If your FortiGate unit supports flow-based scanning, you can choose to select flow-based instead of proxy scanning. Flow-based scanning uses the FortiGate IPS engine to examine network traffic as it passes through the FortiGate unit without using a proxy to buffer and potentially change packets.

In FortiOS 5.0, flow-based inspection has been extended to email filtering. The following sections contain information about additional flow-based scanning improvements.