Support for inspection of 802.1ah packet headers in virtual wire pairs 7.4.5

FortiGate virtual wire pairs can now read and inspect 802.1ah packet headers. Previously FortiGate virtual wire pairs could receive packets with the 802.1ah headers but not forward them. This enhancement enables virtual wire pairs to support deep packet inspection and UTM scanning of traffic with 802.1ah packet headers to provide robust protection against a wide range of cyber threats.

When UTM inspection is disabled in the firewall policy, FortiGate can forward the traffic without inspecting it. When UTM inspection is enabled, FortiGate can inspect the traffic before forwarding it. FortiGate inspects the traffic by stripping the 802.1ah header, inspecting the traffic, and then re-adding the header before forwarding the traffic.