Web filtering

Which of the following is default inspection mode in FortiOS 5.6?

How does NGFW policy-based mode differ from profile-based mode?

Which of the following statements about proxy-based web filtering is true?

Inspection modes

NGFW mode

Default inspection mode in FortiOS 5.6

Requires administrators to create and configure application control and web filtering profiles. then apply them to the selected firewall policy.

Allows administrators to apply application control and web filtering directly to a firewall policy, without having to configure application control and web filtering profiles.

Requires administrators to apply a single SSL/SSH inspection profile to all firewall policies.

Default inspection mode in FortiOS 5.6
Uses single-pass direct filter approach (DFA) pattern matching to identify possible attacks or threats
File is scanned on a flow basis as it passes through FortiGate
Requires fewer processing resources
Faster scanning

More thorough inspection
Adds latency
-Complete content is scanned
Two TCP connections
- From client to FortiGate acting as proxy server
-From FortiGate to server
Communication is terminated on Layer 4
More resource intensive
Provides a higher level of threat protection

Which of the following is default inspection mode in FortiOS 5.6?

How does NGFW policy-based mode differ from profile-based mode?

Which of the following statements about proxy-based web filtering is true?