Adding a FortiSandbox unit

The FortiSandbox unit is used for automated sample tracking, or sandboxing. You can send suspicious email attachments to FortiSandbox for inspection when you configure antivirus profiles (see “Managing antivirus profiles” on page 521). If the file exhibits risky behavior, or is found to contain a virus, a new virus signature is created and added to the FortiGuard antivirus signature database. For more information about FortiSandbox, please visit Fortinet’s web site at http://www.fortinet.com.

Suspicious email attachments include:

• Suspicious file detected by heuristic scan of the AV engine
• Executable files and executable files embedded in archive files.
• Type 6 hashes (binary hashes) of the spam email detected by FortiGuard AntiSpam Service

To add a FortiSandbox unit

1. Go to System > Configuration > FortiSandbox.
2. Enable the FortiSandbox.
3. Enter the FortiSandbox host name or IP address. The port to use is 514. If you have a firewall in between FortiMail and FortiSandbox, make this port is allowed.
4. For Statistics interval, specify how long FortiMail should wait to retrieve some high level statistics from FortiSandbox. The default interval is 5 minutes. The statistics include how many malwares are detected and how many files are clean among all the files submitted.

Customizing GUI, replacement messages and email templates

This section contains the following topics:

• Customizing the GUI appearance
• Customizing replacement messages
• Customizing email templates

Customizing the GUI appearance

The System > Customization > Appearance tab lets you customize the default appearance of the web-based manager, per-recipient quarantine, and webmail pages with your own product name, product logo, and corporate logo.

You can customize the webmail interface language. If your preferred language is not currently installed, you can add it. You can also adjust the terms in existing language files. This can be useful for localizing terms within a language. For example, you could adjust the English language file to use spellings and terms specific to the locale of the United Kingdom, Australia, or the USA if your email users are most familiar with terminologies popular in those areas.

To access this part of the web UI, your administrator account’s:

• Domain must be System
• access profile must have Read-Write permission to the Others category

For details, see “About administrator account permissions and domains” on page 290.

To customize the GUI appearance

1. Go to System > Customization > Appearance.
2. Click the arrow to expand Administration Interface and Webmail interface.
3. Configure the following to change appearance:

GUI item                          Description

Administration Interface section

Product name Enter the name of the product. This name will precede

Administrator Login in the title on the login page of the web UI.

GUI item	Description
Top logo	Select change to upload a graphic that will appear at the top of all pages in the web UI. The image’s dimensions must be 460 pixels wide by 36 pixels tall. For best results, use an image with a transparent background. Non-transparent backgrounds will not blend with the underlying theme graphic, resulting in a visible rectangle around your logo graphic. Note: Uploading a graphic overwrites the current graphic. The FortiMail unit does not retain previous or default graphics. If you want to revert to the current graphic, use your web browser to save a backup copy of the image to your management computer, enabling you to upload it again at a later time.
Default language	Select the default language for the display of the web-based manager. You can configure a separate language preference for each administrator account. For details, see “Configuring administrator accounts” on page 294.

Webmail interface section

Webmail login	Enter a word or phrase that will appears on top of the webmail login page, such as Webmail Login.
Login user name hint	Enter a hint for the user name, such as Your Email Address. This hint will appear as a mouse-over display on the login name field.
Webmail theme	Select a theme for the webmail GUI.
Allow user to change theme	If selected, the webmail users will be able to customize the theme by themselves.
Show online help link	If selected, the Help button will appear on the webmail interface. The default help contents are provided by Fortinet. If you want to use your own organization’s help contents, you can enable this option and enter the online help URL in the below field.
Custom online help URL	Enter the URL if you want to use your own online help file, instead of the default one that comes with FortiMail.

Webmail language Select the language in which webmail pages will be displayed. By

default, the FortiMail unit will use the same language as the web UI. For web UI language settings, see “Configuring system options” on page 266.

GUI item                          Description

Webmail language customization	Displays the list of languages installed on the FortiMail unit in English and in their own language. •      Create: Click to add a new language to the list. See “To add a custom language” on page 278. •      Download: Select a language in the list, then click this button to download the language’s resource file for that language. You can then edit the resource files using an XML editor that supports UTF-8. •      Upload: Select a language in the list, then click this button to update the language’s resource file for this language from your management computer to the FortiMail unit. In addition to uploading new language resource files, you can also use this button to update existing languages. •      Delete: Select a language in the list, then click this button to remove the language. This option is available only for non-default languages.
Web mail top logo	Click Change to upload a graphic that will appear at the top of all webmail pages. The image’s dimensions must be 314 pixels wide by 36 pixels tall. Note: Uploading a graphic overwrites the current graphic. The FortiMail unit does not retain previous or default graphics. If you want to revert to the current graphic, use your web browser to save a backup copy of the image to your management computer, enabling you to upload it again at a later time.
Custom login	Select this option then upload your own login page image to create a custom login page.

4. Click Apply to save changes or Reset to return to the default settings.

To add a custom language

1. Go to System > Customization > Appearance.
2. Click the arrow to expand Webmail interface.
3. Underneath the list of language customizations, in Language name in English, enter the name for the new language using English and US-ASCII encoding, such as Welsh.
4. In Language name, enter the name for the language using its own characters and UTF-8 encoding.
5. Click Create.

The new language appears at the bottom of the webmail languages list.

6. Select the new language’s row.
7. Click Download and select Download login page resource file from the pop-up menu.
8. Click Download again and select Download webmail resource file.

Your web browser downloads both files.

9. Open both files in an XML editor or plain text editor that supports UTF-8 encoding.

10.For each value in the resource files, translate the word or phrase that is surrounded by double quotes ( ” ). It will appear in the location indicated by the key’s name.

For example:

<resource key=”report_spam” value=”Report Spam”/>

indicates by key=”report_spam” that the text is a label for the button that corrects the Bayesian scanner when it has not recognized an email that is spam. You could replace the contents of value (that is, Report Spam) with any text in your language that indicates the button’s function.

11.Save both files.

12.Return to the web UI.

13.Select the new language’s row.

14.Click Upload and select Upload login page resource file from the pop-up menu. Choose the login page resource file that you translated, then click OK.

15.Click Upload again and select Upload webmail resource file from the pop-up menu. Choose the login page resource file that you translated, then click OK.

16.Click Apply.

To verify your language, log in to FortiMail webmail and review the text that appears on each button, field, and menu item. If the characters appear garbled, verify that your web browser is interpreting the web page using the correct encoding.

Customizing replacement messages

Go to System > Customization > Custom Messages to view and reword replacement messages.

When the FortiMail unit detects a virus in an email attachment, it replaces the attachment with a message that provides information about the virus and source of the email.

All the disclaimers, replacement messages, and IBE login page are customizable. When you create email template on the System > Customization > Custom Email Template tab, you can use many of the replacement messages.

To access this part of the web UI, your administrator account’s:

• Domain must be System
• access profile must have Read or Read-Write permission to the Others category

For details, see “About administrator account permissions and domains” on page 290.

Viewing the replacement messages list

To view the replacement message list, go to System > Customization > Custom Message.

The message list organizes replacement messages into a number of types (for example, System, Reject, and so on). Use the expand arrow beside each type to display the replacement messages for that category. Double-click each replacement message to customize that message for your requirements.

You can reword existing messages or create new ones.

Modifying replacement messages

You can modify the text and HTML code within a replacement message to suite your requirements.

You can change the content of the replacement message by editing the text and HTML codes and by working with replacement message variables. For descriptions of the default replacement message variables, see “Default replacement message variables” on page 282.

All message groups can be edited to change text, or add text and variables.

To customize text replacement messages

1. Go to System > Customization > Custom Message.
2. To edit a message, double-click it or select it and click Edit.

Figure 115:Editing a simple text message

3. In the Content area, enter the replacement message.

Some messages include a Subject and From area. You can edit their content too and add variables.

4. There is a limit of 4000 characters for each replacement message.
5. If custom variables exist, you can add them to the text. To do so:
   • Select Insert Variables. A pop-up window appears.
   • Place your mouse cursor in the text message at the insertion point for the variable.
   • Click the name of the variable to add. It appears at the insertion point.
   • Click the Close (X) icon to close the window.

If no custom variables exist, the Insert Variables link does not appear. Some message types include predefined variables. You can create variables. See “Creating variables” on page 280.

6. Click OK, or click Reset To Default to revert the replacement message to its default text

Creating variables

In addition to the predefined variables, you can create new ones to customize replacement messages and email templates. Typically, these variables represent messages that you will use frequently. You can modify the variables that you create, but you cannot edit or delete the predefined variables.

To create a new variable

1. To create new variables to be used in custom messages, go to System > Customization >

Custom Message. To create new variables to be used in email templates, go to System >

Customization > Custom Email Template

Figure 116:Custom Messages tab

2. Select a replacement message or email template where you want to add a new variable, and click Edit Variable.

The Edit Variable page appears.

Figure 117:Edit Variable page

3. .Click

A dialog appears.

4. Configure the following: • In Name, enter the variable name to use in the replacement message. Its format is: %%<variable_name>%%. For example, if you enter the word virus, this variable will appear as %%virus%% in the replacement message if you select to insert it. This is usually a simple and short form for a variable.
   • In Display Name, enter words to describe the variable. For example, use virus name for the variable virus. The display name appears in the variable list when you select Insert Variables while customizing a message or creating a variable.
   • In Content, enter the variable’s content. Click Insert Variables to include any other existing variables, if needed. For example, you may enter

The file %%FILE%% is infected with the virus %%VIRUS%%, and has been deleted where %%FILE%% is the file name and %%VIRUS%% provides the virus name.

To add a color code, use HTML tags, such as <tr bgcolor=”#3366ff”>. You can select a color code, such as “#3366ff” in the HTML tag, from the color palette after selecting Insert Color Code.

5. Click Create.

Table 27: Default replacement message variables

Variable	Description	Found under
%%FILE%%	The name of the file that is infected with a virus.	System > Customization > Custom Message > Replacement > Virus
%%VIRUS%%	The name of the virus that has infected the file.	message
%%FILE%%	The name of the file that was removed from the email.	System > Customization > Custom Message > Replacement > Suspicious message
%%MESSAGE_ID%%	The ID of the quarantined email.	System > Customization > Custom Email Template >
%%QMSG_EMAIL_DELETE%%	Under email actions in the quarantine summary, the Delete link that, if being clicked, sends an email request to delete the quarantined message.	Report > Quarantine summary
%%QMSG_FROM%%	The email address of the sender of the quarantined email
%%QMSG_WEB_DELETE%%	Under web actions in the quarantine summary, the Delete link that, if being clicked, sends a HTTP or HTTPS request to delete the quarantined message.
%%QUARANTINE_FROM%%	The start time of the quarantine summary.

 

 

Variable	Description	Found under
%%QUARANTINE_TO%%	The end time of the quarantine summary.	System > Customization > Custom Email Template > Report > Quarantine
%%SPAM_DELETE_ALL_EMA IL%%	Under email actions in the quarantine summary, the Click Here link that, if being clicked, sends an email to delete all quarantined messages.	summary
%%SPAM_DELETE_ALL_URL %%	Under spam web actions in the quarantine summary, the Click Here link that, if being clicked, sends a HTTP or HTTPS request to delete all quarantined messages.
%%SPAM_DELETE_SUBJECT %%	The subject of the email that is sent to delete a quarantined message when you click Delete under email actions in the quarantine summary.
%%SPAM_RELEASE_EMAIL% %	The email address, such as release-ctrl@example.com, used to release an email from the recipient’s personal quarantine. For details, see “Configuring the quarantine control accounts” on page 612.
%%QMSG_DATE%%	The date and time when a message was quarantined.
%%QMSG_EMAIL_RELEASE% %	Under email actions in the quarantine summary, the Release link that, if being clicked, sends an email to have a quarantined message sent to you.
%%QMSG_SUBJECT%%	The subject of a quarantined message.
%%QMSG_WEB_RELEASE%%	Under web actions in the quarantine summary, the Release link that, if being clicked, releases the message to your inbox.
%%QUARANTINE_MESSAGES _ COUNT%%	The number of quarantined messages in this summary.

 

Variable	Description	Found under
%%SPAMREPORT_SENDER%%	The email address, such as release-ctrl-svr@example. com, used to send quarantine summaries.	System > Customization > Custom Email Template > Report > Quarantine summary
%%SPAM_DELETE_ALL_ SUBJECT%%	The subject of the email that is sent to delete all quarantined messages when you select Click Here under email actions in the quarantine summary.
%%SPAM_DELETE_EMAIL%%	The email address, such as delete-ctrl@example.com, used to delete an email from the recipient’s personal quarantine. For details, see “Configuring the quarantine control accounts” on page 612.
%%SPAM_PREFERENCE%%	The Click Here link under Other in the quarantine summary that, if being clicked, opens your entire quarantine inbox for you to manage your preferences.
%%SPAM_RELEASE_ SUBJECT%%	The subject of the email that is sent to release a quarantined message when you click Release under email actions in the quarantine summary.
%%SERVICE_NAME%%	Copyright information of the secure message.	System > Customization > Custom Message > Secure message > Secure message footer
%%SERVICE_NAME%%	The From, To, and Subject lines of the secure message.	System > Customization > Custom Message > Secure message > Secure message header
%%ADMIN_SENDER%%	The sender’s address of this notification email.	System > Customization > Custom Email Template > Secure message > Account
%%LAST_NAME%%	The last name of the notification receiver.	reset notification
%%MONTH%%	The month when the link in the notification to reset the account will expire.
%%TIME%%	The time when the link in the notification to reset the account will expire.

 

Variable	Description	Found under
%%DAY%%	The day when the link in the notification to reset the account will expire.	System > Customization > Custom Email Template > Secure message > Account reset notification
%%LINK_URI%%	The link in the notification that you can click to complete the account reset.
%%SERVICE_NAME%%	Signature of the notification.
%%YEAR%%	The year when the link in the notification to reset the account will expire.
%%ADMIN_SENDER%%	The sender’s address of this notification email.
%%LAST_NAME%%	The last name of the notification recipient.
%%RECIPIENT%%	The email address of the notification recipient.
%%YEAR%%	The year when the notification was sent.
%%DAY%%	The day when the notification was sent.
%%MONTH%%	The month when the notification was sent.
%%SERVICE_NAME%%	Signature of the notification.
%%DAY%%	The day when the link in the notification to reset the password will expire.	System > Customization > Custom Email Template > Secure message > Password reset notification
%%LAST_NAME%%	The last name of the notification recipient.
%%MONTH%%	The month when the link in the notification to reset the password will expire.
%%TIME%%	The time when the link in the notification to reset the password will expire.
%%URI_HELP%%	The Help link in the notification about secure email.
%%FIRST_NAME%%	The first name of the notification recipient.

 

Variable	Description	Found under
%%LINK_URI%%	The link in the notification that you can click to complete the password reset.	System > Customization > Custom Email Template > Secure message > Password reset notification
%%SERVICE_NAME%%	Signature of the notification.
%%URI_ABOUT%%	The About link in the notification about secure email.
%%YEAR%%	The year when the link in the notification to reset the password will expire.
%%ADMIN_SENDER%%	The sender’s address of this notification email.
%%LAST_NAME%%	The last name of the notification recipient.
%%RECIPIENT%%	The email address of the notification recipient.
%%YEAR%%	The year when the notification was sent.
%%DAY%%	The day when the notification was sent.
%%MONTH%%	The month when the notification was sent.
%%SERVICE_NAME%%	Signature of the notification.
%%ADMIN_SENDER%%	The sender’s address of this notification email.	System > Customization > Custom Email Template > Secure message > Secure
%%SEMAIL_SUBJECT%%	The subject of the notification.	message notification – Pull
%%URI_HELP%%	The Help link in the notification about secure email.
%%LINK_URI%%	The link in the notification that you can click to open the secure message.
%%URI_ABOUT%%	The About link in the notification about secure email.
%%ADMIN_SENDER%%	The sender’s address of this notification email.	System > Customization > Custom Email Template > Secure message > Secure message notification – Push

 

Variable	Description	Found under
%%URI_ABOUT%%	The About link in the notification about secure email.	System > Customization > Custom Email Template > Secure message > Secure
%%SEMAIL_SUBJECT%%	The subject of the notification.	message notification – Push
%%URI_HELP%%	The Help link in the notification about secure email.
%%ADMIN_SENDER%%	The sender’s address of this notification email.	System > Customization > Custom Email Template > Secure message > User
%%LAST_NAME%%	The last name of the notification recipient.	registration notification
%%RECIPIENT%%	The email address of the notification recipient.
%%YEAR%%	The year when the notification was sent.
%%DAY%%	The day when the notification was sent.
%%MONTH%%	The month when the notification was sent.
%%SERVICE_NAME%%	Signature of the notification.
%%ATTENDEE_ACTION%%	The action (accept, tentative, or reject) taken by the event attendee.	System > Customization > Custom Email Template > Notification > Calendar event notification
%%CALENDAR_SENDER%%	The email address from where the notification is sent.
%%CALENDAR_URL_NO%%	The event is rejected.
%%EVENT_FREQUENCY%%	The frequency of the event.
%%EVENT_ORGANIZER%%	the email address of the event organizer.
%%EVENT_TYPE%%	The type of the event.
%%TIME_END%%	The ending time of the event.
%%CALENDAR_ATTENDEE%%	The name of the person invited to this event.
%%CALENDAR_URL_MAYBE% %	The event is set to tentative by the attendee.
%%CALENDAR_URL_YES%%	The event is accepted by the attendee.

Customizing email templates

The FortiMail unit may send out notification email in the following cases:

• To send out quarantine reports (see “Configuring email quarantines and quarantine reports” on page 601)
• To send out IBE-related email (see “FortiMail IBE configuration workflow” on page 358)
• To repackage virus-infected email with new email body (see “Configuring antivirus action profiles” on page 522)

Variable	Description	Found under
%%EVENT_LOCATION%%	The location where the event is to be held.	System > Customization > Custom Email Template > Notification > Calendar
%%EVENT_TITLE%%	The nature of the event. For example, meeting or party.	event notification
%%TIME_BEGIN%%	The starting time of the event.

• To send out notification email to any mail recipient for any FortiMail actions (see “Configuring notification profiles” on page 600)

FortiMail allows you to customize the email templates for all the above mentioned email/report types.

To customize email templates

1. Go to System > Customization > Custom Email Template.
2. To edit a template, double-click it or select it and click Edit.
3. Enter the replacement message and click OK, or click Reset To Default to revert the replacement message to its default text.

Figure 119:Editing a template with variables and color

 

4. To format replacement messages in HTML, use HTML tags, such as <b>some bold text</b>.

There is a limit of 250 characters for the Subject field, 60 characters for the From field, and 4000 characters for HTML and Text messages each in the Content field.

5. To add a variable:
   • Select Insert Variables next to the area to insert a variable. A pop-up window appears.
   • Place your mouse cursor in the text message at the insertion point for the variable.
   • Click the name of the variable to add. It appears at the insertion point.
   • To add another variable, click the message area first, then click the variable name.
   • Click the Close (X) icon to close the window.
6. To insert a color:
   • Click Insert Color Code. A pop-up window of color swaths appears.
   • Place your mouse cursor in the text at the insertion point for the color code, or highlight an existing color code to change.
   • Click a color in the color swath. For example, to replace the color code in the HTML tag <tr bgcolor=”#3366ff”>, you can highlight “#3366ff”, then select the color you want from the color palette.

To add a new color code, include it with HTML tags as applicable, such as <tr bgcolor=”#3366ff”>.

7. To determine if you HTML and color changes are correct, click Preview. The replacement message appears in HTML format.
8. Click OK, or click Reset To Default to revert the replacement message to its default text