Inspection mode

[sims]

Hi,

Firewall is in   flow mode .

If I change the antivirus inspection mode to proxy mode what is pros and cons 

Thanks 

[Markus · Accepted solution]

You mean I just switch  from  flow to proxy ? YES Sorry . I did not get the above part . When we do feature switch  from Proxy to flow  how come the policy ends up with  no utm profiles. If you decide to switch back to flow, you have also to update all policies with proxy profiles (e.g. AV) back to flow profiles. The policy will not loose all UTM, only the proxy based profiles, as they are "incompatible" in flow mode.

[Markus · Accepted solution]

Hi, Not at all, from flow to proxy, you can use profiles in flow or proxy mode. In flow mode, you can only use flow profiles. If you are in proxy mode and have, let's say you have a AV proxy mode profile in a policy, and want to switch back to flow, this policy will loose the AV profile assigned and you have to "manual" select a AV flow profile again. Hope this clarifies it better :)

[sims]

Hi,

it clarifies everything  required .

Just to conclude everything ,

Before 6.4    We have to switch the FW to proxy mode  . After switching  we can use profiles in flow or proxy mode.

and want to switch back to flow, this policy will loose the AV profile assigned and you have to "manual" select a AV flow profile

From 6.4  We don't need to switch  to PROXY mode . Just change the  flow mode  to  in the profile and assign the profile in the policy 

Please confirm 

Appreciate your help and patience 

Thanks 

[Markus · Accepted solution]

Exactly... and from 6.4, the proxy/flow mode is selected per policy, yes (you can mix proxy and flow policies)