Configuring policies : Controlling email based on recipient addresses : Configuring the advanced incoming policies
Configuring the advanced incoming policies
The Advanced Settings section appears only if the directionality is incoming.
 
GUI item
Description
Allow different SMTP sender identity for authenticated user
Enable to allow the SMTP client to send email using a different sender email address (MAIL FROM:) than the user name that they used to authenticate.
Disable to require that the sender email address in the SMTP envelope match the authenticated user name.
Enable PKI authentication for web mail access
Enable if you want to allow web mail users to log in by presenting a certificate rather than a user name and password. Also configure “Certificate validation is mandatory”.
For more information on configuring PKI users and what defines a valid certificate, see “Configuring PKI authentication”.
Certificate validation is mandatory
If the email user’s web browser does not provide a valid personal certificate, the FortiMail unit will fall back to standard user name and password-style authentication. To require valid certificates only and disallow password-style fallback, enable this option.