Added information about hardware logging sending multiple session start log messages if log-processor is set to hardware and log-mode is set to per-session to Hyperscale firewall 6.4.12 incompatibilities and limitations.

Added a note about ACL policy changes made to a hyperscale firewall VDOM that is processing traffic may take longer than expected to become effective, see Hyperscale firewall 6.4.12 incompatibilities and limitations.

Added more information about the NP7 hash-config option to Configuring how the internal switch fabric distributes sessions to NP7 processors.

NP7 hardware logging must use interfaces connected to NP7 processors to communicate with the remove log servers. This information was added to Configuring hardware logging.

FortiOS 6.4.12 document release.

Improvements to Displaying IP pool usage information.

Added more information about arp-reply support limitations for IPv4 and IPv6 firewall VIPs to Hyperscale firewall 6.4.12 incompatibilities and limitations.

Corrections to Creating hyperscale firewall VDOMs.

FortiOS 6.4.11 document release.

More information and explanation added to Hyperscale firewall policy engine mechanics.

FortiOS 6.4.10 document release.

Changes to Configuring FGCP HA hardware session synchronization.

New sections:

• How the NP7 hash-config affects CGNAT.

• How the NP7 hash-config affects sessions that require session helpers or ALGs.

Revised information about using the FortiGate-4200F/4201F and 4400F/4400F HA1, HA2, AUX1 and AUX2 interfaces. Using the following command is no longer recommended. Instead see the new section Recommended interface use for an FGCP HA hyperscale firewall cluster.

config system npu

config port-path-option

set ports-using-npu {ha1 ha2 aux1 aux2}

end

Improvements to Hyperscale firewall VDOM session timeouts. New section Session timeouts for individual hyperscale policies.

FortiOS 6.4.9 document release.

Added more information to the following sections:

• Hyperscale firewall 6.4.12 incompatibilities and limitations.

• Displaying IP pool usage information.

Removed information about the vlan-lookup-cache option of the config system npu command because this command is available on FortiGates with NP7 processors, whether or not they are licensed for hyperscale firewall features. For information about the vlan-lookup-cache option, see vlan-lookup-cache {disable | enable}.

Added two new FGCP HA-related limitations to Hyperscale firewall 6.4.12 incompatibilities and limitations.

Improved the information in Enabling hyperscale firewall features.

Corrected some of the information in Upgrading hyperscale firewall features to FortiOS 6.4.12.

FortiOS 6.4.8 document release.

Removed the incorrect statement "NP7 fragment reassembly is not supported" from Hyperscale firewall 6.4.12 incompatibilities and limitations. New section: Reassembling fragmented packets. Corrected the section Setting the hyperscale firewall VDOM default policy action.

Misc. fixes. Added more information to .

Added diagnose commands to Hash table message queue mode. Corrected information about multicast logging in Configuring hardware logging and Multicast logging example.