Monitoring the system : Viewing the endpoint reputation statuses
Viewing the endpoint reputation statuses
Go to Monitor > Endpoint Reputation > Auto Blocklist to view the current list of carrier end points (by their MSISDN, subscriber ID, or other identifier) that were caught by FortiMail for sending spam. For general procedures about how to configure endpoint reputation, see “Configuring endpoint reputation”.
If a carrier end point has attempted to deliver during the automatic blocklisting window a number of spam text messages that is greater than the automatic endpoint blocklisting threshold, FortiMail unit adds the carrier end point to the automatic endpoint block list for the duration configured in the session profile. While the carrier end point is on the automatic block list and it does not expire, all text messages or email messages from it will be rejected. For information on configuring the automatic block list window, see “Configuring the endpoint reputation score window”. For information on enabling the endpoint reputation scan and configuring the automatic block list threshold in a session profile, see “Configuring session profiles”.
 
You can alternatively blocklist MSISDNs/subscriber IDs manually. For more information, see “Manually blocklisting endpoints”.
 
 
You can exempt MSISDNs/subscriber IDs from automatic blocklisting. For more information, see “Exempting endpoints from endpoint reputation”.
To access this part of the web UI, your administrator account’s:
• Domain must be System
• access profile must have Read or Read-Write permission to the Block/Safe List category
For details, see “About administrator account permissions and domains”.
To view the automatic endpoint reputation block list, go to Monitor > Endpoint Reputation > Auto Blocklist.
Table 7: Auto Blocklist tab
GUI item
Description
Move
(button)
To move entries to the manual endpoint block list or safe list, in the check box column, mark the check boxes of entries that you want to move, then click Move.
Search
(button)
Click to filter the displayed entries. For more information, see “Filtering automatic endpoint block list entries”.
Endpoint ID
Lists the mobile subscriber IDSN (MSISDN), subscriber ID, login ID, or other unique identifier for the carrier end point.
Score
Lists the number of text messages or email messages that the FortiMail has detected as spam or infected from the MSISDN/subscriber ID during the automatic endpoint block list window.
Expire
Lists the time at which the automatic endpoint blocklisting entry expires and is removed from the list.
N/A appears if the endpoint ID has not reached the threshold yet.