Configuring antispam settings : Configuring endpoint reputation : Configuring the endpoint reputation score window
Configuring the endpoint reputation score window
The Settings tab lets you configure the window size for calculating the reputation score for automatic endpoint reputation-based blocklisting.
In addition to manually blocklisting or exempting carrier end points based on their MSISDNs or subscriber IDs, you can configure automatic blocklisting based on endpoint reputation score. If an MSISDN or subscriber ID sends email or text messages that the FortiMail unit detects as spam or infected, the endpoint reputation score increases. You can configure session profiles to log or block, for a period of time, email and text messages from carrier end points whose reputation score exceeds the threshold during the automatic blocklisting window. For information on enabling endpoint reputation scans in session profiles and configuring the score threshold and automatic blocklisting duration, see “Configuring session profiles”.
For more information on the role of the automatic blocklisting window in the endpoint reputation scan, see “Configuring endpoint reputation”.
To access this part of the web UI, your administrator account’s:
Domain must be System
access profile must have Read or Read-Write permission to the Policy category
For details, see “About administrator account permissions and domains”.
To configure the automatic endpoint blocklisting window
1. Go to AntiSpam > Endpoint Reputation > Settings.
2. In Auto blocklist window size, enter the number of previous minutes in which events will be used to calculate the current endpoint reputation score.
For example, if the window of time was 15, detections of spam or viruses within the last 0-15 minutes are counted towards the current score; but, detections of spam or viruses older than 15 minutes would not count towards the current score.
3. Click Apply.