Skip to main content
hexe
hexe
New Member
September 8, 2014
Solved

Flow Mode versus Proxy Mode

  • September 8, 2014
  • 21 replies
  • 57413 views
When Anti-maleware is deployed in the Flow Mode (versus Proxy Mode), what happens to the detection rate? - It dramatically decreases - it decreases slightly - stays the same - increases
    Best answer by AndreaSoliva

    Hi all

     

    it is of sure a document which does not give all answers but some will be answered.

     

    My favour mode is still proxy mode which means as long as I do not have any performance issue I would use proxy mode. If you have problems with performance I would change to flow.

     

    Search in google for following file:

     

    Fortios-scanning-of-archive-compressed-files

     

    You will find a Fortinet Document Fortios-scanning-of-archive-compressed-files.pdf. As mentioned it gives some answeres in some discussed stuff here.

     

    have fun....

     

    Andrea

    21 replies

    Show previous replies
    Nihas
    Nihas
    New Member
    October 10, 2014
    Thanks for the clarification. :)
    AndreaSoliva
    AndreaSolivaAnswer
    New Member
    February 23, 2015

    Hi all

     

    it is of sure a document which does not give all answers but some will be answered.

     

    My favour mode is still proxy mode which means as long as I do not have any performance issue I would use proxy mode. If you have problems with performance I would change to flow.

     

    Search in google for following file:

     

    Fortios-scanning-of-archive-compressed-files

     

    You will find a Fortinet Document Fortios-scanning-of-archive-compressed-files.pdf. As mentioned it gives some answeres in some discussed stuff here.

     

    have fun....

     

    Andrea

    sebastan_bach
    sebastan_bach
    New Member
    December 8, 2015

    Hi, 

    I am new to Fortinet and wanted to know have we stopped publishing the flow based AV throughput on datasheets like earlier. I am sure the Flow Based AV performance nos. would be higher than the proxy based AV nos. which are present in the datasheets. 

     

    We have positioned a FG-900D to our customer and talked about enhanced performance with new Flow based scanning method so they have asked for the performance nos. 

     

    Can somebody please guide me on this. 

     

    Regards

     

    Sebastan

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    December 9, 2015

    Flow based AV is handled by the IPS engine so you could take the IPS throughput figures as a first estimate. Check some older datasheets (100D, 200D) which show both figures to verify this.

    Terms & ConditionsAccessibility statement