The CLI command set intelligent-mode <enable | disable> controls the IPS engine's adaptive scanning behavior. Which of the following statements describes IPS adaptive scanning?

Question

Options

• ADetermines the optimal number of IPS engines required based on system load.
• BDownloads signatures on demand from FDS based on scanning requirements.
• CDetermines when it is secure enough to stop scanning session traffic.
• DChoose a matching algorithm based on available memory and the type of inspection being

• A
  4% (1)
• B
  8% (2)
• C
  76% (19)
• D
  12% (3)

Explanation

Configuring IPS intelligence Starting with FortiOS 5.2, intelligent-mode is a new adaptive detection method. This command is enabled the default and it means that the IPS engine will perform adaptive scanning so that, for some traffic, the FortiGate can quickly finish scanning and offload the traffic to NPU or kernel. It is a balanced method which could cover all known exploits. When disabled, the IPS engine scans every single byte. config ips global set intelligent-mode {enable|disable}

No community discussion yet for this question.