Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
armagandarilmaz
New Contributor

Created on ‎10-10-2018 12:28 PM

Why does application control use flow based inspection mode?

Hi,

 

I really wonder why application control uses flow-based inspection rather than proxy-based. Is there anyone to explain that or share some documents related to that.

6533
0 Kudos
4 REPLIES 4
bommi
Contributor III

Created on ‎10-10-2018 12:45 PM

Application control is build on top of the ips-engine and the ips-engine itself is flow-mode only.

NSE 4/5/7

NSE 4/5/7
2933
0 Kudos
armagandarilmaz
New Contributor
In response to bommi

Created on ‎10-10-2018 01:06 PM

Okay I know that, but is there any specific reason to do that? Can the reason is that flow-based doesn’t operate using built-in protocol states?

2933
0 Kudos
tanr
Valued Contributor II
In response to armagandarilmaz

Created on ‎10-10-2018 01:18 PM

A good overview is "Life of a Packet" - http://help.fortinet.com/fos50hlp/56/Content/FortiOS/fortigate-life-of-packet/LOP_intro.htm, especially the sections on UTM/NGFW packet flow for flow-based and proxy-based inspection.

 

2929
0 Kudos
armagandarilmaz
New Contributor
In response to tanr

Created on ‎10-10-2018 02:11 PM

Thank you for your help.

2929
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.