nerdexam
Fortinet

NSE4 · Question #119

A FortiGate AntiVirus profile can be configured to scan for viruses on SMTP, FTP, POP3, and SMB protocols using which inspection mode?

The correct answer is C. Flow-based. FortiGate AntiVirus profiles use flow-based inspection mode to scan for viruses across protocols like SMTP, FTP, POP3, and SMB efficiently.

Submitted by wei.xz· Apr 18, 2026Security Profiles and Content Inspection

Question

A FortiGate AntiVirus profile can be configured to scan for viruses on SMTP, FTP, POP3, and SMB protocols using which inspection mode?

Options

  • AProxy
  • BDNS
  • CFlow-based
  • DMan-in-the-middle

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    5% (2)
  • C
    90% (36)
  • D
    3% (1)

Why each option

FortiGate AntiVirus profiles use flow-based inspection mode to scan for viruses across protocols like SMTP, FTP, POP3, and SMB efficiently.

AProxy

Proxy inspection can also scan these protocols but is generally more resource-intensive and often used when deeper inspection features like content archiving are required.

BDNS

DNS is a protocol for name resolution and is not an inspection mode for an AntiVirus profile.

CFlow-basedCorrect

Flow-based inspection is commonly used for antivirus scanning on protocols like SMTP, FTP, POP3, and SMB, as it efficiently inspects traffic as it passes through without full proxy reassembly.

DMan-in-the-middle

Man-in-the-middle refers to SSL/TLS inspection, not a general inspection mode for antivirus scanning on these unencrypted or separately encrypted protocols.

Concept tested: FortiGate antivirus inspection modes

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/700095/flow-based-and-proxy-based-inspection

Topics

#FortiGate AntiVirus#Flow-based Inspection#Security Profiles#Content Scanning

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice