Sold by: Fortinet Inc.
Deployed on AWS
Fortinet FortiMail-VM is a complete Secure Email solution providing a single solution to protect against inbound attacks - including advanced malware -, as well as outbound threats and data loss with a wide range of top-rated security capabilities.
4.3
Overview
FortiMail is the ideal security complement to an organization's existing deployment of Microsoft Exchange, Office 365 or G-Suite. It offers a complete Secure Email Gateway (SEG) solution with a broad spectrum of top-rated security capabilities to provide a multi-layered approach to detect and prevent inbound attacks, including spam, viruses and advanced, zero-day attacks, plus address outbound content and compliance risks from data loss or business email compromise. Available in the AWS Marketplace, the virtualized FortiMail solution can scale to meet the needs of any size organization, from small to medium-sized businesses (SMB) to large enterprises, government agencies or educational institutions. Flexible deployment options including physical or virtual appliances and Software-as-a-Service (SaaS) are also available. With zero impact on the network or message traffic flow, FortiMail complements the existing, native security features of Exchange, Office 365 or G-Suite to further bolster efficacy and improve an organization's security posture. FortiMail is a customer-proven solution that has received dozens of awards for effectiveness paired with low false positive rates from firms including Virus Bulletin, NSS Labs, ICSA Labs and SE Labs. For more information on FortiMail, visit: https://www.fortinet.com/products/email-security.html
Highlights
- Powerful, built-in capabilities for spam, phishing, malware and ransomware protection. Machine learning and outbreak detection techniques powered by FortiGuard Labs address the ever-changing threat landscape.
- Advanced capabilities for data leak prevention (DLP), identity-based encryption (IBE) and message archiving to meet compliance requirements such as SOX, GLBA, HIPAA, PCI DCSS and more.
- Tight integration with FortiSandbox for deep analysis of message attachments or embedded URLs to address emerging or unknown threats. FortiSandbox is also available in the AWS marketplace.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux 8.0.0
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c4.large Recommended | $0.99 |
c4.xlarge | $2.40 |
c3.xlarge | $2.40 |
m4.xlarge | $2.40 |
m5.xlarge | $2.40 |
m4.2xlarge | $3.52 |
m5.2xlarge | $3.52 |
c3.2xlarge | $3.52 |
m4.large | $3.52 |
m5.large | $0.99 |
Dimensions summary
You pay by the hour for the software running on your chosen EC2 instance type. Pricing scales with the instance you select, not with mailbox or user counts. Two instance families are available: compute-optimized (c-series) and general-purpose (m-series). Within each family, larger sizes (large, xlarge, 2xlarge) carry higher hourly rates because they provide more compute and memory. Choose a size that matches your expected email traffic volume. Because this is pay-as-you-go, you are billed only for the hours each instance runs, with no upfront commitment.
Top-of-mind questions for buyers
You pay for FortiMail software running on that EC2 instance. The instance type sets your compute and memory. Compute-optimized c-series suits processing-heavy email scanning. General-purpose m-series balances compute and memory. Larger sizes handle higher email volumes. You choose the instance; AWS provisions the underlying hardware.
Software charges meter running instance-hours only. A fully stopped instance stops accruing FortiMail hourly fees. Stopped instances may still incur underlying AWS storage charges for attached volumes, but the software license bills for running time. There is no upfront commitment, so you pay only for active hours.
No. This pay-as-you-go listing bills only on instance-hours for your chosen EC2 type. Mailbox and user counts do not appear as billing metrics here. To handle more email traffic, you select a larger instance size, which carries a higher hourly rate. One charge drives cost: running instance-hours.
www.fortinet.com
Helpful?
Vendor refund policy
No refunds
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
- Deploy the instance
- Click on Manage in AWS Console to see the running instance and public DNS address to continue the configuration of the FortiMail-VM.
- Connect to the secured Web UI via the public DNS address: https://<public DNS address>/admin and login with the default login credentials - username:admin and the password is the AWS Instance ID value.
- For any CLI configuration/settings, SSH is required to log into the CLI.
Resources
Vendor resources
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Fortinet Inc.
By Check Point Software Technologies
By KnowBe4, Inc.
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Spam and Phishing Protection
Built-in capabilities for spam and phishing detection with machine learning and outbreak detection techniques powered by FortiGuard Labs.
Malware and Ransomware Defense
Advanced protection against malware and ransomware threats with zero-day attack detection capabilities.
Data Loss Prevention
Data leak prevention (DLP) functionality with identity-based encryption (IBE) and message archiving to address compliance requirements including SOX, GLBA, HIPAA, and PCI DSS.
Sandbox Integration
Integration with FortiSandbox for deep analysis of message attachments and embedded URLs to detect emerging and unknown threats.
Multi-Email Platform Compatibility
Compatibility with Microsoft Exchange, Office 365, and G-Suite environments with zero impact on network or message traffic flow.
Multi-Platform Email and Collaboration Security
Provides defense-in-depth security for Microsoft 365 and G-Suite, extending to collaboration environments including file sharing, chat, Slack, and Microsoft Teams
Advanced Threat Detection and Sandboxing
Utilizes advanced sandboxing and active-content analysis to scan files for malicious content and prevent phishing and malware from spreading
Comprehensive Email Scanning
Scans every inbound, outbound, and internal email to prevent threats from spreading within the organization or to customers and partners
Data Loss Prevention with Context-Aware Policies
Identifies confidential information and applies context-aware policies to prevent leakage of PCI, HIPAA, PII, and other protected content through automated workflows
Cloud-Native Deployment
Enables instant deployment through a one-click, cloud-enabled platform without requiring proxy, appliance, or endpoint agent installation
Security Orchestration and Automation
Lightweight SOAR platform that automatically analyzes, prioritizes, and orchestrates response to reported email messages to identify and quarantine malicious emails across the organization
AI and Machine Learning-Powered Threat Analysis
Machine learning and AI-powered analysis to identify high-risk phishing threats from user-reported messages and automate security workflows for threat prioritization
Crowdsourced Global Threat Intelligence
Active global threat feed powered by crowdsourced intelligence from over 10 million trained end users with three levels of human and AI-based validation from collective reporting, customer SOC teams, and dedicated threat research lab
Automated Threat Remediation
Automatic removal of phishing emails from users' inboxes at the email server level and quarantine of matching threats through Global PhishRIP capability that syncs with Microsoft 365 mail servers
Threat Pattern Clustering and Campaign Conversion
Message clustering and pattern-based grouping to identify widespread phishing attacks, with capability to convert real-world phishing attacks into simulated phishing training templates
Standard contract
No
No
No
Customer reviews
Sergio S.
Fortigate Delivers Strong Email Protection and High-Performance Firewalling
Reviewed on Apr 28, 2026
Review provided by G2
What do you like best about the product?
Fortigate provides strong email protection with excellent spam filtering, phishing defense, and data loss prevention. It also stands out as a powerful all-in-one firewall, offering high performance along with deep network visibility.
What do you dislike about the product?
The UI isn’t the most intuitive, especially for new administrators. It also requires a lot of tuning and can be quite time-consuming to set up and manage.
What problems is the product solving and how is that benefiting you?
Although there are many products that are better than FortiMail, FortiMail is still budget-friendly.
Rias Majeed
Strong email security has protected critical communications and supports efficient threat detection
Reviewed on Mar 23, 2026
Review provided by PeerSpot
What is our primary use case?
I do have a partnership with Fortinet. I have been both a partner and reseller.
What is most valuable?
The features I find most valuable in Fortinet FortiMail include its robust security and ease of use. Regarding its integrated sandboxing, I believe it adds significant value to threat detection. I would assess its high-performance mail scanning as a critical feature that contributes to its effectiveness.
What needs improvement?
I think they should improve Fortinet FortiMail on-premises by enhancing its user interface. Additional features they could have in the future would include advanced analytics capabilities. I do think they should work on their licensing model to offer more flexibility.
For how long have I used the solution?
I have been using Fortinet FortiMail in my company.
How are customer service and support?
When it comes to rating their technical support from one to ten, I would give it a solid seven. I rate their current support about seven out of ten.
Which solution did I use previously and why did I switch?
My customers are not dealing with Check Point anymore. Instead of Fortinet FortiMail, I usually propose solutions like Microsoft Exchange Online.
Which other solutions did I evaluate?
I am familiar with endpoint solutions like WatchGuard, Huntress, and Trellix. I also consider Barracuda, Juniper, and Forcepoint.
Himanshu R.
FortiMail Email Security review in real-world use
Reviewed on Mar 12, 2026
Review provided by G2
What do you like best about the product?
The MSSP module of fortimail to help onboard different domains and to make there different recipient policy.
What do you dislike about the product?
Log printing of the DLP policy to in not accurate as there is not mention that which regex got detected
What problems is the product solving and how is that benefiting you?
Fortimail is tackling most of the phishing and spam emails and also additionally solving the data loss prevention issue in the organization.
Abhimanyu Das
Targeted email filtering has reduced spam and phishing and now saves significant investigation time
Reviewed on Dec 15, 2025
Review provided by PeerSpot
What is our primary use case?
Fortinet FortiMail is primarily used for email filtering, such as managing spam and performing other related tasks. It helps by analyzing incoming emails to determine whether they are spam, based on predefined policies and rules. In addition, it monitors specific policies for both incoming and outgoing mail to detect spam or malicious activity.
What is most valuable?
The best features of Fortinet FortiMail include its techniques and tactics, which are highly effective compared to other solutions such as Microsoft 365. Although Fortinet FortiMail may not be as advanced in some aspects, it is well recognized for its strong performance in handling spam and phishing. It performs thorough mail scanning and also offers a sandboxing feature that enhances protection. Fortinet FortiMail has had a positive impact on my organization by significantly reducing unwanted email activities such as spam and phishing. It provides accurate detection and generates results that often exceed what can be achieved through manual analysis. Since deploying Fortinet FortiMail, I have observed a reduction in investigation time by at least 20 to 30 percent.
What needs improvement?
Fortinet FortiMail can be improved in terms of its dashboard, which is currently small and not visually appealing, making deeper investigations difficult. It also has issues with false positives, particularly when handling signed PDF attachments, and the whitelist/blacklist features need refinement, as clients frequently send PDF files.
For how long have I used the solution?
I have used Fortinet FortiMail for almost one year.
What do I think about the stability of the solution?
Fortinet FortiMail is stable.
What do I think about the scalability of the solution?
Fortinet FortiMail is scalable and can be expanded in large environments, but the dependency on on-premises deployment can complicate the process.
How are customer service and support?
The customer support is good.
Which solution did I use previously and why did I switch?
I am not a former user of a different solution; I am currently using other tools such as Trend Micro and Microsoft.
How was the initial setup?
complex
What about the implementation team?
consultant
What was our ROI?
I have seen a return on investment through time saved.
What's my experience with pricing, setup cost, and licensing?
The setup cost is a little bit costly.
Which other solutions did I evaluate?
I evaluated other options before choosing Fortinet FortiMail.
What other advice do I have?
I would advise others looking into using Fortinet FortiMail to consider using it. I gave this review a rating of 8.
reviewer2013930
On‑premises email protection has simplified licensing and provides reliable threat detection
Reviewed on Dec 10, 2025
Review provided by PeerSpot
What is our primary use case?
Fortinet FortiMail is almost the last product that I am able to use in the customer's environment because all of the other vendors are moving to the Microsoft or Google environment, and as I remember, two or three vendors have on-premises solutions for mail protection. That is why we use it, and our customers appreciate it because it is easy to use and has no user device license. It has only a simple device license.
What is most valuable?
Fortinet FortiMail has valuable features such as on-premises deployment and click protection, and it is working properly. This is the most important part for us, and we experience this without a lot of false positive troubleshooting because it is important for our technical team.
We use Fortinet FortiMail sandbox integration, but nowadays I am a CISO, so I am not working closely with this product as I am leading projects. However, our customers are using sandboxing also to protect against known and unknown viruses.
The high performance mail scanning of Fortinet FortiMail works fine, but sometimes it does not, depending on the hardware that you are buying. If you are buying a low-cost product, the speed is low. If you choose a bigger product, it will be faster. The main goal is that if you do not need high speed, it is enough to buy the lowest box. As I mentioned, you do not want to buy a user license; it is working, but it has a lower traffic throughput, and the performance is lower, so that is why we appreciate it.
What needs improvement?
In my opinion, points for improvement for Fortinet FortiMail include sometimes the speed and fine-tuning the false positive problems, especially with the signed PDF attachments and the whitelist and blacklist.
I understand that it is mostly with PDF formats, but in the whole picture, Fortinet FortiMail is a good product.
For how long have I used the solution?
I have been working with Fortinet FortiMail for more than ten years.
What do I think about the stability of the solution?
From one to ten, I would rate the stability of Fortinet FortiMail as a nine.
What do I think about the scalability of the solution?
The scalability of Fortinet FortiMail depends on whether you are buying a virtualized license, which allows for a scalable pay-as-you-go model, or if you are buying a box, in which case you can only buy a new one. It is a trade-up program only, but many customers opt for the lowest box because the virtual machine version is almost enough for most customers.
How are customer service and support?
I would rate technical support from Fortinet as a seven. However, for Fortinet FortiMail support, I would rate it as an eight, but for example, FortiGate is a six because it depends on the people on the other side. Mainly, they are focusing on Fortinet FortiMail and FortiAnalyzer, where the support engineers are very good. If you are calling about a problem with your FortiGate, sometimes it is hard to find the best engineer.
How was the initial setup?
The initial setup for Fortinet FortiMail is easy if you know what needs to be done; however, if you have no experience, it will be hard because you need to know how it works.
Which other solutions did I evaluate?
In my opinion, Fortinet FortiMail can be compared to cloud API solutions or perhaps Cisco, but we are working only with Fortinet FortiMail for mail protection because it is working well for us and our customers. If you are buying a good Microsoft license, maybe P5 that includes email security, that is possibly the main competitor because if you are procuring everything from the cloud provider, it comes as one package, which makes it easier to handle the license.
What other advice do I have?
Fortinet FortiMail is a very good product and reliable, and we find it easy to sell it.
The main benefits that Fortinet FortiMail provides to the end-user, in my opinion, include the price, on-premises solution, and ease of use.
I would rate pricing for Fortinet FortiMail as an eight.
I am a Fortinet reseller, so for the purchase process, I am directly working with Fortinet.
We are buying from the distributors, not through the AWS Marketplace or something similar.
I am recommending Fortinet FortiMail to other users. I would give Fortinet FortiMail a final rating of eight overall.