Which of the following is default inspection mode in FortiOS 5.6?
a. Proxy-based
b. Flow-based with NGFW mode set to profile- based
How does NGFW policy-based mode differ from profile-based mode?
a. Policy-based flow inspection supports web profile overrides.
b. Policy-based flow inspection defines URL filters directly under the firewall policy.
Which of the following statements about proxy-based web filtering is true?
a. Requires more resources than flow-based
b. Transparently analyzes the TCP flow of the traffic
Inspection modes
Flow based Proxy
Policy based Route based
NGFW mode
Proxy Flow-based
Profile-based Policy-based
NGFW mode only applicable to Proxy inspection mode
Default inspection mode in FortiOS 5.6
Flow-based Profile-based
Proxy Policy-based
Requires administrators to create and configure application control and web filtering profiles. then apply them to the selected firewall policy.
Profile-based
Policy-based
Allows administrators to apply application control and web filtering directly to a firewall policy, without having to configure application control and web filtering profiles.
Requires administrators to apply a single SSL/SSH inspection profile to all firewall policies.
Antivirus configuration is always profile-based, regardless of the NGFW mode selection
?
Flow-based
Proxy
Default inspection mode in FortiOS 5.6 Uses single-pass direct filter approach (DFA) pattern matching to identify possible attacks or threats File is scanned on a flow basis as it passes through FortiGate Requires fewer processing resources Faster scanning
More thorough inspection Adds latency -Complete content is scanned Two TCP connections - From client to FortiGate acting as proxy server -From FortiGate to server Communication is terminated on Layer 4 More resource intensive Provides a higher level of threat protection
Proxy-based
A. Proxy-based.
B. Flow-based with NGFW mode set to profile-based.
A. Policy-based flow inspection supports web profile overrides.
B. Policy-based flow inspection defines URL filters directly under the firewall policy.
A. Requires more resources than flow-based
B. Transparently analyzes the TCP flow of the traffic
Please wait - loading…