New limitation added to NP7 and NP7Lite traffic shaping limitations: Changes to outbandwidth or egress shaping profiles on a physical or VLAN interface do not take effect for IPsec tunnels or sessions that are already established and offloaded by NP7 or NP7Lite (SOC5) processors. To apply the updated egress shaping settings, you must flush or reinstall the affected IPsec SAs and clear any offloaded sessions. Doing this rebuilds the IPsec tunnel and associated sessions using the new interface shaping configuration.

New section: FortiGate 3500G and 3501G fast path architecture.

The following FortiGate models are not supported by FortiOS 7.6.6 and have been removed from this document:

• FortiGate 800D

• FortiGate 900D

• FortiGate 1000D

• FortiGate 3000D

• FortiGate 3100D

• FortiGate 3200D

• FortiGate 3700D

Corrected the following sections to show that interfaces 1 to 18 are connected to one ISF switch and interfaces 19 to 22 are connected to the other ISF switch:

• FortiGate 3960E fast path architecture.

• FortiGate 3980E fast path architecture.

New section: FortiGate 3000G and 3001G fast path architecture.

Added information about NP7 and NP7Lite traffic shaping to NP7 and NP7Lite traffic shaping limitations.

Added information about a hardware issue that affects the FortiGate 3000F and 3001F, see FortiGate 3000F and 3001F fast path architecture.

FortiOS 7.6.6 document release.

Information about a new FortiOS 7.6.4 feature to enable or disable using MSE OFT added to:

• What's new for FortiOS 7.6.4.

• Enable or disable NP7 MSE OFT.

New section ike-port <port-number> [<port-number>].

Added some missing FortiOS 7.6.5 new features, see What's new for FortiOS 7.6.5.

DoS policy hardware acceleration is supported by NP7Lite (SOC5) processors for the following FortiGate models:

• FortiGate 120G/121G

• FortiGate 200G/201G

DoS policy hardware acceleration is not supported by the NP7Lite (SOC5) processors for the following FortiGate models and their rugged variations:

• FortiGate 50G/51G

• FortiGate 70G/71G

• FortiGate 90G/91G

FortiOS 7.6.5 document release.

New sections:

• L3/L4 header-based hashing for NP7-offloaded GRE tunnels.

• Support for ECMP hashing of NP7-offloaded GRE tunnels .

New section: FortiGate 70G and 71G fast path architecture.

NP7 and NP7Lite processors do not support setting a priority in a traffic shaping profile. For more information, see NP7 and NP7Lite (SOC5) traffic shaping.

FortiOS 7.6.4 document release.

Added more information about NP7 and NP7Lite (SOC5) traffic shaping changes to FortiOS 7.6.1. See What's new for FortiOS 7.6.1, and NP7 and NP7Lite (SOC5) traffic shaping.

NPU port mapping and, where applicable, interface group updates to:

• FortiGate 1000F and 1001F fast path architecture

• FortiGate 1800F and 1801F fast path architecture

• FortiGate 2600F and 2601F fast path architecture

• FortiGate 3000F and 3001F fast path architecture

• FortiGate 3200F and 3201F fast path architecture

• FortiGate 3500F and 3501F fast path architecture

• FortiGate 3700F and 3701F fast path architecture

• FortiGate 4200F and 4201F fast path architecture

• FortiGate 4400F and 4401F fast path architecture

• FortiGate 4800F and 4801F fast path architecture

Added missing information about NP7 traffic shaping changes to FortiOS 7.6.3. See What's new for FortiOS 7.6.3, and NP7 and NP7Lite (SOC5) traffic shaping.

Adding missing information about new NP6 and NP7 debugging commands. See What's new for FortiOS 7.6.3, Debugging tool for NP7-offloaded IPsec VPN tunnels and Debugging tool for NP6-offloaded IPsec VPN tunnels.

FortiOS 7.6.3 document release.

Added information about how FortiOS handles NTurbo sessions after an FGCP HA failover, see NTurbo offloads flow-based processing.

Added information about NP support for offloading NAT session setup for NAT44, NAT66, NAT64 and NAT46 traffic in the following sections:

• Network processors (NP7, NP7Lite, NP6, NP6XLite, and NP6Lite)

• NP7 session fast path requirements

• NP6 session fast path requirements

New information about NP processor packet ordering and IPsec anti-replay protection, see:

• NP processors and packet ordering under heavy load

• NP processors and IPsec anti-replay protection

FortiOS 7.6.2 document release.

Added more information about NP7 and NP6 performance monitoring:

• NP traffic logging and performance monitoring.

• Per-session accounting for offloaded NP7 sessions (NP7 performance monitoring).

• Diagnose npu np7 pmon for NP7 performance monitoring.

• Per-session accounting for offloaded NP6, NP6XLite, and NP6Lite sessions (NP6 performance monitoring).

FortiOS 7.6.1 document release.

Added more information about VNE and GRE tunnels and NP6 and NP7 acceleration, see:

• NP7 session fast path requirements.

• Tunneling protocols that can be offloaded by NP7 processors.

• NP6 session fast path requirements.

Corrections to the descriptions of how interface groups work for the following models:

• FortiGate 1100E and 1101E

• FortiGate 2200E and 2201E

• FortiGate 3300E and 3301E

• FortiGate 3400E and 3401E

• FortiGate 3600E and 3601E