Technical Tip: Status of SSL VPN acceleration

To view the status of SSL VPN acceleration, use the following command:

get vpn status ssl hw-acceleration-status

The output will display:

get vpn status ssl hw-acceleration-status
Acceleration hardware detected: kxp=on cipher=on -> which means that the hardware acceleration is enabled.

Otherwise: No acceleration hardware is detected.

It is also possible to disable offloading using CLI for troubleshooting purposes.

For example:

CLI:

config system global
    set sslvpn-cipher-hardware-acceleration disable
    set sslvpn-kxp-hardware-acceleration disable
end

By default, SSL VPN hardware acceleration is enabled.

Note: From FortiOS v7.2.1 and later versions, SSL VPN Hardware acceleration has been removed.

Related document:

Troubleshooting Tip: Android device SSL VPN Connection Failed with two factor authentication enabled