Fortinet black logo

Cookbook

Inspection mode feature comparison

Copy Link
Copy Doc ID fed12558-14f5-11e9-b86b-00505692583a:922096
Download PDF

Inspection mode feature comparison

The following table shows which UTM profile can be configured on a flow mode or proxy mode inspection policy. Some UTM profiles are hidden in the GUI, but can be configured using the CLI.

Flow Mode Inspection Policy

Proxy Mode Inspection Policy

UTM Profile

GUI

CLI

GUI

CLI

Antivirus Yes (2) Yes (2) Yes Yes
Application Control Yes Yes Yes Yes
CIFS Inspection No No No (1) Yes
Data Leak Prevention No Yes (3) Yes Yes
DNS Filter Yes Yes Yes Yes
Email Filter No Yes (4) Yes Yes
ICAP No No Yes Yes
Intrusion Prevention System Yes Yes Yes Yes

SSL/SSH Inspection

Yes

Yes

Yes

Yes

VoIP

Yes

Yes

Yes

Yes

Web Filter

Yes (5)

Yes (5)

Yes

Yes

Web Application Firewall

No

No

Yes

Yes

  1. CIFS inspection cannot be configured via GUI.
  2. Some Antivirus features are not supported in flow mode inspection. See Inspection mode differences for antivirus.
  3. Some Data Leak Prevention features are not supported in Flow mode inspection. See Inspection mode differences for data leak prevention.
  4. Some Email filter features are not supported in Flow mode inspection. See Inspection mode differences for email filter.
  5. Some Web Filter features are not supported in Flow mode inspection. See Inspection mode differences for web filter.

Inspection mode feature comparison

The following table shows which UTM profile can be configured on a flow mode or proxy mode inspection policy. Some UTM profiles are hidden in the GUI, but can be configured using the CLI.

Flow Mode Inspection Policy

Proxy Mode Inspection Policy

UTM Profile

GUI

CLI

GUI

CLI

Antivirus Yes (2) Yes (2) Yes Yes
Application Control Yes Yes Yes Yes
CIFS Inspection No No No (1) Yes
Data Leak Prevention No Yes (3) Yes Yes
DNS Filter Yes Yes Yes Yes
Email Filter No Yes (4) Yes Yes
ICAP No No Yes Yes
Intrusion Prevention System Yes Yes Yes Yes

SSL/SSH Inspection

Yes

Yes

Yes

Yes

VoIP

Yes

Yes

Yes

Yes

Web Filter

Yes (5)

Yes (5)

Yes

Yes

Web Application Firewall

No

No

Yes

Yes

  1. CIFS inspection cannot be configured via GUI.
  2. Some Antivirus features are not supported in flow mode inspection. See Inspection mode differences for antivirus.
  3. Some Data Leak Prevention features are not supported in Flow mode inspection. See Inspection mode differences for data leak prevention.
  4. Some Email filter features are not supported in Flow mode inspection. See Inspection mode differences for email filter.
  5. Some Web Filter features are not supported in Flow mode inspection. See Inspection mode differences for web filter.