New Member

Question

DLP Sensor not seen in profile mode in Flow mode 5.6

Forum|Forum|8 years ago
March 21, 2018
11 replies
17066 views

Hi all,

We want to implement basic file-blocking from certain URL categories. The device is operating in profile mode in flow mode. Under system for feature visibility we are not finding DLP sensor. On the Cli tried creating a new DLP sensor and "set flow-mode enable" command but still not able to view the DLP sensor in the Gui.

We are able to see DLP sensor when using proxy mode. However, as per documentation DLP is supported on Flow mode as well not sure how to turn it on. We don't want to use proxy mode for performance implications.

Any help would be greatly appreciated.

Sebastan

Fullmoon

New Member

https://forum.fortinet.com/tm.aspx?m=139062

sebastan_bachAuthor

New Member

Hi,

I checked the only way to get to see the DLP sensor in GUI is by setting the whole device is proxy mode. Once that is done then we have the option for setting the DLP sensor in flow mode. However, since the device is in proxy mode the default proxy profile is enabled and that cannot be disabled.

Because of this when I try to enable the anti-virus profile and though I set the AV profile to flow mode it will not let me use that profile in the rule unless i set the AV profile in proxy mode.

looks like if the device is set to proxy mode then all the profiles need to be in proxy mode only. But not sure then how it's letting me use the DLP sensor in flow mode.

Does anyone have any clue into this.

Regards

Sebastan

Fullmoon

New Member

hi, my fortigate vm is running on NAT (Proxy mode), I was able to convert my dlp profile frm proxy to flow based mode. below are the commands

FortiGate-VM64 # config dlp sensor

FortiGate-VM64 (sensor) # edit default

FortiGate-VM64 (default) # set flow-based

enable     Enable flow-based DLP.

disable    Disable flow-based DLP.

FortiGate-VM64 (default) # get

name                : default

comment             : Default sensor.

replacemsg-group    :

filter:

dlp-log             : enable

nac-quar-log        : disable

flow-based          : disable

full-archive-proto  :

summary-proto       :

FortiGate-VM64 (default) # set flow-based enable

Johny_Henks

New Member

I have the same problem

Sign up

Login with SSO

Login to the community

Login with SSO