FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes how to verify IPSA (Intrusion Prevention System Acceleration) is supported on a FortiGate device.
Scope
FortiGate.
Solution
If it is uncertain whether IPSA is supported on a FortiGate device, run the following command to show CPs that are recognized by the system:
get hardware status
For example:
FGT-EMS # get hardware status Model name: FortiGate-VM64 ASIC version: not available CPU: Intel(R) Xeon(R) Gold 6338 CPU @ 2.00GHz Number of CPUs: 1 RAM: 1993 MB Compact Flash: 2056 MB /dev/sda Hard disk: 10240 MB /dev/sdb USB Flash: not available
Result: No CPs were detected on this device.
FortiGate-1000D # get hardware status
Model name: FortiGate-1000D ASIC version: CP8 ASIC SRAM: 64M CPU: Intel(R) Xeon(R) CPU E3-1275 v3 @ 3.50GHz Number of CPUs: 8 RAM: 16063 MB Compact Flash: 3840 MB /dev/sda Hard disk: 244198 MB /dev/sdb USB Flash: not available Network Card chipset: FortiASIC NP6 Adapter (rev.)
Result: A CP8 was detected by the system. The device's setting cp-accel-mode can be set either to basic or none. If the device has two or more CP8s, select advanced. If the device has one or more CP9s or CP10s, cp-accel-mode can also be set to advanced.
