What's new for FortiOS 7.4.0

This section lists the new hardware accelerations features added to FortiOS 7.4.0.

• FortiOS 7.4.0 includes main branch support for the following FortiGate-6000F, 7000E, and 7000F models

  FortiGate-6000F	FortiGate-6300F, FortiGate-6301F, FortiGate-6500F, FortiGate-6501F
  FortiGate-7000E	FortiGate-7030E, FortiGate-7040E, FortiGate-7060E
  FortiGate-7000F	FortiGate-7081F, FortiGate-7121F

• FortiGate-1800F and 1801F interfaces 37 to 40 (port37 to port40) support operating as 100/40 GigE QSFP28/QSFP+ interfaces, see FortiGate 1800F and 1801F fast path architecture.

• You can change the DVLAN mode used by FortiGates NP7 processors, see Changing the DVLAN mode for FortiGates with NP7 processors .

• For FortiGates with NP7 processors, the policy-offload-level option of the config system npu command has been removed. The policy offload level is only set using the policy-offload-level option of the config system settings command; allowing you to configure the policy offload level separately for each VDOM. By default, policy-offload-level is set to disable. You can change the policy-offload-level to dos-offload. If your FortiGate is configure for hyperscale firewall features, you can also set the policy-offload-level to full-offload in a hyperscale firewall VDOM. See Changing the policy offload level and DoS policy hardware acceleration.

• NP6 and NP7 processors support offloading IPv6 SD-WAN segmentation over single relay sessions that include an IPsec VPN phase 1 configuration that enables VPN ID with IPIP encapsulation or tunneling (also called IP in IP tunneling). See NP7 session fast path requirements and NP6 session fast path requirements.

For information about FortiOS 7.4.0 NP7 hyperscale firewall features, see the FortiOS 7.4.0 Hyperscale Firewall Guide.

IPIP tunneling (also called IP in IP tunneling)