Network processors (NP7, NP7Lite, NP6, NP6XLite, and NP6Lite)
FortiASIC network processors work at the interface level to accelerate traffic by offloading traffic from the main CPU. Current models contain NP7, NP7Lite, NP6, NP6XLite, and NP6Lite network processors. Older FortiGate models include NP1 network processors (also known as FortiAccel, or FA2), NP2, NP4, and NP4Lite network processors.
The traffic that can be offloaded, maximum throughput, and number of network interfaces supported by each varies by processor model.
|
NP version |
Description |
|---|---|
|
NP7 |
NP7 processors offload most IPv4 and IPv6 traffic, IPsec VPN encryption (including Suite B), GTP traffic, CAPWAP traffic, VXLAN traffic, multicast traffic, NAT session setup, and DoS protection. On FortiGates licensed for hyperscale firewall support, NP7 processors offload session setup, Carrier Grade NAT (CGN), hardware logging, HA hardware session synchronization, and data communication from the FortiGate CPU. The NP7 processor has a maximum throughput of 200 Gbps using 2 x 100 GigE interfaces. For details about the NP7 processor, see NP7 and NP7Lite acceleration and for information about FortiGate models with NP7 processors, see FortiGate NP7 architectures. For information about hyperscale firewall functionality, see the Hyperscale Firewall Guide. |
|
NP7Lite |
NP7Lite processors are a component of the Fortinet SOC5 (also called the SP5). The NP7Lite processor is a lower capacity version of the NP7 processor. The NP7Lite processor supports all NP7 processor features except hyperscale firewall (hardware sessions). The NP7Lite also does not include support for defrag/reassembly (DFR) to re-assemble fragmented packets. The NP7Lite max throughput is 40 Gbps, using one 40GigE interface. For details about the NP7Lite processor, see NP7Lite processors and for information about FortiGate models with NP7Lite processors, see FortiGate NP7Lite architectures. |
|
NP6 |
NP6 processors support offloading of most IPv4 and IPv6 traffic, IPsec VPN encryption, CAPWAP traffic, and multicast traffic. The NP6 processor has a maximum throughput of 40 Gbps using 4 x 10 Gbps XAUI or Quad Serial Gigabit Media Independent Interface (QSGMII) interfaces or 3 x 10 Gbps and 16 x 1 Gbps XAUI or QSGMII interfaces. For details about the NP6 processor, see NP6, NP6XLite, and NP6Lite acceleration and for information about FortiGate models with NP6 processors, see FortiGate NP6 architectures. |
|
NP6XLite |
NP6XLite processors are a component of the Fortinet SOC4 and support the same features as the NP6 but with slightly lower throughput. The NP6XLite processor also includes new features and improvements, such as the ability to offload AES128-GCM and AES256-GCM encryption for IPsec VPN traffic. The NP6XLite has a maximum throughput of 36 Gbps using 4x KR/USXGMII/QSGMII and 2x(1x) Reduced gigabit media-independent interface (RGMII) interfaces. For details about the NP6XLite processor, see NP6XLite processors and for information about FortiGate models with NP6XLite processors, see FortiGate NP6XLite architectures. |
|
NP6Lite |
NP6Lite processors are a component of the Fortinet SOC3 and are similar to the NP6 but with a lower throughput and some functional limitations (for example, the NP6Lite processor does not offload CAPWAP traffic). The NP6Lite processor has a maximum throughput of 10 Gbps using 2x QSGMII and 2x RGMII interfaces. For details about the NP6Lite processor, see NP6Lite processors and for information about FortiGate models with NP6Lite processors, see FortiGate NP6Lite architectures. |
|
Sessions that require proxy-based security features are not fast pathed and must be processed by the CPU. Sessions that require flow-based security features can be offloaded to NPx network processors if the FortiGate supports NTurbo. |