Fortinet Document Library

Table of Contents

Download PDF
Copy Link

FPM-7620E processing module

The FPM-7620E processing module is a high-performance worker module that processes sessions load balanced to it by FortiGate-7000 series interface (FIM) modules over the chassis fabric backplane. The FPM-7620E can be installed in any FortiGate-7000 series chassis in slots 3 and up.

The FPM-7620E includes two 80Gbps connections to the chassis fabric backplane and two 1Gbps connections to the base backplane. The FPM-7620E processes sessions using a dual CPU configuration, accelerates network traffic processing with four NP6 processors, and accelerates content processing with eight CP9 processors. The NP6 network processors are connected by the FIM switch fabric so all supported traffic types can be fast path accelerated by the NP6 processors.

FPM-7620E front panel

Mounting hardware

Use the module levers, power sliders, and secure screws to insert, secure and remove the module from the chassis.

Module levers

Carefully slide the module all of the way into the chassis slot and fully close the module levers to seat the module into the chassis slot and to connect the module to the chassis backplane connectors. When both module levers are fully closed, the power sliders can be lowered to their bottom position, locking the module levers and turning on power to the module.

Raise the power sliders to unlock the module levers and turn off module power. Then open the module levers to eject the module from the backplane connectors; allowing the module to be removed from the chassis.

The module lever mechanism helps reduce the engagement force required to insert or eject the module from the backplane connectors.

The module levers do not fully secure the module in the chassis. The secure screws must be tightened to reliably secure the module in the chassis and to make sure the module remains securely connected to the backplane for power and network connectivity.

Power sliders

Close the module levers and move the power sliders to their bottom position to lock the module levers and turn the module power switch on.

Move the power sliders to the top position to unlock the module levers and turn the module power switch off.

Gently push the power sliders down to make sure they are in their bottom position. If the module LEDs do not light the module is not receiving power. If this happens check the power sliders to make sure they are in their bottom position.

Secure screws

Fully tighten the secure screws to lock the module in the chassis providing a secure and reliable connection with the backplane.

Loosen the secure screws before ejecting the module from the chassis.

Physical description

Dimensions 1.69 x 17.11 x 18.49 in. (43 x 435 x 470 mm) (Height x Width x Length)
Weight 14.0 lb. (6.4 kg)
Operating Temperature 32 to 104°F (0 to 40°C)
Storage Temperature -31 to 158°F (-35 to 70°C)
Relative Humidity 10% to 90% (Non-condensing)
Power consumption Max: 410W; Average: 320W
Max Current 34A
Heat Dissipation 1395BTU/h
Joules/h 1466KJ/h

Front panel LEDs

LED State Description
STATUS Off The FPM-7620E is powered off.
Green The FPM-7620E is powered on and operating normally.
Flashing Green The FPM-7620E is starting up.
ALARM Red Major alarm.
Amber Minor alarm
Off No alarms
POWER Green The FPM-7620E is powered on and operating normally.
Off The FPM-7620E is powered off.

Turning the module on and off

You can use the front panel power button to turn the FPM-7620E power on or off. If the FPM-7620E is powered on, press the power switch to turn it off. If the FPM-7620E is turned off and installed in a chassis slot, press the power button to turn it on.

NMI switch

When working with Fortinet Support to troubleshoot problems with the FPM-7620E you can use the front panel non-maskable interrupt (NMI) switch to assist with troubleshooting. Pressing this switch causes the software to dump registers/backtraces to the console. After the data is dumped the FPM-7620E reboots. While the FPM-7620E is rebooting, traffic is temporarily blocked. The FPM-7620E should restart normally and traffic can resume once the it is up and running.

NP6 network processors - offloading data traffic

The four FPM-7620E NP6 network processors, eight CP9 processors, and FIM module integrated switch fabric (ISF) provide hardware acceleration by offloading data traffic from the FPM-7620E CPUs. The result is enhanced network performance provided by the NP6 processors plus the network processing load is removed from the CPU. The NP6 processor can also handle some CPU intensive tasks, like IPsec VPN encryption/decryption. Because of the integrated switch fabric, all sessions are fast-pathed and accelerated.

FPM-7620E hardware architecture

Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors)

The FPM-7620E includes eight CP9 processors that provide the following performance enhancements:

  • Flow-based inspection (IPS, application control etc.) pattern matching acceleration with over 10Gbps throughput
  • IPS pre-scan
  • IPS signature correlation
  • Full match processors
  • High performance VPN bulk data engine
  • IPsec and SSL/TLS protocol processor
  • DES/3DES/AES128/192/256 in accordance with FIPS46-3/FIPS81/FIPS197
  • MD5/SHA-1/SHA256/384/512-96/128/192/256 with RFC1321 and FIPS180
  • HMAC in accordance with RFC2104/2403/2404 and FIPS198
  • ESN mode
  • GCM support for NSA "Suite B" (RFC6379/RFC6460) including GCM-128/256; GMAC-128/256
  • Key Exchange Processor that supports high performance IKE and RSA computation
  • Public key exponentiation engine with hardware CRT support
  • Primary checking for RSA key generation
  • Handshake accelerator with automatic key material generation
  • True Random Number generator
  • Elliptic Curve support for NSA "Suite B"
  • Sub public key engine (PKCE) to support up to 4096 bit operation directly (4k for DH and 8k for RSA with CRT)
  • DLP fingerprint support
  • TTTD (Two-Thresholds-Two-Divisors) content chunking
  • Two thresholds and two divisors are configurable

FPM-7620E processing module

The FPM-7620E processing module is a high-performance worker module that processes sessions load balanced to it by FortiGate-7000 series interface (FIM) modules over the chassis fabric backplane. The FPM-7620E can be installed in any FortiGate-7000 series chassis in slots 3 and up.

The FPM-7620E includes two 80Gbps connections to the chassis fabric backplane and two 1Gbps connections to the base backplane. The FPM-7620E processes sessions using a dual CPU configuration, accelerates network traffic processing with four NP6 processors, and accelerates content processing with eight CP9 processors. The NP6 network processors are connected by the FIM switch fabric so all supported traffic types can be fast path accelerated by the NP6 processors.

FPM-7620E front panel

Mounting hardware

Use the module levers, power sliders, and secure screws to insert, secure and remove the module from the chassis.

Module levers

Carefully slide the module all of the way into the chassis slot and fully close the module levers to seat the module into the chassis slot and to connect the module to the chassis backplane connectors. When both module levers are fully closed, the power sliders can be lowered to their bottom position, locking the module levers and turning on power to the module.

Raise the power sliders to unlock the module levers and turn off module power. Then open the module levers to eject the module from the backplane connectors; allowing the module to be removed from the chassis.

The module lever mechanism helps reduce the engagement force required to insert or eject the module from the backplane connectors.

The module levers do not fully secure the module in the chassis. The secure screws must be tightened to reliably secure the module in the chassis and to make sure the module remains securely connected to the backplane for power and network connectivity.

Power sliders

Close the module levers and move the power sliders to their bottom position to lock the module levers and turn the module power switch on.

Move the power sliders to the top position to unlock the module levers and turn the module power switch off.

Gently push the power sliders down to make sure they are in their bottom position. If the module LEDs do not light the module is not receiving power. If this happens check the power sliders to make sure they are in their bottom position.

Secure screws

Fully tighten the secure screws to lock the module in the chassis providing a secure and reliable connection with the backplane.

Loosen the secure screws before ejecting the module from the chassis.

Physical description

Dimensions 1.69 x 17.11 x 18.49 in. (43 x 435 x 470 mm) (Height x Width x Length)
Weight 14.0 lb. (6.4 kg)
Operating Temperature 32 to 104°F (0 to 40°C)
Storage Temperature -31 to 158°F (-35 to 70°C)
Relative Humidity 10% to 90% (Non-condensing)
Power consumption Max: 410W; Average: 320W
Max Current 34A
Heat Dissipation 1395BTU/h
Joules/h 1466KJ/h

Front panel LEDs

LED State Description
STATUS Off The FPM-7620E is powered off.
Green The FPM-7620E is powered on and operating normally.
Flashing Green The FPM-7620E is starting up.
ALARM Red Major alarm.
Amber Minor alarm
Off No alarms
POWER Green The FPM-7620E is powered on and operating normally.
Off The FPM-7620E is powered off.

Turning the module on and off

You can use the front panel power button to turn the FPM-7620E power on or off. If the FPM-7620E is powered on, press the power switch to turn it off. If the FPM-7620E is turned off and installed in a chassis slot, press the power button to turn it on.

NMI switch

When working with Fortinet Support to troubleshoot problems with the FPM-7620E you can use the front panel non-maskable interrupt (NMI) switch to assist with troubleshooting. Pressing this switch causes the software to dump registers/backtraces to the console. After the data is dumped the FPM-7620E reboots. While the FPM-7620E is rebooting, traffic is temporarily blocked. The FPM-7620E should restart normally and traffic can resume once the it is up and running.

NP6 network processors - offloading data traffic

The four FPM-7620E NP6 network processors, eight CP9 processors, and FIM module integrated switch fabric (ISF) provide hardware acceleration by offloading data traffic from the FPM-7620E CPUs. The result is enhanced network performance provided by the NP6 processors plus the network processing load is removed from the CPU. The NP6 processor can also handle some CPU intensive tasks, like IPsec VPN encryption/decryption. Because of the integrated switch fabric, all sessions are fast-pathed and accelerated.

FPM-7620E hardware architecture

Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors)

The FPM-7620E includes eight CP9 processors that provide the following performance enhancements:

  • Flow-based inspection (IPS, application control etc.) pattern matching acceleration with over 10Gbps throughput
  • IPS pre-scan
  • IPS signature correlation
  • Full match processors
  • High performance VPN bulk data engine
  • IPsec and SSL/TLS protocol processor
  • DES/3DES/AES128/192/256 in accordance with FIPS46-3/FIPS81/FIPS197
  • MD5/SHA-1/SHA256/384/512-96/128/192/256 with RFC1321 and FIPS180
  • HMAC in accordance with RFC2104/2403/2404 and FIPS198
  • ESN mode
  • GCM support for NSA "Suite B" (RFC6379/RFC6460) including GCM-128/256; GMAC-128/256
  • Key Exchange Processor that supports high performance IKE and RSA computation
  • Public key exponentiation engine with hardware CRT support
  • Primary checking for RSA key generation
  • Handshake accelerator with automatic key material generation
  • True Random Number generator
  • Elliptic Curve support for NSA "Suite B"
  • Sub public key engine (PKCE) to support up to 4096 bit operation directly (4k for DH and 8k for RSA with CRT)
  • DLP fingerprint support
  • TTTD (Two-Thresholds-Two-Divisors) content chunking
  • Two thresholds and two divisors are configurable