Fortinet black logo

Hyperscale Firewall Guide

Change log

Change log

Date

Change description

March 7, 2023

NP7 hardware logging must use interfaces connected to NP7 processors to communicate with the remove log servers. This information was added to Configuring hardware logging.

February 8, 2023

Improvements to Displaying IP pool usage information.

January 11, 2023

Added more information about arp-reply support limitations for IPv4 and IPv6 firewall VIPs to Hyperscale firewall 7.0.8 incompatibilities and limitations.

November 21, 2022

Corrections to Creating hyperscale firewall VDOMs.

October 13, 2022

FortiOS 7.0.8 document release. For information about new features, see What's new for hyperscale firewall for FortiOS 7.0.8.

October 6, 2022

FortiOS 7.0.7 document release. More information and explanation added to Hyperscale firewall policy engine mechanics.

September 28, 2022

FortiOS 7.0.8 Hyperscale firewall VDOMs support consolidated firewall policies. The statement about Hyperscale firewall VDOMs not supporting consolidated firewall policies has been removed from Hyperscale firewall 7.0.8 incompatibilities and limitations.

August 16, 2022

New sections: FGSP HA hardware session synchronization and Basic FGSP HA hardware session synchronization configuration example.

Changes to FGCP HA hardware session synchronization.

August 12, 2022

Changes to the following sections to reflect that FortiOS 7.0.6 FGSP supports HA hardware session synchronization:

August 9, 2022

Changes to Configuring FGCP HA hardware session synchronization.

New sections:

Revised information about using the FortiGate-4200F/4201F and 4400F/4400F HA1, HA2, AUX1 and AUX2 interfaces. Using the following command is no longer recommended. Instead see the new sectionRecommended interface use for an FGCP HA hyperscale firewall cluster.

config system npu

config port-path-option

set ports-using-npu {ha1 ha2 aux1 aux2}

end

July 21, 2022

Improvements to Hyperscale firewall VDOM session timeouts. New section Session timeouts for individual hyperscale policies.

June 15, 2022

Added information about how FortiOS 7.0.8 hyperscale policies are no longer separated from normal firewall policies and how hyperscale firewall policies are converted during the upgrade process to Upgrading hyperscale firewall features to FortiOS 7.0.8.

June 14, 2022

Misc. changes throughout the document.

June 7, 2022

FortiOS 7.0.6 document release. See What's new for hyperscale firewall for FortiOS 7.0.6.

New section: Allowing packet fragments for NP7 NAT46 policies when the DF bit is set to 1.

May 17, 2022

Added more information about the verbose option to diagnose sys npu-session stat [verbose [{44 | 66 | 64 | 46}]] .

April 5, 2022

Improvements to Displaying information about NP7 hyperscale firewall hardware sessions.

April 4, 2022

FortiOS 7.0.5 document release.

Change log

Date

Change description

March 7, 2023

NP7 hardware logging must use interfaces connected to NP7 processors to communicate with the remove log servers. This information was added to Configuring hardware logging.

February 8, 2023

Improvements to Displaying IP pool usage information.

January 11, 2023

Added more information about arp-reply support limitations for IPv4 and IPv6 firewall VIPs to Hyperscale firewall 7.0.8 incompatibilities and limitations.

November 21, 2022

Corrections to Creating hyperscale firewall VDOMs.

October 13, 2022

FortiOS 7.0.8 document release. For information about new features, see What's new for hyperscale firewall for FortiOS 7.0.8.

October 6, 2022

FortiOS 7.0.7 document release. More information and explanation added to Hyperscale firewall policy engine mechanics.

September 28, 2022

FortiOS 7.0.8 Hyperscale firewall VDOMs support consolidated firewall policies. The statement about Hyperscale firewall VDOMs not supporting consolidated firewall policies has been removed from Hyperscale firewall 7.0.8 incompatibilities and limitations.

August 16, 2022

New sections: FGSP HA hardware session synchronization and Basic FGSP HA hardware session synchronization configuration example.

Changes to FGCP HA hardware session synchronization.

August 12, 2022

Changes to the following sections to reflect that FortiOS 7.0.6 FGSP supports HA hardware session synchronization:

August 9, 2022

Changes to Configuring FGCP HA hardware session synchronization.

New sections:

Revised information about using the FortiGate-4200F/4201F and 4400F/4400F HA1, HA2, AUX1 and AUX2 interfaces. Using the following command is no longer recommended. Instead see the new sectionRecommended interface use for an FGCP HA hyperscale firewall cluster.

config system npu

config port-path-option

set ports-using-npu {ha1 ha2 aux1 aux2}

end

July 21, 2022

Improvements to Hyperscale firewall VDOM session timeouts. New section Session timeouts for individual hyperscale policies.

June 15, 2022

Added information about how FortiOS 7.0.8 hyperscale policies are no longer separated from normal firewall policies and how hyperscale firewall policies are converted during the upgrade process to Upgrading hyperscale firewall features to FortiOS 7.0.8.

June 14, 2022

Misc. changes throughout the document.

June 7, 2022

FortiOS 7.0.6 document release. See What's new for hyperscale firewall for FortiOS 7.0.6.

New section: Allowing packet fragments for NP7 NAT46 policies when the DF bit is set to 1.

May 17, 2022

Added more information about the verbose option to diagnose sys npu-session stat [verbose [{44 | 66 | 64 | 46}]] .

April 5, 2022

Improvements to Displaying information about NP7 hyperscale firewall hardware sessions.

April 4, 2022

FortiOS 7.0.5 document release.