Flow-Based:(performance) NGFW Mode: a. Profile-Based Security Profiles > Antivirus> Scan Mode > Quick|Full >> Detect Viruses > Block|monitor WebFilter DNS Filter App Control IPS FGT Compliance SSH inspection WebRating Ovverides Custom Signatures b. Policy-Based Security Profiles > Antivirus> Scan Mode > Quick|Full >> Detect Viruses > Block|monitor DNS Filter IPS FGT Compliance SSH Inspection WebRating Ovverides Custom Signatures Proxy Based(more thorough) Security Profiles > Antivirus> Detect Viruses > Block|monitor WebFilter DNS Filter App Control IPS FGT Compliance SSH Inspection WebRating Ovverides Web Profile Overides Custom Signatures Antivirus: Antivirus Scan.Grayware scan.HeuristicScan Heuristic Scan modes (via cli): pass/block/disable Databases: Normal/Extended/Extreme(on some FGTs) Quick Scan only in Flow Based with compact signature DB Flow based inspection fast-performance No delay to file excpet last packet. If virus detect => connection reset. Large files only log.