Enabling hyperscale firewall features
You must enter the following command in each hyperscale firewall VDOM that you have created to enable hyperscale firewall features for that VDOM:
config system settings
set policy-offload-level full-offload
end
The following options are available for this command:
disable
disable hyperscale firewall features and disable offloading DoS policy sessions to NP7 processors for this VDOM. All sessions are initiated by the CPU. Sessions that can be offloaded are sent to NP7 processors. This is the default setting.
dos-offload
offload DoS policy sessions to NP7 processors for this VDOM. All other sessions are initiated by the CPU. Sessions that can be offloaded are sent to NP7 processors.
full-offload
enable hyperscale firewall features for the current hyperscale firewall VDOM. This option is only available if the FortiGate is licensed for hyperscale firewall features. DoS policy sessions are also offloaded to NP7 processors. All other sessions are initiated by the CPU. Sessions that can be offloaded are sent to NP7 processors.
For more information about DoS policy hardware acceleration and how it varies depending on the policy offload level, see DoS policy hardware acceleration. |