Skip to main content
MahmutKarali
Explorer
February 3, 2026
Solved

How to enable NPU in NAT internet exit rules

  • February 3, 2026
  • 2 replies
  • 233 views

Hello everyone,

I have a Fortigate 60F device running Fortios 7.6.4.

I can't use NPU for my internet exit rules. The CPU is 100% busy. I can use NPU for local traffic, but not when exiting to the internet. What could be the reason?

I look forward to you

Best answer by funkylicious

if you use sdwan and enable at firewall policy level passive-wan-health-measurement this could a cause and what adam said.

L.E. usually a diag sys session filter/list tells you why a session/policy isnt offloaded.

2 replies

adambomb1219
SuperUser
SuperUser
February 3, 2026

What do your policies look like? What inspection profiles are enabled? NPU will be selected automatically.

https://docs.fortinet.com/document/fortigate/7.6.5/hardware-acceleration/758378/fortigate-60f-and-61f-fast-path-architecture

funkylicious
SuperUser
SuperUser
February 3, 2026

if you use sdwan and enable at firewall policy level passive-wan-health-measurement this could a cause and what adam said.

L.E. usually a diag sys session filter/list tells you why a session/policy isnt offloaded.

"jack of all trades, master of none"
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT