Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Hyperscale Firewall Guide

Change log

Date

Change description

November 18, 2022

Corrections to Creating hyperscale firewall VDOMs.

October 4, 2022

More information and explanation added to Hyperscale firewall policy engine mechanics.

September 28, 2022

FortiOS 7.2.1 Hyperscale firewall VDOMs support consolidated firewall policies. The statement about Hyperscale firewall VDOMs not supporting consolidated firewall policies has been removed from Hyperscale firewall 7.2.1 incompatibilities and limitations.

August 17, 2022

Changes to the following sections to reflect that FortiOS 7.2.1 FGSP supports HA hardware session synchronization:

New sections: FGSP HA hardware session synchronization and Basic FGSP HA hardware session synchronization configuration example.

Changes to FCGP HA hardware session synchronization.

August 8, 2022

New sections:

August 4, 2022

Changes to Recommended interface use for an FGCP HA hyperscale firewall cluster and Configuring FGCP HA hardware session synchronization.

Revised information about using the FortiGate-4200F/4201F and 4400F/4400F HA1, HA2, AUX1 and AUX2 interfaces. Using the following command is no longer recommended. Instead seeRecommended interface use for an FGCP HA hyperscale firewall cluster.

config system npu

config port-path-option

set ports-using-npu {ha1 ha2 aux1 aux2}

end

August 4, 2022

FortiOS 7.2.1 document release. FortiOS 7.2.1 includes main branch support for FortiGates with NP7 processors and hyperscale firewall features.

New sections:

Change log

Date

Change description

November 18, 2022

Corrections to Creating hyperscale firewall VDOMs.

October 4, 2022

More information and explanation added to Hyperscale firewall policy engine mechanics.

September 28, 2022

FortiOS 7.2.1 Hyperscale firewall VDOMs support consolidated firewall policies. The statement about Hyperscale firewall VDOMs not supporting consolidated firewall policies has been removed from Hyperscale firewall 7.2.1 incompatibilities and limitations.

August 17, 2022

Changes to the following sections to reflect that FortiOS 7.2.1 FGSP supports HA hardware session synchronization:

New sections: FGSP HA hardware session synchronization and Basic FGSP HA hardware session synchronization configuration example.

Changes to FCGP HA hardware session synchronization.

August 8, 2022

New sections:

August 4, 2022

Changes to Recommended interface use for an FGCP HA hyperscale firewall cluster and Configuring FGCP HA hardware session synchronization.

Revised information about using the FortiGate-4200F/4201F and 4400F/4400F HA1, HA2, AUX1 and AUX2 interfaces. Using the following command is no longer recommended. Instead seeRecommended interface use for an FGCP HA hyperscale firewall cluster.

config system npu

config port-path-option

set ports-using-npu {ha1 ha2 aux1 aux2}

end

August 4, 2022

FortiOS 7.2.1 document release. FortiOS 7.2.1 includes main branch support for FortiGates with NP7 processors and hyperscale firewall features.

New sections: