FortiMail Workspace Security

This page includes:

About connecting email services

FortiMail Workspace Security can be integrated with the following email services:

  • Microsoft 365 [Office 365] - Inline or API [Refers to Microsoft Exchange Online]

  • Google Workspace [Gmail]

  • Microsoft Exchange [Refers to Microsoft Exchange On-Premises]

  • "Other" - any email service that is not one of the three above

Each of these email services must be correctly onboarded and configured to enable the integration with FortiMail Workspace Security to function.

  • By default, the email integrations scan incoming emails only - not outgoing emails.
    [Outbound scanning can be configured for Microsoft 365 [Inline and API] - see Onboarding Microsoft 365 - Outbound. Outbound scanning can't be configured for Google Workspace or Microsoft Exchange.]

  • By default, internal email is not scanned. To add scanning of internal email, contact your Customer Success Manager for FortiMail Workspace Security.

    Emails that have both the sender and recipient within the same domain and tenant are considered to be internal email.

    Licensing: There may be additional licensing requirements for enabling internal scanning.

  • Typically, only a single email service integration type [Microsoft 365 Inline, Microsoft 365 API, Google Workspace, Microsoft Exchange, or "other"] can be configured in any organization at any time. If you require more than one integration type - for example, Google Workspace and Microsoft 365 Inline - then you'll need to create an organization for each of the required integration types. [See the drop-down below for details and exceptions.]

    Integration #1

    Integration #2

    Supported?

    Microsoft 365 - Inline or API

    Google Workspace

    Microsoft 365 - Inline

    Microsoft 365 - API - Inbound

    Microsoft 365 - Inline

    Microsoft 365 - API - Outbound

    Microsoft 365 - Inline or API

    Microsoft Exchange or Other

    Google Workspace

    Microsoft Exchange or Other

Maximum email sizes for scanning

  • Microsoft 365 Inline and Google Workspace

    FortiMail Workspace Security scans email messages up to a maximum size of 40 MB [including attachments]. Larger email messages are not scanned by FortiMail Workspace Security, and will be delivered to the specified recipients.

    Note:

    • Due to external technical limitations, the 40 MB limitation can't be increased.

    • We recommend that you limit receiving email attachments up to 30 MB in size. Files that are larger than 30 MB should be shared using a different file sharing service, such as Microsoft OneDrive or Google Drive.

  • Microsoft 365 API integrations

    FortiMail Workspace Security scans email messages up to a maximum size of 500 MB [including attachments].

  • Microsoft Exchange and "Other" integrations

    FortiMail Workspace Security scans email messages up to a maximum size of 40 MB [including attachments]. If a message exceeds 40 MB, the email will not be sent, and a Non-Delivery Report (NDR) or bounce notification will be generated. This NDR will indicate that the message size limit was exceeded [for example: "552 Message is too long"]. The NDR will be sent to the sender.

Which email addresses are protected

Each email integration can protect either:

  • all the email addresses inside all the domains in the organization account [Full account protection]

    - or -

  • a partial set of email addresses inside the organization account [Partial account protection]

Note: Partial account protection applies to Microsoft 365 [Inline and API] and Google Workspace integrations only. With Exchange and "Other" integrations, all users in the account are protected - it is not possible to protect only specific users or specific groups.

Partial account protection

 

Integration type

Can modify the set of users to protect after onboarding

For more info, see:

 

Google Workspace

When you onboard a Google Workspace integration, you can choose to protect:

  • specific users

  • specific user groups

  • entire domains

Yes

Specifying which users to protect [Google Workspace]

 

Microsoft 365 - Inline

When you onboard a Microsoft 365 [Inline] integration, you can choose to protect:

  • specific users

  • specific user groups

  • entire domains

Yes

Specifying which users to protect [Microsoft 365 - Inline]

 

Microsoft 365 - API

When you onboard a Microsoft 365 API integration, you can choose to protect:

  • specific users

  • specific domains

  • specific domains and specific users

Yes

Editing the protected assets

 

Exchange and "Other"

All users are always protected - partial protection is not possible.

The integrations for Exchange and "Other" are MX integrations. This means that all emails from the scanned domains are sent to FortiMail Workspace Security for scanning. It isn't possible to limit [filter] the emails that are sent through the integration path.

Email connection procedures

For connection procedures, click any of the email services below:

Other integration procedures

See also: