Which engine handles application control traffic on the next-generation firewall (NGFW) FortiGate?

The antivirus engine focuses on detecting and preventing malware, not application identification and control.

The FortiGate's Intrusion Prevention System (IPS) engine is designed to identify and control applications by deep packet inspection, going beyond simple port and protocol analysis. Application control is considered a part of the IPS functionality because it involves recognizing specific application signatures within network traffic to enforce policies.

While traffic flows through the FortiGate, the 'flow engine' is a general term and not the specific security engine that performs application control. The IPS engine is the specialized component.

'Detection engine' is a generic term and not a specific named engine responsible for application control within FortiGate architecture.