So we came up with a process for capturing oversized emails and notifying the end user which seems to be working pretty well, so I thought I'd post it here for others in case it helps out.
This process gives the end user an immediate notification that they have received an oversized message, and then gives them the instructions to receive it with a link to their quarantine, and then tells them to DOWNLOAD the message, not release it. Overall we've had good user response to this.
(Update -- This is now a Fortinet Cookbook Article, yay!)
https://cookbook.fortinet.com/fortimail-how-to-download-oversized-email-attachments/
Jeff Roback
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.