Per-session accounting for offloaded NP6, NP6XLite, and NP6Lite sessions
Per-session accounting is a logging feature that allows the FortiGate to report the correct bytes/pkt numbers per session for sessions offloaded to an NP6, NP6XLite, or NP6Lite processor. This information appears in traffic log messages as well as in FortiView. The following example shows the Sessions dashboard widget tracking SPU and nTurbo sessions. Current sessions shows the total number of sessions, SPU shows the percentage of these sessions that are SPU sessions and Nturbo shows the percentage that are nTurbo sessions.
You can hover over the SPU icon to see some information about the offloaded sessions.
You configure per-session accounting for each NP6 processor. For example, use the following command to enable per-session accounting for NP6_0 and NP6_1:
config system np6
edit np6_0
set per-session-accounting traffic-log-only
next
edit np6_1
set per-session-accounting traffic-log-only
end
You configure per-session accounting for each NP6XLite processor. For example, use the following command to enable per-session accounting for np6xlite_0:
config system np6xlite
edit np6xlite_0
set per-session-accounting traffic-log-only
end
If your FortiGate has NP6Lite processors, you can use the following command to enable per-session accounting for all of the NP6Lite processors in the FortiGate unit:
config system npu
set per-session-accounting traffic-log-only
end
The option traffic-log-only enables per-session accounting for offloaded sessions with traffic logging.
The option enable enables per-session accounting for all offloaded sessions.
By default, per-session-accounting is set to traffic-log-only, which results in per-session accounting being turned on when you enable traffic logging in a policy.
Per-session accounting can affect offloading performance. So you should only enable per-session accounting if you need the accounting information.
Enabling per-session accounting does not provide traffic flow data for sFlow or NetFlow.