Distributing HA session synchronization packets to multiple CPUs

FortiGates with NP7 processors support using the following command to synchronize HA session sync packets to multiple CPUs:

config system ha

set sync-packet-balance {disable | enable}

end

If your FortiGate with NP7 processors is processing a large number of HA session sync packets, enabling sync-packet-balance can improve performance if you have enabled the session-sync-dev option of your HA configuration. Enabling sync-packet-balance can also improve performance if you are using HA or AUX interfaces for session sync traffic.