Increased performance

IPsec is the overlay technology recommended for the Fortinet Secure SD-WAN solution, as it provides confidentiality, integrity, and mutual site authentication. The Security Processing Unit (SPU) helps you achieve the best performance for the lowest cost, thanks in part to its IPsec offloading capabilities. The number of tunnels and encryption requirements can grow exponentially with the number of edge devices (full mesh), making the efficiency of tunnel management a critical part of the solution.

FortiGate virtual machines support all primary, generic network accelerations (SR-IOV, DPDK) to deliver fast and secure features to all possible deployments. Furthermore, we have developed vSPU capabilities to offload more features into the accelerated generic NICs (DPDK mainly) to get the most efficiency from the hypervisors and hardware.