Hardware Acceleration

• Hardware acceleration
• Whats new
  • What's new for FortiGates with NP7 processors for FortiOS 6.4.6
• Content processors (CP9, CP9XLite, CP9Lite)
  • CP9, CP9XLite, and CP9Lite capabilities
  • CP8 capabilities
  • CP6 capabilities
  • CP5 capabilities
  • CP4 capabilities
  • Determining the content processor in your FortiGate unit
  • Viewing SSL acceleration status
• Security processors (SPs)
  • SP processing flow
  • Displaying information about security processing modules
• Network processors (NP7, NP6, NP6XLite, NP6Lite, and NP4)
  • Accelerated sessions on FortiView All Sessions page
  • NP session offloading in HA active-active configuration
  • Configuring NP HMAC check offloading
  • Software switch interfaces and NP processors
  • Disabling NP offloading for firewall policies
  • Disabling NP offloading for individual IPsec VPN phase 1s
  • Disabling NP offloading for unsupported IPsec encryption or authentication algorithms
  • NP acceleration, virtual clustering, and VLAN MAC addresses
  • Determining the network processors installed in your FortiGate
  • NP hardware acceleration alters packet flow
  • NP7, NP6, NP6XLite, and NP6Lite traffic logging and monitoring
  • sFlow and NetFlow and hardware acceleration
  • Checking that traffic is offloaded by NP processors
  • Dedicated management CPU
  • Preventing packet ordering problems
• Strict protocol header checking disables hardware acceleration
• NTurbo and IPSA
  • NTurbo offloads flow-based processing
  • Disabling nTurbo for firewall policies
  • IPSA offloads flow-based pattern matching
• NP7 acceleration
  • NP7 session fast path requirements
    • Mixing fast path and non-fast path traffic
    • Protocols that can be offloaded by NP7 processors
  • Viewing your FortiGate NP7 processor configuration
  • NP7 performance optimized over KR links