FortiMail Filtering Course 221-v2.2 Course Overview

Transcription

1 FortiMail Filtering Course 221-v2.2 Course Overview FortiMail Filtering is a 2-day instructor-led course with comprehensive hands-on labs to provide you with the skills needed to design, configure, manage and maintain a FortiMail Secure Messaging Platform. The course begins by discussing the security challenges that many enterprises face. Students then learn through hands-on experience how to configure the product features that provide protection against these threats. Antispam, antivirus, content inspection and archiving capabilities are all thoroughly explored. Also included, is an overview of the SMTP protocol and a detailed look at FortiMail traffic flow. Through the use of policies and profiles, students configure optimized protection against advanced attacks. Operational maintenance and real-time network solutions (FortiGuard Subscription Services) are discussed, and at the end of the course students will configure a high availability active-passive group. Participants gain a solid understanding of how to integrate a FortiMail Secure Messaging appliance into their existing infrastructure and the configuration required to successfully remove unwanted spam, provide maximum protection for blended -related threats and facilitate regulatory compliance.

2 Course Objectives Upon completion of this course, students will be able to: o Use the GUI and CLI to perform administration and maintenance functions for the FortiMail security appliance including system backups, routing and domain configuration, HA failover setup, antispam quarantine management and report generation. o Protect valuable corporate MTA processing resources by validating recipients and blocking messages to invalid users using recipient verification capabilities. o Configure policies to apply inspection and protection profiles for ongoing corporate security and the enforcement of policy. o Understand the system architecture of a FortiMail appliance, how flows through it, and how it applies intelligent routing and policies to message traffic. o Configure protection profiles for multi-layered antivirus, antispam, and antispyware security protection. o Use session profiles to set mail client connection thresholds and cut-off MTA accessibility to spammers. o Configure archiving features to comply with best practices archiving guidelines. o Deploy antispam filtering techniques including deep header inspection, heuristics, image scan, banned words, third-party DNSBL and SURBL servers and the FortiGuard Antispam Service. o Configure antivirus filtering profiles to apply antivirus scanning and remove viruses and spyware embedded in . o Enforce network usage policies by creating content profiles o Optimize the integration of the Fortimail in the existing network topology by choosing the best fitted operational mode between Gateway, Server and Transparent. o Achieve failover protection or increase processing capabilities by configuring an HA cluster

3 Prerequisites o Working knowledge of ing systems Who Should Attend This course is intended for anyone who is planning, implementing and administrating the FortiMail Secure Messaging platform. Course Topics Module 1 FortiMail Overview o What is FortiMail? o Fortiguard Antispam Services o FortiMail Operating Modes Gateway Transparent Server o Theory o Message Flow Module 2 System and Mail Settings o Web Access o Quick Start Wizard o Handling o Domain Administration o Recipient Verification o Access Control Rules o Message Delivery Rules o Network Settings o Administration Options o Certificates Management o Logging and Reporting o Alert

4 o Mail Queues o Users and Groups o User Alias and Address Map o Customizations Module 3 Policies and Profiles o Policies and Profiles Definition o Recipient Based Policies o IP Based Policies o Profile Selection o IP versus Recipient Based Policies o Profile Types o Conflicting Profiles Module 4 Antispam Filtering o Definition of Spam o Antispam Filters o Session Rate Limiting o Sender Reputation o MSISDN Reputation o Sender Validation o Domain Keys Identified Mail (DKIM) o SMTP commands verification o domains verification o SMTP Limits o Error Handling o Header Manipulation o Session Based black and white list o Fortiguard Antispam Service Fortiguard DNSBL Fortiguard Signature o Forged IP Scan o Greylist Scan o DNSBL Scan o Deep Header Scan o SURBL Scan

5 o Bayesian Filtering o Heuristic Scan o Dictionary Scan o Banned Word Scan o Image Scanning o PDF Scanning o Spam Handling o Quarantine o Black/White List o Bounce Address Tag Validation Module 5 Antivirus and Content Filtering o Virus Detection o Virus Handling o Attachments and File type filtering o Content Filtering actions o Dictionary Profile Set-up Module 6 Archive o Archiving o Archiving Policy and Exempt Policy o Archive management Module 7 Administration o Maintenance Firmware Upgrade FortiGuard Subscription Services Full System Backups o Troubleshooting Module 8 Transparent Mode o Design Considerations o Domain Settings o Proxy Settings o Mail flow

6 Module 9 High Availability o Fortimail HA introduction o HA Active-Passive o HA Configuration only o Mail Data Syncronization System Mail Directory User Home Directories MTA Spool Directories o HA Service Monitor o HA Heartbeat Interface Configuration o Firmware upgrade procedure o HA Failover o Design Considerations Fortinet, Inc Kifer Road Sunnyvale, CA USA Training Services: (613) Fax: (613) training@fortinet.com