Question
File size limitation during file filter processing
Hello. I noticed a pattern in the Fortigate file filter (both for proxy-based mode and flow-based mode). Files larger than 10 MB are not inspected by the file filter. SSL inspection is enabled in the deep inspection mode. Traffic is processed by the device according to explicit proxy policies. Also in the file filter event logs, there are events of files less than 10 MB in size that were inspected.
Has anyone experienced this behavior? Is this normal file filter operation on Fortigate devices?
In the “print tablesize” output, I could not find any indicators that explicitly set this limitation.
