Which feature enhances the capability of firewall policies on a FortiGate?

The feature that enhances the capability of firewall policies on a FortiGate is content filtering. Content filtering allows the firewall to analyze and control the content of the traffic passing through it, providing an additional layer of security. This capability enables the FortiGate to block or allow specific types of content based on predefined rules. It helps organizations enforce their security policies by restricting access to non-compliant or inappropriate content, thereby reducing potential threats and vulnerabilities.

Content filtering is integral to effective firewall policy management because it operates at a deeper level than just evaluating the packets based on their headers. Instead, it inspects the actual content of the traffic, which can include websites visited, files downloaded, or applications used. Therefore, by enhancing threat detection and compliance through content filtering, a FortiGate firewall can improve overall network security and ensure adherence to corporate policies.

In contrast, other options like logging, traffic shaping, and web filtering also provide valuable functionalities but do not specifically enhance the core capability of firewall policies in the same way that content filtering does. Logging enables monitoring and auditing, traffic shaping manages bandwidth and performance, and web filtering focuses on controlling web access, but each lacks the comprehensive content control that directly enhances the firewall's policies.