Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Hyperscale Firewall Guide

Change log

Date

Change description

January 11, 2023

Added more information about arp-reply support limitations for IPv4 and IPv6 firewall VIPs to Hyperscale firewall 6.4.11 incompatibilities and limitations.

November 22. 2022

Corrections to Creating hyperscale firewall VDOMs.

October 5, 2022

More information and explanation added to Hyperscale firewall policy engine mechanics.

August 25, 2022

FortiOS 6.4.10 document release.

August 9, 2022

Changes to Configuring FGCP HA hardware session synchronization.

New sections:

Revised information about using the FortiGate-4200F/4201F and 4400F/4400F HA1, HA2, AUX1 and AUX2 interfaces. Using the following command is no longer recommended. Instead see the new section Recommended interface use for an FGCP HA hyperscale firewall cluster.

config system npu

config port-path-option

set ports-using-npu {ha1 ha2 aux1 aux2}

end

July 20, 2022

Improvements to Hyperscale firewall VDOM session timeouts. New section Session timeouts for individual hyperscale policies.

April 26, 2022

FortiOS 6.4.9 document release.

Added more information to the following sections:

December 17, 2021

Removed information about the vlan-lookup-cache option of the config system npu command because this command is available on FortiGates with NP7 processors, whether or not they are licensed for hyperscale firewall features. For information about the vlan-lookup-cache option, see vlan-lookup-cache {disable | enable}.

December 2, 2021

Added two new FGCP HA-related limitations to Hyperscale firewall 6.4.11 incompatibilities and limitations.

Improved the information in Enabling hyperscale firewall features.

November 29, 2021

Corrected some of the information in Upgrading hyperscale firewall features to FortiOS 6.4.10.

November 25, 2021

FortiOS 6.4.8 document release.

October 18, 2021

Removed the incorrect statement "NP7 fragment reassembly is not supported" from Hyperscale firewall 6.4.11 incompatibilities and limitations. New section: Reassembling fragmented packets. Corrected the section Setting the hyperscale firewall VDOM default policy action.

August 17, 2021

Misc. fixes. Added more information to .

July 12, 2021

Added diagnose commands to Hash table message queue mode. Corrected information about multicast logging in Configuring hardware logging and Multicast logging example.

July 9, 2021

FortiOS 6.4.6 document release.

Change log

Date

Change description

January 11, 2023

Added more information about arp-reply support limitations for IPv4 and IPv6 firewall VIPs to Hyperscale firewall 6.4.11 incompatibilities and limitations.

November 22. 2022

Corrections to Creating hyperscale firewall VDOMs.

October 5, 2022

More information and explanation added to Hyperscale firewall policy engine mechanics.

August 25, 2022

FortiOS 6.4.10 document release.

August 9, 2022

Changes to Configuring FGCP HA hardware session synchronization.

New sections:

Revised information about using the FortiGate-4200F/4201F and 4400F/4400F HA1, HA2, AUX1 and AUX2 interfaces. Using the following command is no longer recommended. Instead see the new section Recommended interface use for an FGCP HA hyperscale firewall cluster.

config system npu

config port-path-option

set ports-using-npu {ha1 ha2 aux1 aux2}

end

July 20, 2022

Improvements to Hyperscale firewall VDOM session timeouts. New section Session timeouts for individual hyperscale policies.

April 26, 2022

FortiOS 6.4.9 document release.

Added more information to the following sections:

December 17, 2021

Removed information about the vlan-lookup-cache option of the config system npu command because this command is available on FortiGates with NP7 processors, whether or not they are licensed for hyperscale firewall features. For information about the vlan-lookup-cache option, see vlan-lookup-cache {disable | enable}.

December 2, 2021

Added two new FGCP HA-related limitations to Hyperscale firewall 6.4.11 incompatibilities and limitations.

Improved the information in Enabling hyperscale firewall features.

November 29, 2021

Corrected some of the information in Upgrading hyperscale firewall features to FortiOS 6.4.10.

November 25, 2021

FortiOS 6.4.8 document release.

October 18, 2021

Removed the incorrect statement "NP7 fragment reassembly is not supported" from Hyperscale firewall 6.4.11 incompatibilities and limitations. New section: Reassembling fragmented packets. Corrected the section Setting the hyperscale firewall VDOM default policy action.

August 17, 2021

Misc. fixes. Added more information to .

July 12, 2021

Added diagnose commands to Hash table message queue mode. Corrected information about multicast logging in Configuring hardware logging and Multicast logging example.

July 9, 2021

FortiOS 6.4.6 document release.