Monday, January 8, 2024

FortiGate NP6 protection functions

 sw-np-bandwidth - limits XAUI speed to 2,4,5,6 to use ISF's buffer

- Can prevent IHP/EHP drops

- But may cause drops on ISF (“sw_np_out_drop_pkts”)

gtse-quota - traffic shaper from CPU to NP6 

- Only on platforms with 1 Gbps ports connected directly to NP6, without ISF

HPE – Host Protection Engine

        -Limits the number of packets per second from NP6 to kernel

No comments:

Post a Comment

FMG doesn't provide FGD service to hidden devices

 1) If a device is hidden ( https://docs.fortinet.com/document/fortimanager/7.4.2/administration-guide/115931/hiding-unauthorized-devices), ...