Added a note about ACL policy changes made to a hyperscale firewall VDOM that is processing traffic may take longer than expected to become effective, see Hyperscale firewall 7.2.2 incompatibilities and limitations.

Added more information about the NP7 hash-config option to Configuring how the internal switch fabric distributes sessions to NP7 processors.

NP7 hardware logging must use interfaces connected to NP7 processors to communicate with the remove log servers. This information was added to Configuring hardware logging.

Improvements to Displaying IP pool usage information.

Added more information about arp-reply support limitations for IPv4 and IPv6 firewall VIPs to Hyperscale firewall 7.2.2 incompatibilities and limitations.

Corrections to Creating hyperscale firewall VDOMs.

FortiOS 7.2.2 document release. More information and explanation added to Hyperscale firewall policy engine mechanics.

FortiOS 7.2.2 Hyperscale firewall VDOMs support consolidated firewall policies. The statement about Hyperscale firewall VDOMs not supporting consolidated firewall policies has been removed from Hyperscale firewall 7.2.2 incompatibilities and limitations.

Changes to the following sections to reflect that FortiOS 7.2.1 FGSP supports HA hardware session synchronization:

• What's new for hyperscale firewall for FortiOS 7.2.1.

• Hyperscale firewall 7.2.2 incompatibilities and limitations.

New sections: FGSP HA hardware session synchronization and Basic FGSP HA hardware session synchronization configuration example.

Changes to FCGP HA hardware session synchronization.

New sections:

• How the NP7 hash-config affects CGNAT.

• How the NP7 hash-config affects sessions that require session helpers or ALGs.

Changes to Recommended interface use for an FGCP HA hyperscale firewall cluster and Configuring FGCP HA hardware session synchronization.

Revised information about using the FortiGate-4200F/4201F and 4400F/4400F HA1, HA2, AUX1 and AUX2 interfaces. Using the following command is no longer recommended. Instead seeRecommended interface use for an FGCP HA hyperscale firewall cluster.

config system npu

config port-path-option

set ports-using-npu {ha1 ha2 aux1 aux2}

end