FortiMail: Secure Email Gateway
FortiMail Secure Email Gateway
Email security remains a key productivity tool for today's organizations, as well as a successful attack vector for cyber criminals. According to the Verizon 2018 Data Breach Investigations Report, 49% of malware was installed via malicious email. Gartner asserts that "Advanced threats (such as ransomware and business email compromise) are easily the signature-based and reputation-based prevention mechanisms that a secure email gateway (SEG) has traditionally used."
FortiMail Email security utilizes the latest technologies and security services from FortiGuard Labs to deliver consistently top-rated protection from common and advanced threats while integrating robust data protection capabilities to avoid data loss.
FortiMail News
12/13/2018: Fortinet FortiMail Receives Top AAA Rating in SE Labs Email Security Test. FortiMail demonstrates 100% detection of phishing attacks with Zero False Positives.
09/25/2018: Security Fabric Offerings on Microsoft Azure with Sandbox and CASB Solutions. Supporting customers with enhanced protection of the expanded attack surface of their hybrid cloud environments.
5/29/2018: FortiMail 6.0 Keeps Organizations Ahead of Evolving Email Threats. Email continues to be a major attack vector.
FortiMail Product Details
Organizations typically select FortiMail email security to shield users, and ultimately data, from a wide range of cyber threats. These include: ever growing volumes of unwanted spam, socially-engineered phishing and business email compromise, accelerating variants of ransomware and other malware, increasingly targeted attacks from adversaries of all kinds, and more. At the same time, FortiMail can be used to protect sensitive data of all types, reducing the risk of inadvertent loss and/or non-compliance with regulations like HIPAA, PCI, GDPR, and more.
Features and Benefits
Top-rated Antispam and Antiphishing
Maintain productivity by shielding end users from unwanted spam and malicious phishing attacks
Independently certified advanced threat defense
Thwart cyber criminals intent on stealing data, holding systems for ransomware, conducting fraud, and other malicious purposes
Integrated data protection
Maintain the privacy of personal information and confidentiality of sensitive data in compliance with regulatory and corporate guidelines
Enterprise-class management
Free staff and end users to drive the business by reducing time spent on email administration
High-performance mail handling
Speed the delivery of legitimate email at an affordable cost
FortiMail Models and Specifications
FortiMail can be deployed on premise as physical or virtual appliances as well as in the cloud; either public cloud infrastructure such as Microsoft Azure or Amazon Web Services, or hosted by Fortinet in our datacenters as a SaaS offering. This ensures that, large or small, FortiMail can fit seamlessly in to your exact on-premise or cloud environment.
Throughput- Email Routing (msg/hr) |
6K |
Throughput- AS + AV (msg/hr) |
7K |
Ports |
4 x RJ45 |
Recommended for |
Small locations <100 users |
Throughput- Email Routing (msg/hr) |
50K |
Throughput- AS + AV (msg/hr) |
40K |
Ports |
4 x RJ45 |
Recommended for |
Small businesses, branch offices, and organizations |
Throughput- Email Routing (msg/hr) |
250K |
Throughput- AS + AV (msg/hr) |
200KA |
Ports |
4 x RJ45 |
Recommended for |
Small to midsized organizations |
Throughput- Email Routing (msg/hr) |
800K |
Throughput- AS + AV (msg/hr) |
500K |
Ports |
4 x RJ45 2 x SFP |
Recommended for |
Mid to large enterprise, education and government departments |
Throughput- Email Routing (msg/hr) |
1.1M |
Throughput- AS + AV (msg/hr) |
900K |
Ports |
4 x RJ45 2 x SFP |
Recommended for |
Large organizations |
Throughput- Email Routing (msg/hr) |
1.8M |
Throughput- AS + AV (msg/hr) |
1.5M |
Ports |
4 x RJ45 2 x SFP |
Recommended for |
Very large organizations and service providers |
Throughput- Email Routing (msg/hr) |
1.8M |
Throughput- AS + AV (msg/hr) |
1.5M |
Ports |
4 x RJ45 2 x SFP |
Recommended for |
Very large organizations and service providers |
Throughput- Email Routing (msg/hr) |
6K |
Throughput- AS + AV (msg/hr) |
2.7K |
vCPU |
1 |
Recommended for |
Small locations <100 users |
Throughput- Email Routing (msg/hr) |
34K |
Throughput- AS + AV (msg/hr) |
26K |
vCPU |
1 |
Recommended for |
Medium locations with <400 users |
Throughput- Email Routing (msg/hr) |
67K |
Throughput- AS + AV (msg/hr) |
52K |
vCPU |
2 |
Recommended for |
Medium locations with <1,000 users |
Throughput- Email Routing (msg/hr) |
306K |
Throughput- AS + AV (msg/hr) |
225K |
vCPU |
4 |
Recommended for |
Mid-to-Large locations with <3,000 users |
Throughput- Email Routing (msg/hr) |
675K |
Throughput- AS + AV (msg/hr) |
585K |
vCPU |
8 |
Recommended for |
Large organizations |
Throughput- Email Routing (msg/hr) |
875K |
Throughput- AS + AV (msg/hr) |
758K |
vCPU |
16 |
Recommended for |
Large organizations |
Throughput- Email Routing (msg/hr) |
1.2M |
Throughput- AS + AV (msg/hr) |
1.0M |
vCPU |
32 |
Recommended for |
Very large organizations |
Customers Weigh in on the Value of FortiMail Secure Email Gateway (SEG) in Gartner Peer Insights Review
There are many reasons to reconsider your current SEG solution including: a move to cloud email systems like Microsoft Office 365 or Google G-Suite, concern about advanced threats getting through current controls, consolidation of email security components − like antispam, DLP and email encryption − that were added over time and more.
One reason that organizations are increasingly selecting Fortinet FortiMail is its consistently top-rated effectiveness against traditional and advanced threats. The improved protection is readily apparent in 3rd party testing and customer PoCs. Another is success customers have had with our flagship FortiGate and its FortiGuard security services, the same services powering FortiMail. And a third is the positive experience that others in the industry have had and passed along.
To see what recent customers have to say about the most independently tested SEG in the industry, check out our reviews on Gartner Peer Insights. Here are just a handful of recent headline comments.
“Management Is Easy, Artificial Intelligence Analysis Is Good”
System Specialist, Gov't/PS/ED <5,000 Employees
“Management is easy, compared with other products. There are serious differences in analysis. Thanks to its artificial intelligence, it makes a more accurate analysis than its competitors.”
“Fantastic Support, Great Feature Set, Online Documentation Could Be Better”
IT Services Manager, Education, <5,000 Employees
“We were receiving high numbers of unwanted email through O365 and even after applying filtering rules was unable to quarantine or block SPAM and phishing attempts. Since the implementation of FortiMail we not only have much more visibility of organisation email, unwanted, high-risk emails are now being filtered.”
“Reliable and Functional, Good Price Range”
Deputy Head of Department, $50M - $250M Finance Company
“I first got acquainted with the solutions of this vendor last year as part of the project to implement the protection of mail gateways of my organization. Several solutions were considered, but the choice was made in favor of this vendor. The main factors are functionality, the highest compliance with the technical specifications, a high level of support during testing.”
Head of Information Security Department, $500M - $1B Manufacturing Company
“It's working good. Nearly 2000 e-mails blocked per day. A simple solution in management and configuration.”
“Strong Security, Easy Control and Operation”
Operations Engineer, $500M-1B Communications Company
“The FortiMail is a device that performs very good security controls, validates the integrity of the email, identity of the sender and the recipient, validates that the domains are authentic, performs scanning of the attachments in search of a malicious file, performs validations of the body of the mail and above all has very good features of number of emails which makes it a robust device. "
Gartner Peer Insights reviews constitute the subjective opinions of individual end users based on their own experiences, and do not represent the views of Gartner or its affiliates.
FortiGuard Services for FortiMail
AntiSpam
FortiGuard Antispam provides a comprehensive and multi-layered approach to detect and filter spam processed by organizations. Dual-pass detection technology can dramatically reduce spam volume at the perimeter, giving you unmatched control of email attacks and infections.
Antivirus
FortiGuard Antivirus protects against the latest viruses, spyware, and other content-level threats. It uses industry-leading advanced detection engines to prevent both new and evolving threats from gaining a foothold inside your network and accessing its invaluable content.
Virus Outbreak Protection Service
FortiGuard Virus Outbreak Protection Service (VOS) closes the gap between antivirus updates with FortiCloud Sandbox analysis to detect and stop malware threats discovered between signature updates before they can spread throughout an organization. OS initiates a real-time look-up to our Global Threat Intelligence database.
Content Disarm & Reconstruction
Content Disarm & Reconstruction (CDR) strips all active content from files in real-time, creating a flat sanitized file. All active content is treated as suspect and removed. CDR processes all incoming files, deconstructs them, and removes all elements that do not match firewall policies.
FortiSandbox Cloud
FortiSandbox Cloud Service is an advanced threat detection solution that performs dynamic analysis to identify previously unknown malware. Actionable intelligence generated by FortiCloud Sandbox is fed back into preventive controls within your network—disarming the threat.
Service Bundles (for physical and virtual appliances)
Base
Get top-rated protection from traditional and emerging threats with Antispam, Antivirus and Outbreak Protection services, along with the integrated data loss prevention, email encryption, and email archiving functions.
Advanced
For stronger protection against the most sophisticated and/or targeted attacks, the Enterprise Advanced Threat Protection Bundle includes all the services in the Base bundle, plus FortiSandbox, Content Disarm & Reconstruction, and Click Protect services, along with features like Impersonation Analysis.
Data Sheets
Case Studies
Webinars and Videos
Solution Briefs
White Papers
FortiMail Product Demo

FortiMail Demo
This full working demo shows our all-in-one secure email gateway, which combines threat and data protection with high-performance mail handling. Have a look at the system configuration, management, and monitoring. Set security policies and profiles. See pre-defined dictionaries and other data detection methods. Manage quarantines and end-user settings. Walk through report creation and scheduling. As a bonus, note how it can be deployed in either gateway or server mailbox mode.
Access the demoFortiMail Certifications
SE Labs Email Security Services Test
Email remains arguably the most common delivery vehicle for malware (92.4% of all malware according to the 2018 Verizon DBIR), social engineering attacks like business email compromise (30,787 incidents reported by the FBI in July 2018) and more. SE Labs tested email security services from Fortinet, Proofpoint, Microsoft and others. FortiMail earned their top AAA rating.
ICSA Certified for Advanced Threat Defense
With data breaches continuing to make headlines, new product and solutions designed to detect and prevent the advanced attacks often at the root of these breaches have emerged. To help organizations assess the effectiveness of these new offerings, ICSA Labs, an independent division of Verizon (author or the annual Data Breach Investigations Report or DBIR), recently introduced a new independent, Advanced Threat Defense certification, and Email certification.
Virus Bulletin Antispam Testing
For more than seven years, VBSpam has been conducting continual independent comparisons of antispam solutions. Fortinet FortiMail has participated in roughly 40 VBSpam tests, including six in 2015, so that organizations can see the level of effectiveness they can expect in real-world environments. FortiMail has routinely earned the highest VBSpam+ rating, with results similar to the test excerpt here.
NSS Labs Breach Prevention Systems (BPS) Test 2017
NSS Labs introduced a new group test, BPS focused on detecting and blocking exploits, advanced malware, and evasions. This helps validate the advanced threat response cycle of prevent-detect-mitigate across a number of threat vectors including web, email, and endpoint. Fortinet's Security Fabric consisting of FortiSandbox, FortiGate, FortiMail, and FortiClient integrated together, earned a Recommended award by achieving a block rate of 99.6% and offering the lowest 3-year TCO.
FortiMail: Email Security
Below are answers to common questions regarding product and related services:
I have outsourced my email. Do I need FortiMail?
Yes. Given the maturity of email infrastructure, there are many good reasons to let the vendor host it for you. However, with 49% of installed malware delivered via email, it makes sense to go to an expert security vendor for email security. Of course you can absolutely select a hosted option from the security vendor too.
Will FortiMail really stop email threats like phishing, ransomware, business email compromise, and the like?
FortiMail consistently demonstrates high effectiveness in a range of independent tests, like ICSA Advanced Threat Defense for Email, and has been selected by many Global 2000 companies for just that purpose.
What’s the difference between FortiMail appliances, FortiMail in Azure/AWS, and FortiMail Cloud?
All offerings are powered by the same FortiMail technologies and FortiGuard services. The differences are in the location of the solution (on-premises, in the public cloud, or in Fortinet data centers), who manages the security infrastructure (you or Fortinet), and the pricing model (upfront with recurring support, on-demand or per user per year respectively).
Do you OEM any of the FortiMail technologies?
All FortiMail technologies are developed, enhanced, and supported in-house by Fortinet, except the Image Analysis technology.
Can organizations of all sizes use FortiMail?
Absolutely. Whether you want an appliance, public cloud, or hosted solution, FortiMail is easily deployed and managed, scaling from the smallest location to the largest global service provider.