FortiMail-400F Email Security Appliance
Fortinet FortiMail-400F is a high-performance, 1U rack-mount email security appliance designed for small to midsized organizations. This bundle combines the FortiMail-400F hardware with 3 years of 24×7 FortiCare support and FortiGuard Enterprise ATP services, providing layered protection against spam, malware, phishing, advanced threats, and other email-borne attacks. The FortiMail-400F supports up to 100 protected email domains, up to 400 local mailboxes, and FortiGuard Enterprise ATP processing of up to 150,000 messages per hour under Fortinet’s published test conditions
Description
The Fortinet FortiMail-400F is an enterprise-class email security gateway designed to protect an organization’s email infrastructure from the growing range of threats delivered through email.
It provides multiple layers of email protection, including antispam, antivirus, advanced threat protection, email-content security, authentication controls, and data-loss prevention capabilities. FortiMail can be deployed to secure email environments for organizations operating their own mail infrastructure as well as in conjunction with supported cloud email environments.
The supplied bundle adds 3 years of 24×7 FortiCare and FortiGuard Enterprise ATP, giving organizations both technical support and cloud-based threat intelligence and advanced threat protection services for the subscription period.
Key Features
- Brand: Fortinet
- Product Family: FortiMail
- Model: FortiMail-400F
- Product Type: Email Security Appliance + Service Bundle
- Form Factor: 1U Rack Mount
- FortiCare: 24×7 Support
- Support Term: 3 Years
- FortiGuard: Enterprise ATP
- Subscription Term: 3 Years
- Network Interfaces: 4 × 10/100/1000 RJ45
- Storage: 2 × 1 TB
- Memory: 8 GB
- Protected Email Domains: Up to 100
- Server-Mode Mailboxes: Up to 400
- Data Loss Prevention: Supported
- Centralized Quarantine: Supported
- Office 365 API Integration: Optional
- Enterprise ATP Performance: Up to 150,000 messages/hour
- Email Routing Performance: Up to 250,000 messages/hour
- FortiGuard Antispam + Virus Outbreak: Up to 200,000 messages/hour
Advanced Email Security
Email remains one of the most common attack vectors for organizations. FortiMail is designed to provide layered protection against threats such as:
- Spam
- Phishing
- Malware
- Ransomware
- Business Email Compromise (BEC)
- Malicious attachments
- Malicious URLs
- Advanced threats
- Email-based data leakage
Fortinet describes FortiMail as protecting organizations against the full spectrum of email threats, including phishing, ransomware, zero-day threats, and business email compromise.
FortiGuard Enterprise ATP
The included FortiGuard Enterprise ATP (Advanced Threat Protection) subscription provides an additional layer of protection against sophisticated email threats.
Fortinet’s published FortiMail-400F specifications rate Enterprise ATP processing at up to 150,000 messages per hour, based on Fortinet’s stated test methodology and message size.
Enterprise ATP protection is designed to help organizations identify threats that may evade conventional spam and antivirus defenses.
This is particularly important for attacks involving:
- Sophisticated phishing
- Unknown malware
- Malicious attachments
- Targeted attacks
- Zero-day threats
- Advanced email-borne malware
Antivirus Protection
FortiMail provides antivirus inspection as part of its email security capabilities.
Incoming and outgoing email can be scanned to identify potentially malicious content before it reaches users or external recipients.
This helps reduce exposure to malware distributed through:
- Email attachments
- Embedded content
- Malicious files
- Compromised messages
Antispam Protection
The FortiMail-400F can help identify and filter unwanted email traffic.
FortiGuard Antispam and Virus Outbreak services provide continuously updated threat intelligence to help identify spam campaigns and emerging email-based threats.
Fortinet rates the FortiMail-400F for up to 200,000 messages per hour with FortiGuard Antispam + Virus Outbreak enabled under its published test conditions.
Phishing & Business Email Compromise Protection
FortiMail provides security controls designed to reduce the risk associated with deceptive email messages.
This can help organizations defend against attempts to:
- Impersonate executives
- Steal credentials
- Redirect payments
- Obtain sensitive information
- Deliver malicious links
- Distribute fraudulent messages
This makes FortiMail particularly valuable for organizations where email is a critical business communication channel.
Data Loss Prevention
The FortiMail-400F supports Data Loss Prevention (DLP) capabilities.
DLP can help organizations identify and control sensitive information transmitted through email.
Potential use cases include controlling the transmission of:
- Confidential documents
- Financial information
- Customer information
- Business records
- Sensitive corporate data
Fortinet lists DLP as supported on the FortiMail-400F.
Centralized Quarantine
The FortiMail-400F supports centralized quarantine, allowing administrators to manage quarantined messages from a centralized location.
This can help security and email administrators:
- Review suspicious messages
- Manage quarantined email
- Release legitimate messages
- Monitor email-security events
- Reduce the risk of users interacting with malicious content
Email Routing
FortiMail can also operate as an email security gateway and mail-routing platform.
Fortinet specifies the FortiMail-400F for up to 250,000 email messages per hour for email routing under the published test conditions.
This makes the platform suitable for organizations requiring high-volume email processing in a dedicated security appliance.
Email Domain Support
The FortiMail-400F supports up to 100 protected email domains according to Fortinet’s current product specifications.
This makes it suitable for:
- Medium-sized businesses
- Large departments
- Multi-domain organizations
- Educational institutions
- Government organizations
- Organizations with multiple subsidiaries or brands
Local Mailbox Support
When deployed in server mode, the FortiMail-400F supports up to 400 local mailboxes according to Fortinet’s published specifications.
This allows the appliance to support organizations requiring local mailbox functionality in addition to email-security gateway capabilities.
Network Connectivity
The FortiMail-400F provides four 10/100/1000 Ethernet interfaces using RJ45 connectors.
These Gigabit Ethernet ports provide flexible connectivity for integration into existing network infrastructure.
Typical deployment configurations can include connections toward:
- Internal email servers
- Internet gateways
- DMZ networks
- Corporate LAN infrastructure
- External email systems
Fortinet’s current data sheet lists four Gigabit RJ45 interfaces for the 400F.
Storage
The FortiMail-400F includes 2 × 1 TB storage drives.
The appliance supports software-based RAID configurations, providing options for storage management according to the deployment requirements.
Storage can support email-security functions such as:
- Quarantine
- Email processing
- Logs
- System data
- Security-related information
8 GB Memory
The FortiMail-400F is equipped with 8 GB of memory, supporting the appliance’s email processing and security workloads.
1U Rack-Mount Design
The FortiMail-400F uses a 1U rack-mount form factor, making it suitable for professional data centers, server rooms, and network-security racks.
Its compact design helps organizations deploy dedicated email security without consuming significant rack space.
Physical Dimensions
- Height: 44 mm
- Width: 438 mm
- Depth: 416 mm
- Weight: Approximately 11 kg
Power
The FortiMail-400F operates from 100–240V AC, 50–60 Hz power sources.
The standard configuration uses a single power supply, with a dual power-supply option available according to Fortinet’s specifications.
Email Security Performance
Fortinet’s published performance figures for the FortiMail-400F include:
| Performance Metric | FortiMail-400F |
|---|---|
| Email Routing | Up to 250,000 messages/hour |
| FortiGuard Antispam + Virus Outbreak | Up to 200,000 messages/hour |
| FortiGuard Enterprise ATP | Up to 150,000 messages/hour |
| Cloud API Email Routing | Up to 83,000 messages/hour |
| Cloud API Antispam + Virus Outbreak | Up to 72,000 messages/hour |
| Cloud API Enterprise ATP | Up to 58,000 messages/hour |
These figures are vendor-published values and are based on Fortinet’s stated testing methodology, including a 100 KB message size and conditions without queuing. Actual performance depends on configuration, traffic, security features, and message characteristics.
24×7 FortiCare Support – 3 Years
This bundle includes 3 years of 24×7 FortiCare support.
The 24×7 support entitlement is designed for organizations that require assistance with their FortiMail infrastructure outside normal business hours.
Depending on the applicable FortiCare service entitlement, support can provide access to Fortinet technical assistance and hardware-related services.
The three-year term provides extended support coverage without requiring annual renewal during the initial contract period.
FortiGuard Security Services – 3 Years
The bundle also includes 3 years of FortiGuard Enterprise ATP.
FortiGuard services provide Fortinet’s continuously updated security intelligence for detecting emerging threats.
The subscription helps keep the FortiMail security environment updated against evolving email threats throughout the subscription period.
Microsoft 365 & Cloud Email Integration
FortiMail supports integration with cloud email environments, including Microsoft 365 and Google Workspace-related deployments, with availability depending on the specific integration and licensing configuration.
Fortinet’s current FortiMail documentation lists Microsoft 365 and Google Workspace email API integration as an available capability, with some features/options dependent on the model and deployment.
FortiMail Deployment Modes
FortiMail can be deployed in different email-security architectures depending on organizational requirements.
Common deployment scenarios include:
Gateway Mode
FortiMail operates as an email security gateway positioned between the Internet and the organization’s mail infrastructure.
Server Mode
FortiMail can provide local mailbox capabilities while delivering email security functions.
Transparent Mode
Can be integrated into existing email environments with minimal changes to the network architecture, depending on the deployment requirements.
The appropriate deployment mode depends on the organization’s email architecture and security requirements.
Suitable Applications
Small to Midsized Businesses
Provides dedicated enterprise email security in a 1U appliance.
Financial Organizations
Helps protect business email from phishing, malware, fraud, and data leakage.
Government & Public Sector
Provides centralized protection for email infrastructure and multiple domains.
Educational Institutions
Protects large volumes of email while providing centralized security management.
Multi-Domain Organizations
Support for up to 100 protected email domains makes the 400F suitable for organizations operating multiple domains.
Data Centers
The 1U rack-mount design makes the appliance appropriate for professional server-room and data-center deployments.
Key Benefits
Comprehensive Email Protection
Combines multiple layers of email security to protect against spam, malware, phishing, and advanced threats.
Advanced Threat Protection
FortiGuard Enterprise ATP provides advanced protection against sophisticated email threats.
3-Year Security Coverage
Includes three years of FortiGuard Enterprise ATP subscription.
24×7 Technical Support
Includes three years of 24×7 FortiCare support.
High Email Processing Capacity
Supports up to 250,000 routed messages per hour under Fortinet’s published testing conditions.
100 Protected Domains
Supports up to 100 protected email domains.
Enterprise-Grade Storage
Includes 2 × 1 TB drives with software RAID support.
Dedicated Rack Appliance
The 1U form factor fits standard enterprise rack deployments.
Data Loss Prevention
Provides DLP capabilities for organizations concerned with sensitive information leaving through email.
Centralized Quarantine
Provides centralized management of quarantined email.
Technical Specifications
| Specification | Details |
|---|---|
| Manufacturer | Fortinet |
| Product Family | FortiMail |
| Model | FortiMail-400F |
| Product Type | Email Security Appliance + Service Bundle |
| Form Factor | 1U Rack Mount |
| Ethernet Interfaces | 4 × 10/100/1000 RJ45 |
| Memory | 8 GB |
| Storage | 2 × 1 TB |
| RAID | Software RAID 0/1 |
| Protected Email Domains | Up to 100 |
| Server Mode Mailboxes | Up to 400 |
| DLP | Supported |
| Centralized Quarantine | Supported |
| Office 365 API Integration | Optional |
| Email Routing | Up to 250,000 messages/hour |
| FortiGuard Antispam + Virus Outbreak | Up to 200,000 messages/hour |
| FortiGuard Enterprise ATP | Up to 150,000 messages/hour |
| Power Input | 100–240V AC, 50–60 Hz |
| Power Supply | Single; dual optional |
| Dimensions | 44 × 438 × 416 mm |
| Weight | Approx. 11 kg |
| FortiCare | 24×7 |
| FortiCare Term | 3 Years |
| FortiGuard Service | Enterprise ATP |
| FortiGuard Term | 3 Years |
Specifications are based on Fortinet’s current FortiMail 400F documentation.
What’s Included
The bundle consists of:
- FortiMail-400F hardware appliance
- 3-Year 24×7 FortiCare support
- 3-Year FortiGuard Enterprise ATP
- Applicable FortiMail software functionality
- Hardware suitable for 1U rack installation
Note: The subscription/service portion is tied to the FortiMail-400F platform and should be activated according to the applicable Fortinet licensing and registration process.
Product Summary
The Fortinet FortiMail-400F Hardware + 3-Year 24×7 FortiCare and FortiGuard Enterprise ATP Bundle is a comprehensive email-security solution for organizations requiring strong protection against modern email-based threats.
With support for up to 100 protected domains, 400 local mailboxes, 250,000 routed messages per hour, and 150,000 FortiGuard Enterprise ATP messages per hour, the FortiMail-400F provides the performance and functionality required by small to midsized organizations.
Its combination of antispam, antivirus, advanced threat protection, phishing defense, data-loss prevention, centralized quarantine, email routing, and FortiGuard threat intelligence, together with 3 years of 24×7 FortiCare, makes it a strong choice for protecting business-critical email infrastructure.



