During our deployment and in our day-to-day operations, we've encountered certain challenges with our email security setup. When a user or administrator needs to locate a specific email, it can be a time-sensitive issue. If an email administrator receives a query from a recipient or end user about undelivered or suspicious emails, the ability to quickly and easily locate the email in question, along with details about why it wasn't sent, is crucial. We've faced difficulties in ensuring that our reporting system is efficient and delivers this information promptly for administrators to address the issue promptly. Another challenge we've experienced is complexity. The email security solution should ideally be user-friendly and intuitive and it should offer straightforward access to settings and features. We encountered situations where our users have found the tool overly complex and difficult to learn quickly. This ease of use and user-friendliness is something we believe could be improved in FortiMail.

The tool's UI can be simple since it's cluttered now and you can't understand where you are going. It's not obvious to find out the menus or things that you are looking to find. 

Fortinet FortiMail Cloud doesn't have AI features, making it an outdated tool for me. Compared with Fortinet FortiMail Cloud, the top products in the market are its counterparts like Barracuda, TitanHQ, or Libraesva ESG. Fortinet FortiMail Cloud needs to catch up with its competitors in the market, especially in terms of features related to AI. Everything in Fortinet FortiMail is more analog and manual work instead of being automated.

As far as improvement, I would like to see additional troubleshooting tools. It would be useful to have different types of reporting so that you can monitor how your emails are flowing and not just have to go to the logs and see them one by one. Maybe you want to look separately at the details on your main server, SMTP server or how your head spam controller controls are working. It would be useful to have the reporting tools to do this. Maybe the reporting just needs some improvement.  

Troubleshooting tools are the first concern but I would also like to see some additional notification options in the system. For example, when the system quarantines emails there should be an option to notify administrators that a quarantine has been performed. This way you don't have to go and manually check the server periodically to see if anything is quarantined and needs attention. It should have live spam and live quarantine portal accessibility. It is not really optimal to have it every two or three hours or two hours. With a live portal, you could attend to the issues more efficiently and either release the emails or delete them. Live access is really something that I think would be good.  

We are currently in gateway mode. If a user is identified as mail, not spam or spam, I can't see the feedback to the FortiMail gateway. 

The initial setup should be simplified. It was very involved and the influence of the setup for the delivery of the mail was quite complicated. 

The setup of the rules can be improved. I think it should be simplified and would be the best improvement in the system. It is quite complicated because there is a lot to use, and there are many different logical systems to understand to determine if there is spam or not, and if you don't use it correctly, you can create even more problems.

Everything that you need is inside and all that you have to do is to compose the rules correctly and to the way that you like. The configuration for FortiMail is very powerful.

I would like to see the interface simplified and make the configuration easier.

Not much can really be improved at this time. That said, they could look at strengthening anti-spam with the newly observed domains.

I've not been able to use more than two domains in the back end. I like to view logs for the different domains. If I add any other domain I'm not able to get a proper cPanel for that domain. I am talking about login factors. I'm not able to see logs for different domains in a different Window. Basically, it's an issue in the login process.

FortiMail Cloud's GUI needs improvement. It could be more user-friendly and easier to navigate as well.

FortiMail Cloud isn't able to support portals where you're able to assign a different domain level. It lacks domain support. 

The URL filtering, inside the email, for example, when you receive an email, or I can send you a link inside the email copy, email security can detect to see if I am a hacker, a virus or something malicious. It will spoof my email.

When sending or receiving an email, the engine is supposed to scan each link, each file, and the content, to deliver or receive a clear or clean email message. 

The URL filtering and handling should be enhanced because it doesn't support all languages. I believe that this would be easy to enhance in the future.

In the next release, I would like to see email encryption, as it is currently it is not in place. Sophos is offering email encryption and if Fortinet enhanced this feature they could compete with Sophos.

Also, Archiving is not currently in place.

The dashboard could use improvement. However, I noticed there was a feature for auditing added to Fortinet in the last update. That is the only thing relevant to me, as the information security manager at my site. I gather information about risk and the maturity level we have reached by using Fortinet and FortiGate is great for me.

The downside of this solution is that it is difficult to implement policies on FortiMail.

As an example, if a customer manages FortiMail using a different SCL, it is difficult to implement in the customer's box and FortiMail.

It is slightly difficult to configure FortiMail in the cloud with Exchange on-premise, especially the quarantine mailbox access for end-users.

This solution is expensive, so the pricing could be improved to be more competitive.

I would like to see more advanced sandbox features, where you can actually download to a machine where you can test.

Networking should be simplified.

This solution is slow and it should be made faster.

When it comes to security, this solution is not as efficient as other products.

Email sorting is missing from this solution.

When it comes to internationalization, especially with the time and date, this solution is very limited. We need a third-party appliance to take care of that.