Anyone knows what is the right ans for this ?
I think it should be 2 or 4 .
NGFW policy-based application filtering:
-the IPS security policy is the only security option you can apply to security policy with action set to Accept
-After IPS identified the application it adds an entry to the dynamic ISDB table
-Fortigate wil drop all packets until the application is identified
-After the application has been identified , the kernel uses only the layer 4 headers to match the traffic.
