Skip to main content
brhunt
brhunt
New Member
November 22, 2022
Question

Deep Packet Inspection statistics

  • November 22, 2022
  • 2 replies
  • 2676 views

Hello,

 

I was working with a FortiNet engineer a while back and while he was bouncing around the GUI he showed me a graph that showed how many packets were being scanned with DPI (versus total packets).

 

I have never been able to find my way back to that graph. 

 

Does anyone know how to display any kind of t DPI statistics?

 

Thanks.

 

Bryan Hunt

2 replies

gfleming
Staff
gfleming
Staff
November 23, 2022

Was this on the FortiGate or on FortiAnalyzer?

brhunt
brhuntAuthor
New Member
November 23, 2022

Graham,

 

I *believe* that it was on the FortiGate itself.  But it was a while back, so not positive.

 

The "end in mind" is to just prove to myself (and the customer) that DPI is actually opening encrypted packets and inspecting payloads.  Has to be a way to do that, right?

 

Thanks.

 

Bryan Hunt

gfleming
Staff
gfleming
Staff
November 23, 2022

To be honest I'm not sure of any graphs that show packets scanned with DPI vs not. Perhaps some other members know the answer.

 

But if youre just trying to show DPI is working you can check other places as well. On the client browser you can verify the certificate that is used to protect the connection. It should show your internal cert if DPI is active.

brhunt
brhuntAuthor
New Member
November 23, 2022

Thanks Graham, I'll give that a try.

I'm starting to believe that it might have been on a FortiCloud Summary Report.  Top Application Categories, unscanned packets.   

Terms & ConditionsAccessibility statement