policy-based mode

[akhaled]

I need to know what is limitation for using policy-based mode at FortiGate

[AEK]

Here are some limitations:

- Policy based mode supports fewer application signatures than profile based mode

- In policy based mode you have only Central NAT, while in profile based you can use Central NAT or in-policy NAT

- As far as I remember, WAF (or virtual server configuration) is not available in policy based mode (please double check)

[hbac]

Hi @akhaled,

Please refer to https://community.fortinet.com/t5/FortiGate/Technical-Tip-Profile-based-policies-vs-Policy-based-pol...

Regards,