Verdict email headers

This page includes:

Verdict headers

After FortiMail Workspace Security scans an email, various entries may be added to the email header to define the results of the scan.

Note:

  • The email headers that are described below are not added when a scan is performed using the Microsoft 365 API integration or the Google Workspace API integration.

  • The email headers that are described below are not added to outgoing emails.

Header

Explanation

X-PERCEPTION-POINT-VERDICT

  • "MAL" – Malicious content was found in the email.

  • "CLN" – The email is not malicious - it may be clean or spam.

X-PERCEPTION-POINT-SPF

  • "FAIL" – The email failed the SPF tests.

  • "PASS" – The email passed the SPF tests.

X-PERCEPTION-POINT-SPAM

  • "FAIL" – The email was classified as "Spam".

  • "PASS" – The email is clean - it is not spam.

X-PERCEPTION-POINT-SENDER-IP

  • Shows the original sender IP address

Sample additions to headers

  • For an email with a clean verdict

  • For an email with a spam verdict

  • For an email with a malware verdict

See also: