Does NP7 support pre-encapsulation for IPsec VPN?

Forum|Forum|3 years ago
September 22, 2022
2 replies
2196 views

Technical Tip: Fragment IP packet before IPsec enc... - Fortinet Community

It seems the NP6 does not support pre-encapsulation and we need to turn off the NP by disable the auto-asic-offload in firewall policy.

May I know if NP7 support pre-encapsulation or not?

FortiGate

Best answer by tthrilok

Hi Marcus,

Thank you for the query!

>> https://docs.fortinet.com/document/fortigate/7.0.5/hardware-acceleration/859331/reassembling-and-offloading-fragmented-packets

As checked, NP7 supports assembling and offloading of fragmented packets. Let me know if this answers your query, or If I misunderstood your statement.

Thank you!

tthrilokAnswer

Staff

Hi Marcus,

Thank you for the query!

>> https://docs.fortinet.com/document/fortigate/7.0.5/hardware-acceleration/859331/reassembling-and-offloading-fragmented-packets

As checked, NP7 supports assembling and offloading of fragmented packets. Let me know if this answers your query, or If I misunderstood your statement.

Thank you!

MarcusLeungAuthor

Visitor III

Hi tthrilok,

Thank for your reply! I will test the settings later.

MarcusLeungAuthor

Visitor III

Hi tthrilok,

Thank for your reply!

I will test the settings later.

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded