Flow Mode versus Proxy Mode

hexe · ‎09-08-2014

When Anti-maleware is deployed in the Flow Mode (versus Proxy Mode), what happens to the detection rate? - It dramatically decreases - it decreases slightly - stays the same - increases

AndreaSoliva · ‎02-23-2015

Hi all

it is of sure a document which does not give all answers but some will be answered.

My favour mode is still proxy mode which means as long as I do not have any performance issue I would use proxy mode. If you have problems with performance I would change to flow.

Search in google for following file:

Fortios-scanning-of-archive-compressed-files

You will find a Fortinet Document Fortios-scanning-of-archive-compressed-files.pdf. As mentioned it gives some answeres in some discussed stuff here.

have fun....

Andrea

View solution in original post

sebastan_bach · ‎12-08-2015

Hi,

I am new to Fortinet and wanted to know have we stopped publishing the flow based AV throughput on datasheets like earlier. I am sure the Flow Based AV performance nos. would be higher than the proxy based AV nos. which are present in the datasheets.

We have positioned a FG-900D to our customer and talked about enhanced performance with new Flow based scanning method so they have asked for the performance nos.

Can somebody please guide me on this.

Regards

Sebastan

ede_pfau · ‎12-09-2015

Flow based AV is handled by the IPS engine so you could take the IPS throughput figures as a first estimate. Check some older datasheets (100D, 200D) which show both figures to verify this.

Ede Kernel panic: Aiee, killing interrupt handler!

Flow Mode versus Proxy Mode

Nominate a Forum Post for Knowledge Article Creation