Lesson 10 of 14
Not started
Antivirus
Scan traffic for malware in flow and proxy modes, understand signatures/heuristics and sandbox integration, and troubleshoot detection gaps.
The FortiGate antivirus engine scans files in transit against FortiGuard signatures, and can add heuristics, grayware, machine-learning detection, and FortiSandbox integration for unknown/zero-day threats. Detection depth depends on an up-to-date signature database (FortiGuard) and whether encrypted transfers are decrypted by SSL inspection.
What can extend antivirus detection to unknown/zero-day files?