FortiMail 5.2.

3 GA
Release Notes

FortiMail 5.2.3 GA Release Notes

April 10, 2015
Copyright 2015 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiCare and
FortiGuard, and certain other marks are registered trademarks of Fortinet, Inc., and other
Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All
other product or company names may be trademarks of their respective owners. Performance
and other metrics contained herein were attained in internal lab tests under ideal conditions,
and actual performance and other results may vary. Network variables, different network
environments and other conditions may affect performance results. Nothing herein represents
any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or
implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet's
General Counsel, with a purchaser that expressly warrants that the identified product will
perform according to certain expressly-identified performance metrics and, in such event, only
the specific performance metrics expressly identified in such binding written contract shall be
binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the
same ideal conditions as in Fortinet's internal lab tests. Fortinet disclaims in full any covenants,
representations, and guarantees pursuant hereto, whether express or implied. Fortinet
reserves the right to change, modify, transfer, or otherwise revise this publication without
notice, and the most current version of the publication shall be applicable.

Technical Documentation
Knowledge Base
Customer Service & Support
Training Services
FortiGuard
Document Feedback

docs.fortinet.com
kb.fortinet.com
support.fortinet.com
training.fortinet.com
fortiguard.com
techdocs@fortinet.com

Table of Contents
Introduction ...................................................................................................... 4
Supported Platforms ........................................................................................... 4

What's New....................................................................................................... 5
New file type support on FortiSandbox integration ............................................. 5
More flexibility on mail data backup schedule .................................................... 5
Task-based search for system quarantine .......................................................... 5
Traffic capture tool on GUI .................................................................................. 5

Special Notices ................................................................................................ 6

TFTP firmware install........................................................................................... 6
Monitor settings for web UI ................................................................................. 6
Recommended web browsers ............................................................................ 6
FortiSandbox support ......................................................................................... 6

Firmware Upgrade/Downgrade Information ................................................. 7

Before and after any firmware upgrade/downgrade ............................................ 7
Upgrade path ...................................................................................................... 7
Firmware downgrade .......................................................................................... 8

Resolved Issues ............................................................................................... 9

Antispam ............................................................................................................. 9
MTA .................................................................................................................... 9
Webmail .............................................................................................................. 9
System .............................................................................................................. 10

Image Checksums ......................................................................................... 11

Fortinet Technologies Inc.

FortiMail 5.2.3 Release Notes

Introduction
This document provides a summary of new features, support information, upgrade/downgrade
instructions, and resolved issues in FortiMail 5.2.3 release build 0434.

Supported Platforms
FortiMail 5.2.3 release supports the following platforms:
FortiMail 200D
FortiMail 400C
FortiMail 1000D
FortiMail 2000B
FortiMail 3000C
FortiMail 3000D
FortiMail 5002B
FortiMail VM (VMware vSphere Hypervisor ESX/ESXi 5.0 and higher)
FortiMail VM (Microsoft Hyper-V Server 2008 R2 and 2012)
FortiMail VM (KVM qemu 0.12.1)
FortiMail VM (Citrix XenServer v5.6sp2, 6.0 and higher)

Fortinet Technologies Inc.

FortiMail 5.2.3 Release Notes

What's New
New file type support on FortiSandbox integration
FortiMail can upload more email attachment types that have been added to the new
FortiSandbox release.

More flexibility on mail data backup schedule

Backup schedule has been made more flexible under Maintenance > System > Mail Data.

Task-based search for system quarantine

Before 5.2.3 release, task-based search was only supported in personal quarantine search and
archive email search. Task-based search allows you to create a search task and fully control
the search process (start and stop).

Traffic capture tool on GUI

Traffic capture, or packet sniffing, is very useful for network troubleshooting. In addition to CLI
commands, this function has been added to the GUI under Maintenance > System > Traffic
Capture.

Fortinet Technologies Inc.

FortiMail 5.2.3 Release Notes

Special Notices
TFTP firmware install
Using TFTP via the serial console to install firmware during system boot time will erase all
current FortiMail configurations and replace them with factory default settings.

Monitor settings for web UI

Fortinet recommends setting your monitor to a screen resolution of at least 1280x1024. This
allows for all objects in the web UI to be viewed properly.

Recommended web browsers

Internet Explorer 11
Firefox 24 to 31
Safari 5 to 8
Chrome 23 to 39
Adobe Flash Player 9 or higher plug-in required to display statistics charts

FortiSandbox support
FortiMail 5.2.3 release requires FortiSandbox 1.4.0 or newer releases.

Fortinet Technologies Inc.

FortiMail 5.2.3 Release Notes

Firmware Upgrade/Downgrade
Information
Before and after any firmware upgrade/downgrade

Before any firmware upgrade/downgrade, save a copy of your FortiMail configuration

(including replacement messages) by going to Maintenance > System > Configuration.

After any firmware upgrade/downgrade:

o

If you are using the web UI, clear the browser cache prior to login on the FortiMail
unit to ensure proper display of the web UI screens.

The antivirus signatures included with an image upgrade may be older than those
currently available from the Fortinet FortiGuard Distribution Network (FDN). Fortinet
recommends performing an immediate AV signature update as soon as possible
after upgrading. Consult the FortiMail Administration Guide for detailed procedures.

Upgrade path
For any older 3.0 release
Any 3.0 release older than 3.5.4

3.5.4 (Build 531)

4.0.4 (Build 146)

4.3.6 (Build 540)

5.2.3 (Build 434)

For any older 4.0 release

Any 4.0 release older than 4.3.6

4.3.6 (Build 540)

5.2.3 (Build 434)

For any 5.0 release

Any 5.0 GA release

5.2.3 (Build 434)

After every upgrade, verify that the build number and branch point match the image that was
loaded. To do this, go to Monitor > System Status > Status.

Fortinet Technologies Inc.

FortiMail 5.2.3 Release Notes

Firmware downgrade
Downgrading from 5.2 to 5.1, 5.0 or 4.0 releases
Downgrading from 5.2 to any 5.1, 5.0, or 4.0 release is not fully supported. If you have to
downgrade, follow these steps:
1. Back up the 5.2 configuration.
2. Install the older image.
3. In the CLI, enter execute factoryreset to reset the FortiMail unit to factory defaults.
4. Configure the device IP address and other network settings.
5. Reload the 5.2 backup configuration if needed.

Downgrading to 3.0 releases

FortiMail firmware downgrade directly from 5.2, 5.1, and 5.0 to 3.0 is not supported. If you
install 3.0 firmware on a 5.2, 5.1, or 5.0 FortiMail unit, all configuration and mail data will be
erased.
In addition, you can only clean-install the v3.0 firmware by using serial console connection. For
details, see the FortiMail Administration Guide.
After you install the 3.0 firmware:
1. In the CLI, enter execute formatmaildisk, execute formatlogdisk, and
execute factoryreset to format the hard disk and reset the FortiMail unit to
factory defaults.
2. Configure the device IP address and other network settings.
3. Reload the 3.0 configuration if needed.

Fortinet Technologies Inc.

FortiMail 5.2.3 Release Notes

Resolved Issues
This section lists the resolved issues in this release, but is not a complete list. For inquires
about a particular bug, please contact Fortinet Technical Support.

Antispam
Bug ID

Description

265094

Dictionary entries are not detected when they exist in some type of
replied email.

254841

URI in quarantine report does not follow RFC 6068.

263292

Recipient policies are not matched if the recipient is matched based on

an LDAP group and the domain is an associated domain.

263405

In some cases, email from blacklisted senders is not handled with the
configured action.

263170

Multiple message stamp (footer/disclaimer) detector cannot detect

previously stamped email.

264102

Email should not be rejected with "User unknown" if the LDAP server is
unreachable and "Bypass recipient verification if server unavailable" is
enabled.

265514

The quarantine report template "default-with-icon" is reset to "default"

template without icons.

265267

LDAP alias for alert email addresses does not work.

264318

Mailboxes cannot be deleted in the system quarantine folder.

Bug ID

Description

267136

Email with a large number of recipients (for example, 3000 recipients)

ends up in quarantine for some users, although no antispam profile is
triggered.

MTA

Webmail
Bug ID

Description

265605

PKI users cannot log on to webmail.

Fortinet Technologies Inc.

FortiMail 5.2.3 Release Notes

267271

IBE users get an error message ("Error: Failed to open mailbox") when
sending reply messages.

System
Bug ID

Description

267437

Fixed CVE-2015-0235 vulnerability.

263435

In a config-only HA cluster, the log file rotation size setting is not handled
correctly after firmware upgrading, if the old size limit is above the
maximum allowed size in the new release.

263576

Reported disk usage is not correct for some users.

265063

Time zone setting for Minsk is wrong.

265665

RAID cannot recognize the JBOD status of new disks.

265363

Clicking the firmware update link on the dashboard causes endless error
message loop for read-only administrator accounts.

266985

There should be a log message when an email message is rejected as

oversized.

Fortinet Technologies Inc.

10

FortiMail 5.2.3 Release Notes

Image Checksums
To verify the integrity of the firmware file, use a checksum tool and compute the firmware file's
MD5 checksum. Compare it with the checksum indicated by Fortinet. If the checksums match,
the file is intact.
MD5 checksums for Fortinet software and firmware releases are available from Fortinet
Customer Service & Support. After logging in to the web site, near the bottom of the page,
click the Firmware Checksums button. (The button appears only if one or more of your devices
have a current support contract.) In the File Name field, enter the firmware image file name
including its extension, then click Get Checksum Code.

Fortinet Technologies Inc.

11

FortiMail 5.2.3 Release Notes

Fortinet Technologies Inc.

12

FortiMail 5.2.3 Release Notes