Enabling hyperscale firewall features

Use the following global command to enable hyperscale firewall features for your FortiGate:

config system npu

set policy-offload-level full-offload

end

Once you have enabled global hyperscale firewall features, you must edit each hyperscale firewall VDOM and use the following command to enable hyperscale firewall features for that VDOM.

config system settings

set policy-offload-level full-offload

end

The following options are also available for this command:

default set this VDOM to use the global policy-offload-level setting.

dos-offload enable offloading sessions to the NP7 processors, but without enabling hyperscale firewall features.

full-offload enable hyperscale firewall features for the current hyperscale firewall VDOM.

For more information about DoS policy hardware acceleration and how it varies depending on the policy offload level, see DoS policy hardware acceleration.