Data Sheet
1
FortiMail™
For Email Security
With best-in-class performance validated by independent
testing firms, FortiMail delivers advanced multi-layered
protection against the full spectrum of email-borne threats.
Powered by FortiGuard Labs threat intelligence and
integrated into the Fortinet Security Fabric, FortiMail helps
your organization prevent, detect, and respond to email-
based threats including spam, phishing, malware, zero-day
threats, impersonation, and Business Email Compromise
Powerful, Scalable Email Security Protection
Available in an Array of Deployment Models
Highlights
n
Protection against
email-borne threats
n
Validated
performance
n
Fabric-enabled email
security
n
Powered by
FortiGuard Labs
2
FortiMail™ Data Sheet
Features
Protection Against Email-borne Threats
Validated Performance
Fortinet is one of the only email security vendors to consistently prove the efficacy of FortiMail
through independent testing. FortiMail earned a 99.99% Spam Catch Rate from Virus Bulletin.
Fabric-enabled Email Security
FortiMail is integrated with Fortinet products as well as third-party components help you adopt
a proactive approach to security by sharing IoCs across a seamless Security Fabric. It also
enables advanced and complementary email security protection for Microsoft 365 and Google
Gsuite Cloud email through API-level integration.
Powered by FortiGuard Labs
Fortinet FortiMail is powered by threat intelligence and FortiGuard AI-powered Security
visibility across 600,000 customer environments worldwide, FortiGuard Labs is one of the
3
FortiMail™ Data Sheet
Features
Proactive Email Security
FortiGuard Labs’ global visibility and intelligence on the latest threats.
Multi-Layered Anti-Spam
Multiple sender, protocol and content inspection techniques shield users from spam and
domain, sender, SPF, DKIM, DMARC and geographical restrictions.
Powerful Anti-Malware
Combining multiple static and dynamic technologies that include signature, heuristic, and
range of constantly evolving threats.
Integrated Data Los Prevention
A robust set of capabilities for data loss prevention and email encryption safely deliver
sensitive emails and protect against the inadvertent loss of data. These features facilitate
compliance with corporate policies and industry regulations.
Intuitive Controls
Real-time dashboards, rich reporting, centralized quarantine and simple to use end-user
email traffic.
Impersonation Analysis
Cousin Domain Detection
FortiGuard URL Filtering
FortiGuard Anti-Spam
FortiGuard Antivirus
SPF, DMARC, DKIM
Newsletter Greymail
Click Protection
Outbreak Protection
Behaviour Analysis
Content Disarm
4
FortiMail™ Data Sheet
Features
Integration with the Fortinet Security Fabric
The future of email security is platform- or fabric-enabled to counter the growing
sophistication of threats and multi-vector campaigns. As part of the Fortinet Security Fabric,
Indicators of Compromise and other telemetry can be shared for enhanced security across
your entire security infrastructure.
IT and security teams are able to more completely connect the dots to identify multi-vector
response can be automated to reduce the burden on security operations teams.
Zero Trust
Access
Cloud
Security
Open
Ecosystem
Secure
Networking
FortiGuard
Threat
Intelligence
Network
Operations
Security
Operations
Industry Recognized, Top-Rated Performance
FortiMail delivers superior performance as measured by independent third-party testers.
99.99%
Spam Catch Rate
100%
Malware Detected
5
FortiMail™ Data Sheet
Features
Intuitive Email Management
Real-time dashboards, rich reporting, centralized quarantines, and end user controls along with
full MTA and mail-handling capabilities provide organizations full visibility and easy control over
email traffic.
Easy-to-Use Configuration
advanced security capabilities - easy for organizations of all sizes and use cases
6
FortiMail™ Data Sheet
Hands on or hands off?
Which FortiMail solution
is best for you?
We want full control. Manage it for us.
Virtual Machines and appliances for
teams who want total control over their
infrastructure and email security.
Email security as a service for teams
who just want to focus on monitoring
and responding to email threats.
Fortinet handles the infrastructure.
Read the FortiMail Cloud data sheet >
Features
High Performance, Flexible Deployment
Scale easily to handle millions of messages per hour. Serving organizations of all sizes, Fortinet provides a wide range of
deployment models and operation modes to best match your organization’s email security needs.
Appliances and Virtual Machines
FortiMail appliances and virtual machines are for
organizations that prefer full control and management over
their email security infrastructure for on-premise and cloud
use cases.
•
Appliances for on-premise environments
•
Virtual machines for running on:
§ Popular hypervisor platforms including:
§ VMWare
§
§ Hyper-V
§ KVM
§ Major cloud platforms:
§ AWS
§ Azure
§ Google Cloud
§ Oracle
§ AliCloud
FortiMail Cloud
FortiMail Cloud for organizations that want simple, easy-
to-use email security as-a-service for both on-premise and
cloud-based email services.
Operation ModesDeployment Models
Gateway Mode
FortiMail then relays safe email to its destination email server
for delivery.
Microsoft and Google Cloud Email API Integration
FortiMail can be deployed out of line to simplify deployment,
Microsoft and Google APIs to deliver threat detection and
or unique business requirements, such as building search
These capabilities can serve as powerful complements to
native Microsoft and Google security features to bolster
Transparent Mode
configuration. Transparent mode is particularly appealing for
Server Mode
The FortiMail device acts as a standalone messaging server
support for secure POP3, IMAP, and WebMail access.
7
FortiMail™ Data Sheet
Feature Base Bundle
Enterprise
Advanced Threat
Protection Bundle
Ent. ATP with
Cloud Email API
Support Bundle
99.99% Spam Capture Rate
Advanced Multi-Layer Malware Detection
Inbound and Outbound Filtering
Integration with Customer LDAP
Message Tracking
Virus Outbreak Service
Reporting
Email Data Loss Prevention
Content Disarm and Reconstruction
URL Click Protection
Impersonation Analysis
Cloud Sandboxing
Real-time Scanning of Microsoft and Google Mailboxes
Scheduled Scanning of Microsoft and Google Mailboxes
Post-delivery Clawback of Newly Discovered Email Threats
We want full control.
Feature Bundles
Additional Add-on Capabilities
Integrations with Fortinet Solutions
Email Continuity
Email Continuity for FortiMail Cloud is designed to protect valuable productivity by providing
Dynamic Image Analysis Service
FortiAnalyzer FortiIsolator FortiSOARFortiSandbox Cloud
FortiSIEMFortiNDRFortiAnalyzer Cloud
8
FortiMail™ Data Sheet
Features Summary
SYSTEM
Wide range of deployment and operation options
Inbound and Outbound Inspection
Support for multiple email domains with per-domain customization
IPv4 and IPv6 Address Support
Virtual Hosting using Source and/or Destination IP Address Pools
Geographic IP location-based policy
Comprehensive Webmail Interface for Server Mode Deployments and Quarantine
Management
Mail Queue Management
Multiple Language Support for Webmail and Admin Interface
SMTP RFC Compliance
Independently tested by SELabs, and Virus Bulletin
and Microsoft Azure
ANTISPAM
FortiGuard Antispam Service
Greylisting for IPv4, IPv6 addresses and email accounts
Behavioral analysis
PDF Scanning and image analysis
Support for enterprise sender identity standards
Multiple system and per-user self-service quarantines
TARGETED ATTACK PROTECTION
Content Disarm and Reconstruction
Integration with FortiIsolator Browser Isolation platform to neutralize browser-based
threats
API INTEGRATION
Microsoft 365 and Google Gsuite Email Integration
CONTENT DETECTION
FortiGuard Antivirus Service detection
Rescan for threats on quarantine release
Mime and file type detection
Comprehensive data-loss prevention with file fingerprinting and sensitive data detection
Automatic decryption of Archives, PDF and Office Documents using built-in and
administrator-defined password lists and word detection within email body
PDF Scanning and image analysis
Dynamic Image Analysis Service
ENCRYPTION
Comprehensive encryption support
MANAGEMENT, LOGGING, AND REPORTING
Basic/advanced management modes
Per domain, role-based administration accounts
Comprehensive activity, configurations change and incident logging and reporting
Built-in reporting module
Centralized quarantine for large scale deployments
Optional centralized logging and reporting with FortiAnalyzer
Open REST API for configuration and management
HIGH AVAILABILITY
High availability supported in all deployment scenarios
Quarantine and mail queue synchronization
Device failure detection and notification
ADVANCED
Policy-based e-mail archiving with remote storage options
Advanced Email Server feature set including
SAML 2.0 SSO and ADFS integration for webmail and quarantine access
SUPPORT
Simple support options with inclusive bundles
Advanced RMA Support
Professional services and installation support options
9
FortiMail™ Data Sheet
FORTIMAIL 200F FortiMail 400F FortiMail 900F
Recommended Deployment Scenarios
Small businesses, branch offices,
and organizations
Small to midsized organizations Mid to large enterprise, education, and
government departments
Hardware Specifications
4 4 4
SFP Gigabit Ethernet Interface 2
Redundant Hot Swappable Power Supplies
Storage
RAID Storage Management Software 0, 1 Hardware 0, 1, 5, 10, Hot Spare
Form Factor
Power Supply Single Dual
System Specifications
Protected Email Domains* 20 70 500
Recipient-based Policies (per Domain / per System)
60 / 300 400 / 1500 600 / 2000
Server Mode local mailboxes 150 400 1500
Antispam, Antivirus, Authentication, and
Content Profiles (per Domain / per System)
50 / 60 50 / 200 50 / 400
Data Loss Prevention
Centralized Quarantine
Microsoft 365 and Google Gsuite Email API Integration Optional Optional
Performance (Messages/Hour) [Without queuing based on 100 KB message size]
Email Routing (per hour)** 50 K 250 K 800 K
FortiGuard Antispam + Virus Outbreak (per hour)** 40 K 200 K 500 K
FortiGuard Enterprise ATP (per hour)** 30 K 150 K 400 K
Cloud API Performance (Messages/Hour) [Without queuing based on 100 KB message size]
Email Routing (per hour)** 18 K 83 K 241 K
FortiGuard Antispam + Virus Outbreak (per hour)** 14 K 72 K 170 K
FortiGuard Enterprise ATP (per hour)** 12 K 58 K 148 K
Dimensions
Height x Width x Length (inches)
Height x Width x Length (mm)
Weight
Environment
Power Source
Maximum Current 100V / 3A, 240V / 1.5A 100V / 5A, 240V / 3A 100V / 5A, 240V / 2.5A
Maximum Power Required 62 W 113 W 190 W
Power Consumption (Average) 51 W 77 W 174 W
Heat Dissipation
Forced Airflow
Humidity 5% to 90% non-condensing 5% to 90% non-condensing 5% to 90% non-condensing
Operating Temperature
Storage Temperature
Compliance
FCC Part 15 Class A, RCM, VCCI, CE,
FCC Part 15 Class A, RCM, VCCI, CE,
FCC Part 15 Class A, RCM, VCCI, CE,
Certification
* Protected Email Domains is the total number of email domains that can be configured on the appliance.
Domain Associations can be used to enable additional domains which share configuration with the primary domain to which they are assigned.
Advanced management license increases the protected domain limit by 50%.
** Tested using FortiMail 7.0
Specifications
10
FortiMail™ Data Sheet
Specifications
FORTIMAIL 2000F FORTIMAIL 3000F
Recommended Deployment Scenarios
Large enterprise, education, and government departments Highest performing appliance for the largest corporate,
university, ISP, and carriers
Hardware Specifications
4 4
SFP Gigabit Ethernet Interface 2 2
2
Redundant Hot Swappable Power Supplies
Storage
RAID Storage Management
Form Factor
Power Supply Dual Dual
System Specification
Protected Email Domains* 1000 2000
Recipient-Based Policies (per Domain / per System) —
Incoming or Outgoing
800 / 3000 1500 / 7500
Server Mode local mailboxes 2000 3000
Antispam, Antivirus, Authentication, and Content Profiles
(per Domain / per System)
50 / 400 50 / 600
Data Loss Prevention
Centralized Quarantine
Microsoft 365 and Google Gsuite Email API Integration Optional Optional
Performance (Messages/Hour) [Without queuing based on 100 KB message size]
Email Routing (per hour)** 1.6 Million 3.5 Million
FortiGuard Antispam + Virus Outbreak (per hour)** 1.1 Million 2.6 Million
FortiGuard Enterprise ATP (per hour)** 800 K 2.1 Million
Cloud API Performance (Messages/Hour) [Without queuing based on 100 KB message size]
Email Routing (per hour)** 372 K 705 K
FortiGuard Antispam + Virus Outbreak (per hour)** 280 K 560 K
FortiGuard Enterprise ATP (per hour)** 233 K 465 K
Dimensions
Height x Width x Length (inches)
Height x Width x Length (mm)
Weight
Environment
Power Source
Maximum Current 10.0A / 110V, 3.5A / 240V 9.8A / 110V, 4.9A / 220V
Maximum Power Required 219 W 379 W
Power Consumption (Average) 189 W 348 W
Heat Dissipation
Forced Airflow
Humidity 8% to 90% non-condensing 8% to 90% non-condensing
Operating Temperature
Storage Temperature
Compliance
FCC Part 15 Class A, RCM, VCCI,
FCC Part 15 Class A, RCM, VCCI,
Certification
* Protected Email Domains is the total number of email domains that can be configured on the appliance.
Domain Associations can be used to enable additional domains which share configuration with the primary domain to which they are assigned.
Advanced management license increases the protected domain limit by 50%.
** Tested using FortiMail 7.0
11
FortiMail™ Data Sheet
Specifications
Technical Specifications for
FortiMail Virtual Appliances
VM01 VM02 VM04 VM08 VM16 VM32
Recommended Deployment Scenarios *
Small businesses,
branch offices, and
organizations
Small to midsized
organizations
Mid to large
enterprise
Large enterprise Large enterprise Large enterprise
Technical Specifications
Hypervisors Supported
Oracle Cloud Infrastructure***
Maximum Virtual CPUs Supported 1 2 4 8 16 32
Virtual NICs Required (Minimum/Maximum) 1 / 4 1 / 4 1 / 6 1 / 6 1 / 6 1 / 6
Virtual Machine Storage Required
250 GB / 1 TB 250 GB / 2 TB 250 GB / 4 TB 250 GB / 8 TB 250 GB / 12 TB 250 GB / 24 TB
Virtual Machine Memory Required
2 GB / 4 GB 2 GB / 8 GB 4 GB / 16 GB 4 GB / 64 GB 4 GB / 128 GB 4 GB / 128 GB
Performance (Messages/Hour) [Without queuing based on 100 KB message size] *****
Email Routing (per hour) ** 34 K 67 K 306 K 675 K 875 K 1.2 M
FortiGuard Antispam + Virus Outbreak
(per hour) **
30 K 54 K 279 K 630 K 817 K 1.1 M
FortiGuard Enterprise ATP (per hour) ** 26 K 52 K 225 K 585 K 758 K 1.0 M
Cloud API Performance (Messages/Hour) [Without queuing based on 100 KB message size] *****
Email Routing (per hour) ** 23 K 110 K 295 K 495 K 940 K
FortiGuard Antispam + Virus Outbreak
(per hour) **
18 K 96 K 226 K 383 K 740 K
FortiGuard Enterprise ATP (per hour) ** 16 K 75 K 197 K 311 K 620 K
System Specifications
Protected Email Domains ****** 20 70 500 1000 1500 2000
Recipient-Based Policies (Domain / System)
60 /300 400 / 1500 800 / 3000 800 / 3000 1500 / 7500 1500 / 7500
Server Mode local mailboxes 150 400 1500 2000 3000 3000
Antispam, Antivirus, Authentication, and
Content Profiles (per Domain / per System)
50 / 60 50 / 200 50 / 400 50 / 400 50 / 600 50 / 600
Data Loss Prevention
Centralized Quarantine
Microsoft 365 and Google Gsuite Email API
Integration
Optional Optional Optional Optional Optional
Certification
****** Protected Email Domains is the total number of email domains that can be configured on the appliance.
Domain Associations can be used to enable additional domains which share configuration with the primary domain to which they are assigned.
Advanced management license increases the protected domain limit by 50%.
12
FortiMail™ Data Sheet
Order Information
FortiMail Product SKU Description
FortiMail 200F
FortiMail 400F
FortiMail 900F
FortiMail 2000F
FortiMail 3000F
FortiMail VM
FortiMail VM01
FortiMail VM02
FortiMail VM04
FortiMail VM08
FortiMail VM16
FortiMail VM32
Accessories
Power Supply
Power Supply
Power Supply
Power Supply
Hard Drive
Hard Drive
Service and Support
Microsoft 365 and Google Gsuite Email API Integration Service
Add-on Capabilities
Dynamic Adult Image Analysis Service
Email Continuity
For Service Providers and Enterprises
Advanced Administration License for MSSPs and Enterprises requiring multi-tenancy and additional features
Copyright © 2024 Fortinet, Inc. All rights reserved. Fortinet
®
, FortiGate
®
, FortiCare
®
and FortiGuard
®
, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product
or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other
conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s Chief Legal Officer, with a purchaser
that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any
such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise
revise this publication without notice, and the most current version of the publication shall be applicable.
www.fortinet.com
March 28, 2024
Fortinet Corporate Social Responsibility Policy
Fortinet is committed to driving progress and sustainability for all through cybersecurity, with respect for human rights and
will not use Fortinet’s products and services to engage in, or support in any way, violations or abuses of human rights, including
to comply with the Fortinet
Whistleblower Policy.
