Testing flow based and proxy based mechanisms ?

[usmansa1]

Hi, 

I am looking for an ideas to test the proxy based and flow based mechanisms. Today in my lab environment, I configured FGT-VM and windows machine. FGT is carrying all the traffic from Windows machine to internet. First I configured FGT with flow mode and then tried to open different websites such as cnn.com, bbc.com. I also checked the load timing (loader timer extension is added in chrome) for these websites and then marked that timing.

Then I changed the inspection mode in policy to proxy mode and checked again, I didnt find any visible difference in loading time. Its quite possible that this is the lab environment and couldnt able to see the difference because of low traffic but is there any way we can actually test both inspection modes apart from features which are only used for specific inspection mode ?

[amrit]

You may need a traffic generator or simulator software to test the actual difference becuase it will be unnoticeable in the lab environment. Please refer to this link to read more about  the inspection modes https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/721410/inspection-modes