Fortinet white logo
Fortinet white logo

Cookbook

Inspection mode feature comparison

Inspection mode feature comparison

The following table shows which UTM profile can be configured on a flow mode or proxy mode inspection policy. Some UTM profiles are hidden in the GUI, but can be configured using the CLI.

Flow Mode Inspection Policy

Proxy Mode Inspection Policy

UTM Profile

GUI

CLI

GUI

CLI

Antivirus

Yes (2)

Yes (2)

Yes

Yes

Application Control

Yes

Yes

Yes

Yes

CIFS Inspection

No

No

No (1)

Yes

Data Leak Prevention

No

Yes (3)

No

Yes

DNS Filter

Yes

Yes

Yes

Yes

Email Filter

No

Yes (4)

Yes

Yes

ICAP

No

No

Yes

Yes

Intrusion Prevention System

Yes

Yes

Yes

Yes

SSL/SSH Inspection

Yes

Yes

Yes

Yes

VoIP

Yes

Yes

Yes

Yes

Web Filter

Yes (5)

Yes (5)

Yes

Yes

Web Application Firewall

No

No

Yes

Yes

  1. CIFS inspection cannot be configured via GUI.
  2. Some Antivirus features are not supported in flow mode inspection. See Inspection mode differences for antivirus.
  3. Some Data Leak Prevention features are not supported in Flow mode inspection. See Inspection mode differences for data leak prevention.
  4. Some Email filter features are not supported in Flow mode inspection. See Inspection mode differences for email filter.
  5. Some Web Filter features are not supported in Flow mode inspection. See Inspection mode differences for web filter.

Inspection mode feature comparison

Inspection mode feature comparison

The following table shows which UTM profile can be configured on a flow mode or proxy mode inspection policy. Some UTM profiles are hidden in the GUI, but can be configured using the CLI.

Flow Mode Inspection Policy

Proxy Mode Inspection Policy

UTM Profile

GUI

CLI

GUI

CLI

Antivirus

Yes (2)

Yes (2)

Yes

Yes

Application Control

Yes

Yes

Yes

Yes

CIFS Inspection

No

No

No (1)

Yes

Data Leak Prevention

No

Yes (3)

No

Yes

DNS Filter

Yes

Yes

Yes

Yes

Email Filter

No

Yes (4)

Yes

Yes

ICAP

No

No

Yes

Yes

Intrusion Prevention System

Yes

Yes

Yes

Yes

SSL/SSH Inspection

Yes

Yes

Yes

Yes

VoIP

Yes

Yes

Yes

Yes

Web Filter

Yes (5)

Yes (5)

Yes

Yes

Web Application Firewall

No

No

Yes

Yes

  1. CIFS inspection cannot be configured via GUI.
  2. Some Antivirus features are not supported in flow mode inspection. See Inspection mode differences for antivirus.
  3. Some Data Leak Prevention features are not supported in Flow mode inspection. See Inspection mode differences for data leak prevention.
  4. Some Email filter features are not supported in Flow mode inspection. See Inspection mode differences for email filter.
  5. Some Web Filter features are not supported in Flow mode inspection. See Inspection mode differences for web filter.