Скачать или смотреть Fortinet Antivirus - general information, the inspection modes; Fortinet vs. Palo Alto AV.

Fortinet Antivirus
Fortinet's Antivirus (AV) is part of the FortiGuard Security Services and is integrated into FortiGate firewalls. It provides real-time protection against malware, viruses, spyware, and other threats. Fortinet AV operates using a combination of signature-based detection, heuristic analysis, AI-driven threat intelligence, and sandboxing to detect and mitigate threats effectively.

Fortinet Antivirus Inspection Modes

Flow-based (Proxyless) Inspection
Scans traffic as it flows through the firewall.
Uses Fortinet’s FortiGuard AV signature database to detect known threats.
Offers better performance as it inspects only relevant parts of the traffic.
Limited to detecting already known threats (less effective against zero-day threats).

Proxy-based (Full Content) Inspection
The firewall buffers and inspects the entire file before forwarding it.
Provides deeper inspection for compressed files, embedded malware, and polymorphic threats.
More effective against advanced threats but adds latency compared to flow-based inspection.

Inline Sandbox Inspection (Advanced Threat Protection - ATP)
Uses FortiSandbox to analyze suspicious files in a virtual environment before allowing them through.
Ideal for detecting zero-day malware that bypasses traditional AV methods.
Can be combined with flow-based or proxy-based inspection for enhanced security.

Fortinet Antivirus vs. Palo Alto Antivirus

Inspection Modes
Fortinet AV (FortiGate) Flow-based, Proxy-based, Inline Sandbox
Palo Alto AV (WildFire) Single-pass architecture, Cloud-based sandbox

Threat Intelligence
Fortinet Antivirus - FortiGuard Labs (global threat database, AI-driven analysis)
Palo Alto Antivirus - WildFire cloud-based threat analysis

Performance Impact
Fortinet Antivirus - Flow-based mode minimizes latency; Proxy mode adds processing delay
Palo Alto Antivirus - Low latency due to single-pass processing

Zero-Day Protection
Fortinet Antivirus - Requires FortiSandbox integration
Palo Alto Antivirus - built-in WildFire cloud sandbox (real-time analysis)