Http://Docs.fortinet.com - Fortinet FortiMail-100 Install Manual

Gateway mode deployment
Configuring the service groups
FortiMail™ Secure Messaging Platform Version 4.0 Patch 1 Install Guide
Revision 2

http://docs.fortinet.com/

• Feedback
Subnet /IP Range
Interface
4 Select OK.
In order to create firewall policies that govern only email and FortiMail-related traffic, you
must first create groups of services that define protocols and port numbers used in that
traffic.
Because FortiGuard-related services for FortiMail units are not predefined, you must
define them before you can create a service group that contains those services.
Note: For more information on protocols and port numbers used by FortiMail units, see the
Fortinet Knowledge Center article
To add a custom service for FortiGuard Antivirus push updates
1 Go to Firewall > Service > Custom.
2 Select Create New.
3 Configure the following:
Name
Protocol Type
Protocol
Destination Port
4 Select OK.
To add a custom service for FortiGuard Antispam rating queries
1 Go to Firewall > Service > Custom.
2 Select Create New.
3 Configure the following:
Name
Protocol Type
Protocol
Destination Port
4 Select OK.
To add a service group for remote incoming FortiMail traffic
1 Go to Firewall > Service > Group.
2 Select Create New.
Enter 192.168.1.5/32.
Select dmz.
FortiMail Traffic Types and TCP/UDP
Enter a name to identify the custom service entry,
such as
FortiMail_antivirus_push_updates.
Select TCP/UDP.
Select UDP.
Low Enter 9443.
High Enter 9443.
Enter a name to identify the custom service entry,
such as
FortiMail_antispam_rating_queries.
Select TCP/UDP.
Select UDP.
Low Enter 8889.
High Enter 8889.
Example 3: FortiMail unit in DMZ
Ports.
113