Overview
FortiMail is the ideal security complement to an organization's existing deployment of Microsoft Exchange, Office 365 or G-Suite. It offers a complete Secure Email Gateway (SEG) solution with a broad spectrum of top-rated security capabilities to provide a multi-layered approach to detect and prevent inbound attacks, including spam, viruses and advanced, zero-day attacks, plus address outbound content and compliance risks from data loss or business email compromise. Available in the AWS Marketplace, the virtualized FortiMail solution can scale to meet the needs of any size organization, from small to medium-sized businesses (SMB) to large enterprises, government agencies or educational institutions. Flexible deployment options including physical or virtual appliances and Software-as-a-Service (SaaS) are also available. With zero impact on the network or message traffic flow, FortiMail complements the existing, native security features of Exchange, Office 365 or G-Suite to further bolster efficacy and improve an organization's security posture. FortiMail is a customer-proven solution that has received dozens of awards for effectiveness paired with low false positive rates from firms including Virus Bulletin, NSS Labs, ICSA Labs and SE Labs. For more information on FortiMail, visit: https://www.fortinet.com/products/email-security.htmlÂ
Highlights
- Powerful, built-in capabilities for spam, phishing, malware and ransomware protection. Machine learning and outbreak detection techniques powered by FortiGuard Labs address the ever-changing threat landscape.
- Advanced capabilities for data leak prevention (DLP), identity-based encryption (IBE) and message archiving to meet compliance requirements such as SOX, GLBA, HIPAA, PCI DCSS and more.
- Tight integration with FortiSandbox for deep analysis of message attachments or embedded URLs to address emerging or unknown threats. FortiSandbox is also available in the AWS marketplace.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide

Financing for AWS Marketplace purchases
Pricing
Dimension | Cost/hour |
|---|---|
m4.large Recommended | $3.52 |
c4.xlarge | $2.40 |
c3.xlarge | $2.40 |
m4.xlarge | $2.40 |
m5.xlarge | $2.40 |
m4.2xlarge | $3.52 |
m5.2xlarge | $3.52 |
c3.2xlarge | $3.52 |
m5.large | $0.99 |
c4.2xlarge | $3.52 |
Vendor refund policy
No refunds
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
- Deploy the instance
- Click on Manage in AWS Console to see the running instance and public DNS address to continue the configuration of the FortiMail-VM.
- Connect to the secured Web UI via the public DNS address: https://<public DNS address>/admin and login with the default login credentials - username:admin and the password is the AWS Instance ID value.
- For any CLI configuration/settings, SSH is required to log into the CLI.
Resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Standard contract
Customer reviews
On‑premises email protection has simplified licensing and provides reliable threat detection
What is our primary use case?
Fortinet FortiMail is almost the last product that I am able to use in the customer's environment because all of the other vendors are moving to the Microsoft or Google environment, and as I remember, two or three vendors have on-premises solutions for mail protection. That is why we use it, and our customers appreciate it because it is easy to use and has no user device license. It has only a simple device license.
What is most valuable?
Fortinet FortiMail has valuable features such as on-premises deployment and click protection, and it is working properly. This is the most important part for us, and we experience this without a lot of false positive troubleshooting because it is important for our technical team.
We use Fortinet FortiMail sandbox integration, but nowadays I am a CISO, so I am not working closely with this product as I am leading projects. However, our customers are using sandboxing also to protect against known and unknown viruses.
The high performance mail scanning of Fortinet FortiMail works fine, but sometimes it does not, depending on the hardware that you are buying. If you are buying a low-cost product, the speed is low. If you choose a bigger product, it will be faster. The main goal is that if you do not need high speed, it is enough to buy the lowest box. As I mentioned, you do not want to buy a user license; it is working, but it has a lower traffic throughput, and the performance is lower, so that is why we appreciate it.
What needs improvement?
In my opinion, points for improvement for Fortinet FortiMail include sometimes the speed and fine-tuning the false positive problems, especially with the signed PDF attachments and the whitelist and blacklist.
I understand that it is mostly with PDF formats, but in the whole picture, Fortinet FortiMail is a good product.
For how long have I used the solution?
I have been working with Fortinet FortiMail for more than ten years.
What do I think about the stability of the solution?
From one to ten, I would rate the stability of Fortinet FortiMail as a nine.
What do I think about the scalability of the solution?
The scalability of Fortinet FortiMail depends on whether you are buying a virtualized license, which allows for a scalable pay-as-you-go model, or if you are buying a box, in which case you can only buy a new one. It is a trade-up program only, but many customers opt for the lowest box because the virtual machine version is almost enough for most customers.
How are customer service and support?
I would rate technical support from Fortinet as a seven. However, for Fortinet FortiMail support, I would rate it as an eight, but for example, FortiGate is a six because it depends on the people on the other side. Mainly, they are focusing on Fortinet FortiMail and FortiAnalyzer, where the support engineers are very good. If you are calling about a problem with your FortiGate, sometimes it is hard to find the best engineer.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup for Fortinet FortiMail is easy if you know what needs to be done; however, if you have no experience, it will be hard because you need to know how it works.
Which other solutions did I evaluate?
In my opinion, Fortinet FortiMail can be compared to cloud API solutions or perhaps Cisco, but we are working only with Fortinet FortiMail for mail protection because it is working well for us and our customers. If you are buying a good Microsoft license, maybe P5 that includes email security, that is possibly the main competitor because if you are procuring everything from the cloud provider, it comes as one package, which makes it easier to handle the license.
What other advice do I have?
Fortinet FortiMail is a very good product and reliable, and we find it easy to sell it.
The main benefits that Fortinet FortiMail provides to the end-user, in my opinion, include the price, on-premises solution, and ease of use.
I would rate pricing for Fortinet FortiMail as an eight.
I am a Fortinet reseller, so for the purchase process, I am directly working with Fortinet.
We are buying from the distributors, not through the AWS Marketplace or something similar.
I am recommending Fortinet FortiMail to other users. I would give Fortinet FortiMail a final rating of eight overall.
Robust Email Security with Strong Threat Protection
Experience growing with reliable email security and flexible deployment options
What is our primary use case?
We are suggesting Fortinet FortiMail to control, check, and keep all email platforms secure and monitor if malicious code is coming through emails. We are using it for these purposes.
We are a cybersecurity company. We offer security services to many different companies, and some of our clients have Fortinet FortiMail .
How has it helped my organization?
In the consulting industry, we provide consulting and services to manage security for clients who don't have an IT department with cybersecurity personnel. In these cases, they use our services to maintain security in Azure and other platforms.
What is most valuable?
The reporting features are especially valuable, including frequent reports for issues, alerts, and phishing alerts. We generate these reports weekly to check how the security is working with Fortinet FortiMail.
From our experience with Fortinet FortiMail, we have found that it's a very strong platform for ensuring company security. It is a very good product.
What needs improvement?
It can be somewhat difficult to prepare precise or very deep rules to improve security, though the product is very good.
For how long have I used the solution?
I have been using Fortinet FortiMail for about six months as we are a cybersecurity company. We offer security services to many different companies, and some of our clients have Fortinet FortiMail.
What was my experience with deployment of the solution?
The deployment was good for us. The friendly deployment process is very important for Fortinet FortiMail.
How are customer service and support?
The support for Fortinet FortiMail is excellent. On a scale from one to ten, I would give it a nine.
How would you rate customer service and support?
Positive
What other advice do I have?
I work with Fortinet FortiMail products but not with FortiGate . We don't use exactly the DLP features with Fortinet FortiMail, but we activate some rules. We are not currently exploring the DLP features.
I rate Fortinet FortiMail a ten out of ten.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Secure email management improves through advanced filtering and dynamic virus scanning
What is our primary use case?
I use Fortinet FortiMail as a firewall and an SMTP gateway for email. It works with our existing mail server on-premises to handle email filtering and security functions.
What is most valuable?
Fortinet FortiMail offers capabilities like settings for mail delivery, mail filtering, spam controls, and email bursting prevention. It also allows for email forwarding, dynamic filtering, and scanning based on virus signatures. I can set varying levels of security. The tool is flexible and provides essential features for mail security and management.
What needs improvement?
Fortinet FortiMail should keep pace with features offered by cloud-based services like Google and Microsoft Outlook. Additionally, the transition from on-premises devices to virtual appliances may be necessary as more organizations migrate email services to the cloud.
For how long have I used the solution?
I have used Fortinet FortiMail for more than five years.
How are customer service and support?
I have not contacted FortiMail support specifically, but I mentioned that support for FortiGate was delayed, and it was challenging for me to understand support questions. I did not highlight any specific issues for Fortinet FortiMail.
How would you rate customer service and support?
Neutral
What's my experience with pricing, setup cost, and licensing?
Fortinet FortiMail is considered overpriced by Indian rupee standards. My organization is not profit-making, and academic pricing is required, but it may not be available for security products like FortiGate .
What other advice do I have?
Security remains essential, and maintaining on-premises solutions may become challenging as more organizations move to cloud hosting services. Fortinet FortiMail is rated an eight for the protection and features it provides in the on-premises setup. The email security tool is considered essential despite high costs to ensure appropriate protection for data.
Offers advanced protection from email-based attacks and consistently blocks spam
What is our primary use case?
What is most valuable?
What needs improvement?
For how long have I used the solution?
What was my experience with deployment of the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
How would you rate customer service and support?
Neutral