
FPM-7620F processing module
Fortinet Technologies Inc.
NP7 network processors - offloading data traffic
The two FPM-7620F NP7 network processors provide hardware acceleration by offloading data traffic from the FPM-
7620F CPUs. The result is enhanced network performance provided by the NP7 processors plus the network processing
load is removed from the CPU. The NP7processor can also handle some CPU intensive tasks, like IPsec VPN
encryption/decryption. Because of the integrated switch fabric, all sessions are fast-pathed and accelerated.
Traffic from FPM-7620F front panel data interfaces is sent over the fabric channel backplane to the FIMs where NP7
processors use SLBC to distribute sessions to individual FPMs. The FPM-7620F can be processing traffic received from
FIM data interfaces and from FPM data interfaces.
FPM-7620F hardware architecture
Chassis Base Backplane
Chassis Fabric Backplane
Integrated Switch Fabric
2 x 50G
2 x 400G
2 x NP7
(NP#0-1)
C
2 x CPU
8 x CP9
Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors)
The FPM-7620F includes eight CP9 processors that provide the following performance enhancements:
l
Flow-based inspection (IPS, application control etc.) pattern matching acceleration with over 10Gbps throughput
l
IPS pre-scan
l
IPS signature correlation
l
Full match processors
l
High performance VPN bulk data engine
l
IPsec and SSL/TLS protocol processor
l
DES/3DES/AES128/192/256 in accordance with FIPS46-3/FIPS81/FIPS197
l
MD5/SHA-1/SHA256/384/512-96/128/192/256 with RFC1321 and FIPS180
l
HMAC in accordance with RFC2104/2403/2404 and FIPS198
l
ESN mode
l
GCM support for NSA "Suite B" (RFC6379/RFC6460) including GCM-128/256; GMAC-128/256
FPM-7620F Processing Module Guide
9