Technical Note: IPSA Offload/Acceleration

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 192463

Description

The IPSA offloads and accelerates "Flow-Based" UTMs and NGFW patterns which match CP8 and CP9 content processors. Basic is default with one CP8. Advanced is default with 2 or more CP8s or one or more CP9s.

If the "cp-accel-mode" option is not available then the FortiGate model does not support IPSA.

Solution

The following CLI command can be used to enable or disable the function, or to change the operating mode:

config ips global
set cp-accel-mode {advanced | basic | none}
end

basic: offloads basic pattern matching.
advanced: offloads more types of pattern matching (generating higher throughput).

1019

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.