What's new for FortiGates with NP7 processors for FortiOS 6.2.7
This section lists new features added to FortiOS 6.2.7 for FortiGates that include NP7 processors. For new FortiOS 6.2.7 NP7 hyperscale firewall features, see What's new for hyperscale firewall for FortiOS 6.2.7.
-
You can improve overall performance by keeping accelerated VDOM link interfaces from consuming excessive NP7 bandwidth. See Bandwidth control for NPU accelerated VDOM link interfaces.
-
When configuring a VLAN interface, you can set the maximum outgoing bandwidth that traffic over the VLAN interface can use. See Controlling the maximum outgoing VLAN bandwidth.
-
FortiGates with NP7 processors now support synchronizing HA session sync packets to multiple CPUs, see Distributing HA session synchronization packets to multiple CPUs.
-
You can now enable or disable hash table entry spread for NP7 processors, see hash-tbl-spread (disable | enable}.
-
NP7 Host Protection Engine (HPE) enhancements, to prevent SYN_ACK reflection attacks and limit the maximum number of TCP FIN and RST packets. See NP7 Host Protection Engine (HPE).