual independent comparisons of antispam solutions. Fortinet FortiMail has participated in roughly 40 VBSpam tests, including six in 2015, so that organizations can see the level of effectiveness they can expect in real-world environments. FortiMail has routinely earned the highest VBSpam+ rating, with results similar to the test excerpt here.

NSS Labs Breach Prevention Systems (BPS) Test 2017

NSS Labs introduced a new group test, BPS focused on detecting and blocking exploits, advanced malware, and evasions. This helps validate the advanced threat response cycle of prevent-detect-mitigate across a number of threat vectors including web, email, and endpoint. Fortinet's Security Fabric consisting of FortiSandbox, FortiGate, FortiMail, and FortiClient integrated together, earned a Recommended award by achieving a block rate of 99.6% and offering the lowest 3-year TCO.

FortiMail: Secure Email Gateway

Below are answers to common questions regarding product and related services:

I have outsourced my email. Do I need FortiMail?

Yes. Given the maturity of email infrastructure, there are many good reasons to let the vendor host it for you. However, with 49% of installed malware delivered via email, it makes sense to go to an expert security vendor for email security. Of course you can absolutely select a hosted option from the security vendor too.

Will FortiMail really stop email threats like phishing, ransomware, business email compromise, and the like?

FortiMail consistently demonstrates high effectiveness in a range of independent tests, like ICSA Advanced Threat Defense for Email, and has been selected by many Global 2000 companies for just that purpose.

What’s the difference between FortiMail appliances, FortiMail in Azure/AWS, and FortiMail Cloud?

All offerings are powered by the same FortiMail technologies and FortiGuard services. The differences are in the location of the solution (on-premises, in the public cloud, or in Fortinet data centers), who manages the security infrastructure (you or Fortinet), and the pricing model (upfront with recurring support, on-demand or per user per year respectively).

Do you OEM any of the FortiMail technologies?

All FortiMail technologies are developed, enhanced, and supported in-house by Fortinet, except the Image Analysis technology. 

Can organizations of all sizes use FortiMail?

Absolutely. Whether you want an appliance, public cloud, or hosted solution, FortiMail is easily deployed and managed, scaling from the smallest location to the largest global service provider.