2.2.6.3. Spam Filter: [ Spam Filter Function Profile ]¶

Define the profiles on the UTM Spam filtering function being used with a Firewall Policy.

The Spam Filter function enables spam detection to identify the mail addresses and URLs noted in email contents as designated SPAM.
The following operations enable Customers to execute about the SPAM Filter function:
- Creating a new profile on the SPAM Filter.
- Updating the individual actions for each protocol.
- Editing a specific action list (Email Address List) for each source mail address.

Following shows how to detect at the Spam Filter Function. If any definition matched with the Spam Filter, that definition will be instantly applied as a spam filtering.

If you found any email classified as [ Spam ] after first checking the Address list of the spam filter, assign the [ Spam ] Tag to the relevant email. Otherwise, a email classified as [ Clear ], the email will not be tagged.

If there is no classification found in the Address List, you should evaluate the email address and the URL subject and tag [ Spam ] to the relevant email. After doing this, either tag [ Spam ] to the relevant email subject for the email classified as [ Spam ] or un-tag if no Spam evaluation is necessary.

The Spam Filter does NOT automatically remove any emails. Therefore, check each tag then remove as necessary. If you would like to automatically remove email regarded as Spam then you need to use the mail application filter function of the email receiver.

2.2.6.3.1. Default Value¶

When clicking [ Spam Filter ] in the default state, the default Spam Filter Profile will display.

As pictured above, this setting example shows that the protocol will tag [ Spam ] to the spam-detected email subject, if the email evaluated as [ Spam ] in case of the default Spam Filter set as IMAP and the default Protocol set as POP3.

The default Spam Filter profile is available and you can edit one into your unique definition.

2.2.6.3.2. Setting Items : Spam Filter Profile¶

The following describes setting items of the Spam Filter Profile as below:

Items	Values	Descriptions
Profile Name	（Half-width alphabetic characters & half-width numbers)	Enter the name of profile. You can NOT utilize any two-byte characters, such as Japanese, and the following signs as below: < > ( ) # ' " , and spaces (blank)
Action	Either [ Tag ] or [ Pass ]	Select a specific order to make the SPAM evaluation status into either validation or invalidation for each protocol. The tag is [ Active ] and the pass is [ Inactive ].
Tag Format	（Half-width alphabetic characters & half-width numbers)	Fill in the assigned tag to the mail title in the case of specify [ Tag ] as an [ Action ]. You can NOT utilize any two-byte characters, such as Japanese, and the following signs as below: < > ( ) # ' " , and spaces (blank)
Comment	（Half-width alphabetic characters & half-width numbers)	Fill in your comment if you like. Fill in your comment by using less than 225 letters. You can NOT utilize any two-bytes characters, such as Japanese.
Rating	(Disable any Editing )	Following is a Website link to FortiGuard Center which enables verification on the registration states of the specific URL and any email address in the Spam evaluation database.

Following are the setting items to define an email address list at Address List.

Items	Values	Descriptions
ID	(Auto-Assign)	This ID is automatically assigned.
Mail Address	（Half-width alphabetic characters & half-width numbers)	Fill in the email address, you would like to add to your list. Here you can not designate any Using IP Address. You can not use any two-byte characters, such as Japanese, the following signs : < > ( ) # ‘ ” Any space （Blank）
Action	Either [ Spam ] or [ Clear].	You need to select a specific Action to the relevant email address. Spam : The specific email will be defined as a Spam. Clear：The specific email will be NOT defined as a Spam.

At the mail address at the address list, you can show the email address by utilizing the following marks: [ * ] （asterisk） or [ ? ]（question mark）.

[ * ]  means filling in zero or more than one voluntary word.
［ ? ］ (question) means filling in at least one word of any.

For example, the account unit of the email address will be [ client@example.com ], as well as the email address domain will be [ *@example.com ].

Spam（Spam Detection）
Every email from the specific email address selected by [ Spam ] detection will be detected as Spam.
The Spam Filter does NOT automatically remove any emails. Therefore, check each tag then remove as necessary. If you would like to automatically remove email regarded as Spam then you need to use the mail application filter function of the email receiver.

Clear (Exemption to be applied as SPAM)
Any email from the specific email address by selecting as [ Clear ] will not be regarded as Spam. Even though the current email address has been listed up as Blacklist in the Spam database, any email regarded as [ “Clear” ] at the settings will finish the spam filtering without Spam detection.

2.2.6.3.3. Adding Spam Filter Profile¶

Click the Routing from the left-side Object screen.

Security Profile ‣ Spam Filter ‣ Spam Filter

Click [ Add ] at Spam Filter of the right-side screen.

Click [ Save ] after you input the setting value.

Input Setting Items : Spam Filter Profile to the setting value.

Apply configuration to the device by clicking [Apply configuration].

Note

Please be sure to execute [Apply configuration] in Profile before create Firewall policy.

2.2.6.3.4. How to Change Profile (Edit / Duplicate / Remove)¶

Click the Routing from the left-side Object screen.

Security Profile ‣ Spam Filter ‣ Spam Filter

Select the target changed line at Routing screen of the right-side. Click an operation button you need.

Following describes respective buttons of Spam Filter .

Buttons	Descriptions
Edit	Modify the value of Spam Filter that has already been set.
Duplicate	After duplicating the existing Profile , the object setting screen will open with the same value. Make sure to change Profile Name. This is useful for you to define another Profile with the same value.
Remove	Delete the selected Profile .

When you change Mail address list , select the target Mail address , and click [ Edit ].

When you deleting one , the confirmation message will display. Please click [OK] to finally execute its deletion.

Confirm Delete Object

NOTE: You can not remove any object which has been utilizing at a Firewall Policy.

Apply configuration to the device by clicking [Apply configuration].

Note

Please be sure to execute [Apply configuration] in Profile before create Firewall policy.

2.2.6.2. Web Fileter [ Web Filter Function Profile ]

2.2.6.4. Scan Ports : [ Target Scanned Ports ]