Fortinet black logo

Hyperscale Firewall Guide

Change log

Change log

Date

Change description

January 11, 2023

Added more information about arp-reply support limitations for IPv4 and IPv6 firewall VIPs to Hyperscale firewall 6.4.6 incompatibilities and limitations.

November 22, 2022

Corrections to Creating hyperscale firewall VDOMs.

August 9, 2022

Changes to Configuring HA hardware session synchronization.

New sections:

Revised information about using the FortiGate-4200F/4201F and 4400F/4400F HA1, HA2, AUX1 and AUX2 interfaces. Using the following command is no longer recommended. Instead see the new section Recommended interface use for an FGCP HA hyperscale firewall cluster.

config system npu

config port-path-option

set ports-using-npu {ha1 ha2 aux1 aux2}

end

December 17, 2021

Removed information about the vlan-lookup-cache option of the config system npu command because this command is available on FortiGates with NP7 processors, whether or not they are licensed for hyperscale firewall features. For information about the vlan-lookup-cache option, see vlan-lookup-cache {disable | enable}.

December 2, 2021

Added two new FGCP HA-related limitations to Hyperscale firewall 6.4.6 incompatibilities and limitations.

Improved the information in Enabling hyperscale firewall features.

October 18, 2021

Removed the incorrect statement "NP7 fragment reassembly is not supported" from Hyperscale firewall 6.4.6 incompatibilities and limitations. New section: Reassembling fragmented packets. Corrected the section Setting the hyperscale firewall VDOM default policy action.

July 12, 2021

Added diagnose commands to Hash table message queue mode. Corrected information about multicast logging in Configuring hardware logging and Multicast logging example.

July 9, 2021

Initial version.

Change log

Date

Change description

January 11, 2023

Added more information about arp-reply support limitations for IPv4 and IPv6 firewall VIPs to Hyperscale firewall 6.4.6 incompatibilities and limitations.

November 22, 2022

Corrections to Creating hyperscale firewall VDOMs.

August 9, 2022

Changes to Configuring HA hardware session synchronization.

New sections:

Revised information about using the FortiGate-4200F/4201F and 4400F/4400F HA1, HA2, AUX1 and AUX2 interfaces. Using the following command is no longer recommended. Instead see the new section Recommended interface use for an FGCP HA hyperscale firewall cluster.

config system npu

config port-path-option

set ports-using-npu {ha1 ha2 aux1 aux2}

end

December 17, 2021

Removed information about the vlan-lookup-cache option of the config system npu command because this command is available on FortiGates with NP7 processors, whether or not they are licensed for hyperscale firewall features. For information about the vlan-lookup-cache option, see vlan-lookup-cache {disable | enable}.

December 2, 2021

Added two new FGCP HA-related limitations to Hyperscale firewall 6.4.6 incompatibilities and limitations.

Improved the information in Enabling hyperscale firewall features.

October 18, 2021

Removed the incorrect statement "NP7 fragment reassembly is not supported" from Hyperscale firewall 6.4.6 incompatibilities and limitations. New section: Reassembling fragmented packets. Corrected the section Setting the hyperscale firewall VDOM default policy action.

July 12, 2021

Added diagnose commands to Hash table message queue mode. Corrected information about multicast logging in Configuring hardware logging and Multicast logging example.

July 9, 2021

Initial version.