Created on 05-13-2020 03:23 AM Edited on 09-13-2023 07:47 AM By Jean-Philippe_P
Description
This article describes how to change the inspection mode of the firewall. The FortiGate firewall can operate in two different modes: flow mode and proxy mode.
Solution
FortiOS 6.0.
From GUI.
To control the FortiGate's security profile inspection mode in FortiOS, select 'Flow-based' or 'Proxy-based' modes from System -> Settings.
set inspection-mode <flow or proxy>
end
FortiOS 6.2 to 7.0.x.
From GUI.
To control the FortiGate's security profile inspection mode per policy, select 'Flow-based' or 'Proxy-based' modes from IPv4 Policy -> Edit (a particular policy).
By default, the inspection mode of the new firewall policy is set to Flow Based.
If it is wanted to move inspection mode to proxy-based, use the below commands:
From CLI.
Use the below command to change the inspection mode to proxy mode:
config firewall policy
edit <firewall policy ID>
set inspection-mode proxy
end
This is an expected behavior, and this feature is placed for a reason.
It is possible to review this document for the new feature enhancement of 7.2.4:
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.