Http://Docs.fortinet.com - Fortinet FortiMail-100 Install Manual

Example 1: FortiMail unit behind a firewall
Configuring the virtual IPs
Configuring the firewall policies
102
5 Select OK.
In order to create the firewall policy that forwards email-related traffic to the FortiMail unit,
you must first define a static NAT mapping from a public IP address on the FortiGate unit
to the private IP address of the FortiMail unit by creating a virtual IP entry.
Similarly, in order to create the firewall policy that forwards POP3/IMAP-related traffic to
the protected email server, you must first define a static NAT mapping from a public IP
address on the FortiGate unit to the private IP address of the protected email server by
creating a virtual IP entry.
Note: To add virtual IPs, the FortiGate unit must be operating in NAT mode. For more
information, see the
To add a virtual IP for the FortiMail unit
1 Go to Firewall > Virtual IP > Virtual IP.
2 Select Create New.
3 Complete the following:
Name
External Interface
Type
External IP
Address/Range
Mapped IP
Address/Range
4 Select OK.
To add a virtual IP for the protected email server
1 Go to Firewall > Virtual IP > Virtual IP.
2 Select Create New.
3 Complete the following:
Name
External Interface
Type
External IP
Address/Range
Mapped IP
Address/Range
4 Select OK.
First, create a firewall policy that allows incoming FortiMail services that are received at
the virtual IP address, then applies a static NAT when forwarding the traffic to the private
network IP address of the FortiMail unit.
FortiGate Administration Guide.
Enter a name to identify the virtual IP entry, such as
FortiMail_VIP.
Select wan1.
Select Static NAT.
Enter 10.10.10.1.
Enter 172.16.1.5.
Enter a name to identify the virtual IP entry, such as
protected_email_server_VIP.
Select wan1.
Select Static NAT.
Enter 10.10.10.1.
Enter 172.16.1.10.
FortiMail™ Secure Messaging Platform Version 4.0 Patch 1 Install Guide
Gateway mode deployment
Revision 2

http://docs.fortinet.com/

• Feedback