Which statement is correct regarding virus scanning on a FortiGate unit?

Virus scanning is a resource-intensive feature and is not enabled by default to allow administrators to control its application to specific traffic flows.

Fortinet customer support provides assistance and troubleshooting, but they do not remotely enable or configure security features like virus scanning for customers.

For antivirus scanning to be active on a FortiGate, an Antivirus security profile must be configured to enable virus scanning, and this profile then needs to be explicitly applied to one or more firewall policies that handle the traffic to be inspected.

Applying a security profile with virus scanning enabled to a firewall policy only applies virus protection to the traffic that matches *that specific* firewall policy, not all traffic flowing through the FortiGate.