Fortinet Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
hubertzw
Contributor III

Conserve mode without antivirus

Hi,

 

can someone clarify one thing as I'm lost: I use only firewall policies, no antivirus, no IPS and no Application Control. With below settings what happens when FW enters kernel conserve mode? Does it accept new sessions? Does it process existing ones?

 

config system global

    set av-failopen pass                

    set av-failopen-session disable     

 

Firmware: v5.2.11,build754 (GA)

 

Thanks

1 REPLY 1
romanr
Valued Contributor

Hi,

 

there are 2 types of conserve mode

 

conserve mode - av will go into bypass

kernel conserve mode - traffic processing will get troubles, no new sessions will get established

 

Br,

Roman