What's new for FortiGates with NP7 processors for FortiOS 6.4.8
This section lists the new NP7 features added to FortiOS 6.4.8. For new FortiOS 6.4.8 NP7 hyperscale firewall features, see the FortiOS 6.4.8 Hyperscale Firewall Guide.
-
The
config system npucommand includes a newhtx-icmp-csum-chkoption to block or allow NP7 processors to send ICMP packets with checksum errors to the CPU. See htx-icmp-csum-chk { drop | pass}. -
New option to enable or disable background NP7 SSE scanning for FortiGates with hyperscale firewall features enabled and configure some SSE scanning options. See config background-sse-scan.
-
You can enable or disable hyperscale firewall per-policy accounting for all hyperscale traffic. See per-policy-accounting {disable | enable}.