Technical Tip: IPSA Offload/Acceleration
Description
The IPSA offloads and accelerates 'Flow-Based' UTMs and NGFW DFA pattern-matching where the contents are forwarded to CP8 and CP9 content processors to help manage the overall load on the general CPU. Basic is default with one CP8. Advanced is default with 2 or more CP8s or one or more CP9s.
If the 'cp-accel-mode' option is not available then the FortiGate model does not support IPSA.
If the 'cp-accel-mode' option is not available then the FortiGate model does not support IPSA.
Scope
FortiGate.
Solution
The following CLI command can be used to enable or disable the function, or to change the operating mode:
config ips global
set cp-accel-mode {advanced | basic | none}
end
set cp-accel-mode {advanced | basic | none}
end
- basic: Offloads basic pattern matching.
- advanced: Offloads more types of pattern matching (generating higher throughput).
