Hi sistemas, thanks for raising this issue.
The reason that the configs didn't save is because in feature set "Flow-based" mode, it does not support FortiGuard Spam Filtering setttings, HELO DNS Lookup and Return Email DNS Check.
This is captured in the table here:
In 7.2.1 and above, the CLI has been updated so that when feature set is set to flow-based, the unsupported settings will be hidden. However, the GUI has not made changes yet. We do have an internal bug logged against that though.
FortiAnswers is the space dedicated to FortiSASE and FortiOS questions and suggestions.
1 Person is following this question.