NP7 offloading of ingress traffic shaping is not supported. This information has been added to NP7 session fast path requirements.

NP7 offloading of GRE over a loopback interface is not supported, see NP7 session fast path requirements, Tunneling protocols that can be offloaded by NP7 processors, and Protocols that can be offloaded by NP7 processors.

Updated Software switch interfaces and NP processors to explain that NP processors support offloading software switch traffic if inter-switch-policy is set to explicit and you have created firewall policies to allow traffic between interfaces in the software switch.

Changes to Configuring NP7 processors to add missing information and remove options only available if your FortiGate is licensed for Hyperscale firewall.

Added information about FortiGate 7000F FIMs and FPMs, including FortiGate 7000F support for HPE, see

• FIM-7921F fast path architecture.

• FIM-7941F fast path architecture.

• FPM-7620F fast path architecture.

Corrections to hash-config {src-dst-ip | 5-tuple | src-ip}.

FortiOS 7.4.3 document release.

Updated NP7 session fast path requirements to include GRE.

FortiOS 7.4.2 document release.

Changes to NTurbo offloads flow-based processing.

New section: Performance reduction for NP6 processors with 1Gbps interfaces.

Changes to:

• diagnose sys session list and no_ofld_reason field (NP7 session information).

• NP7 traffic shaping.

• qtm-buf-mode {6ch | 4ch}.

New section: FortiGate Rugged 70F fast path architecture. Changes to most FortiGate fast path architecture descriptions.

New section: FortiGate Rugged 60F fast path architecture. Changes to the following sections:

• FortiGate 80F, 81F, and 80F Bypass fast path architecture.

• NP7 access control lists (ACLs).

• NP6 access control lists (ACLs).

FortiOS 7.4.1 document release.

Updates to NP7 performance optimized over KR links.

Changes to the following sections to correct information related to the SOC4 and SOC5:

• NP6XLite processors.

• FortiGate 60F and 61F fast path architecture.

• FortiGate 70F and 71F fast path architecture.

• FortiGate 80F, 81F, and 80F Bypass fast path architecture.

• FortiGate 100F and 101F fast path architecture.

Corrections to FortiGate NP7 architecture interface speeds, see FortiGate NP7 architectures.

Changes to FortiGate 3960E fast path architecture and FortiGate 3980E fast path architecture to explain that in multi-ISF systems, such as the FortiGate 3860E and FortiGate 3890E, NP6 offloading is not supported for LAGs containing interfaces connected to different ISF switches.

Corrected the section CP9 capabilities because FortiOS uses OpenSSL 3.0.x, which doesn't support the CP9 for SSL/TLS encryption and decryption.

Added information about NP6 and NP7 support for IPv6 SD-WAN segmentation over single relay sessions that include an IPsec VPN phase 1 configuration that enables VPN ID with IPIP encapsulation. See NP7 session fast path requirements and NP6 session fast path requirements.

Misc. changes throughout the document.