Chapter 15 Unified Threat Management for FortiOS 5.0 : Email filter : Configure the spam action
  
Configure the spam action
When spam is detected, the FortiGate unit will deal with it according to the Spam Action setting in the email filter profile. Note that POP3S, IMAPS and SMTPS spam filtering is available only on FortiGate units that support SSL content scanning and inspection. POP3, IMAP, POP3S and IMAPS mail can only be tagged. SMTP and SMTPS mail can be set to Discard or Tagged:
Discard: When the spam action is set to Discard, messages detected as spam are deleted. No notification is sent to the sender or recipient.
Tagged: When the spam action is set to Tagged, messages detected as spam are labelled and delivered normally. The text used for the label is set in the Tag Format field and the label is placed in the subject or the message header, as set with the Tag Location option.
To configure the spam action
1. Go to Security Profiles > Email Filter > Profile.
2. The default email filter profile is presented. To edit another profile, select it from the drop down in the Edit Email Filter Profile title bar.
3. Select Enable Spam Detection and Filtering.
4. Select the types of email that you want the FortiGate unit to examine when using this email filter profile.
5. Select Apply.
6. The Spam Action row has a drop-down selection under the SMTP traffic type. Select Discard or Tagged.
No selection is available for POP3 or IMAP traffic. Tagged is the only applicable action for those traffic types.
By default, the tag location for any traffic set to Tagged is Subject and the tag format is Spam. If you want to change these settings, continue with “Configure the tag location” and “Configure the tag format”.
7. Select Apply.
Select the edited email filter profile in a security policy, and the traffic controlled by the security policy will be scanned according to the settings you configured. You may select the email filter profile in more than one security policy if required.