Accessing the personal quarantine and webmail

Each email user has a personal quarantine, also known as the Bulk mailbox folder. If you selected that action in the antispam action profiles, spam for an email user is redirected to their personal quarantine.

Email users should monitor their personal quarantines to ensure that legitimate email is not accidentally quarantined. To do this, you can enable quarantine reports (see “Configuring global quarantine report settings” on page 602, “Configuring protected domains” on page 380, and “Using quarantine reports” on page 721). You can also enable email users to view their Bulk folder through:

• FortiMail webmail
• POP3, using an email client such as Microsoft Outlook or Mozilla Thunderbird

In addition to personal quarantine access, in server mode, FortiMail webmail also provides access to the Inbox, address book, and other features.

Available access methods vary by the operation mode of the FortiMail unit:

• Accessing personal quarantines through FortiMail webmail (gateway and transparent mode)
• Accessing FortiMail webmail (server mode)
• Accessing personal quarantines through POP3 (gateway and transparent mode)
• Accessing mailboxes through POP3 or IMAPv4 (server mode)

Accessing personal quarantines through FortiMail webmail (gateway and transparent mode)

To allow email users to access Bulk folders through FortiMail webmail, the administrator must:

• create an authentication profile that allows users to authenticate
• configure an incoming recipient-based policy that matches the email user’s address, where webmail access to the quarantine is enabled, and the authentication profile is selected

For details, see “Controlling email based on recipient addresses” on page 468 and “Configuring authentication profiles” on page 542.

Once this is configured, the administrator informs email users of the FortiMail webmail URL. When they log in, email users will immediately see their Bulk folders. (Unlike server mode, in gateway mode or transparent mode, this is the only mailbox folder.)

For additional instructions related to their personal quarantine, email users can click the Help button in FortiMail webmail.

Accessing FortiMail webmail (server mode)

Unlike gateway mode and transparent mode, server mode does not require that the administrator create an authentication profile. However, he or she must still configure an incoming recipient-based policy that matches the email user’s address, where webmail access to the quarantine is enabled through a resource profile.

Once this is configured, the administrator informs email users of the FortiMail webmail URL. When they log in, email users will immediately see their mailbox folders, including their Inbox, in addition to their Bulk folder.

For additional instructions related to their personal quarantine, email users can click the Help button in FortiMail webmail.

Using quarantine reports

If an administrator has enabled:

• quarantine reports to email users (see “Configuring global quarantine report settings” on page 602)
• the quarantine control email addresses (see “Configuring the quarantine control accounts” on page 612)

when email is added to their personal quarantine, email users will periodically receive an email similar to one of the samples below.

Email users can follow the instructions in the quarantine report to release or delete email from their personal quarantine. Quarantine reports can be used from with FortiMail webmail, or from an email client with POP3 access.

Example: Quarantine report (HTML)

The following sample report in HTML format informs the email user about how many messages are in quarantine, and explains how to delete one or all quarantined messages, and how to release an individual email. Email users can make decisions to release or delete an email based on a message’s subject and sender information contained in the body of the report.

Figure 313:Sample quarantine report in HTML format