Accelerated packet forwarding and policy enforcement (NP6 network processors)
FortiGate-5001D security system
FortiGate-5001D Security System Guide
10
01-500-0242101-20151109
http://docs.fortinet.com/
Accelerated packet forwarding and policy enforcement (NP6
network processors)
The FortiGate-5001D board includes two NP6 processors and an integrated switch fabric
that provides fastpath acceleration by offloading communication sessions from the
FortiGate CPU. All traffic from the front panel and backplane interfaces can be
accelerated. The result is enhanced network performance provided by the NP6 processor
plus the network processing load is removed from the CPU. The NP6 processor can also
handle some CPU intensive tasks, like IPsec VPN encryption/decryption. Because of the
integrated switch fabric, all sessions are fast-pathed and accelerated.
Figure 2: FortiGate-5001D NP6 to interface mapping
The FortiGate-5001D features two NP6 processors.
•
port1, port3, fabric1 and base1 share connections to the first NP6 processor.
•
port2, port4, fabric2 and base2 share connections to the second NP6 processor.
Accelerated IPS, SSL VPN, and IPsec VPN (CP8 content
processors)
The FortiGate-5001D board includes four CP8 processors that provide the following
performance enhancements:
•
Over 10Gbps throughput IPS content processor for packet content matching with
signatures
FortiASIC
NP6
FortiASIC
NP6
Integrated Switch Fabric
CPU
CP8
CP8
CP8
CP8
System Bus
fabric1
base1
fabric2
base2
