Changes in email notifications in FortiOS 6.4

Nadav Svirsky
2 min readNov 3, 2021

--

Email notification in lower versions (i.e. 6.0.x) of FortiGate firewalls was manageable in an simple menu option: Log & Report > Email Alert Settings:

Though automation stitches in FortiOS were already introduced in the lower versions, it mandated in 6.4.x and up.

The above menu screenshot option is no longer available in 6.4.x versions and a stitch is necessary to receive alerts. You don’t need this article to do so, there are many KBs that explains this flow, for example.

Keep in mind that the email are received automatically from noreply@notification.fortinet.net, if you’d like to change the source address , you’ll need to edit it via CLI

# config system automation-action
edit <action-name>
set action-type email
set email-from <Email sender name>
set email-to <email-address>
set email-subject <subject-name>
set minimum-interval <seconds>
next
end

Keep in mind #2: Let’s say you’ve created an email alert for a reboot and you’ve named the action EmailAlertReboot. In the CLI you’ll have to edit the <action-name> as EmailAlertReboot_email otherwise it will just create a new stitch in background.

Once the _email stitch has been edited with the set email-from section it will change from noreply@notification.fortinet.net to what you wrote, i.e. myname@mydomain.com

--

--

No responses yet