Description
This article describes that the Policy-Based mode allows access to applications and URLs directly in policies without requiring web filters or application control profiles. It operates in default flow-based inspection mode and changing to proxy-based inspection mode is not available.
Scope
FortiGate.
Solution
The following security profiles can be applied in the NGFW policy-based mode security policy:
- AntiVirus.
- Web Filter.
- DNS Filter.
- Email Filter.
- Intrusion Prevention.
- File Filter.
Since Inline-CASB and Video filters require proxy-based inspection to be enabled, switch to Profile-based NGFW mode to use these features.
Related document:
