In FortiOS 5.2, any traffic hitting a FortiGate interface, regardless of whether it is going to be dropped, forwarded or processed locally, will be used by device detection, allowing devices to be detected even if their traffic does not flow through the FortiGate unit. This includes traffic that hits an interface with IPS sniffer mode enabled, as well as broadcast and multicast traffic.