Skip to main content
hubertzw
New Member
April 16, 2018
Question

Conserve mode without antivirus

  • April 16, 2018
  • 1 reply
  • 5544 views

Hi,

 

can someone clarify one thing as I'm lost: I use only firewall policies, no antivirus, no IPS and no Application Control. With below settings what happens when FW enters kernel conserve mode? Does it accept new sessions? Does it process existing ones?

 

config system global

    set av-failopen pass                

    set av-failopen-session disable     

 

Firmware: v5.2.11,build754 (GA)

 

Thanks

    1 reply

    romanr
    New Member
    April 17, 2018

    Hi,

     

    there are 2 types of conserve mode

     

    conserve mode - av will go into bypass

    kernel conserve mode - traffic processing will get troubles, no new sessions will get established

     

    Br,

    Roman

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!