Technical Tip: Understanding DoS Policy Offload on FortiGate 100/101F and 200/201F Models

[v_ceban]

Description	This article describes the functionality and configuration of DoS policy offload on FortiGate 100/101F and 200/201F models.
Scope	FortiGate 100/101F and 200/201F models.
Solution	FortiGate 100F and 200F models use NP6Xlite ASIC processors and are equipped with a SYNPROXY module. This module enables partial offload of DoS features, enhancing performance and reducing CPU load. To enable DoS policy offload on these models, use the following command:     config system settings         set policy-offload-level dos-offload     end SYNPROXY is a TCP SYN packet proxy that protects any TCP server (such as a web server) from SYN floods and similar DoS attacks. Related articles: DoS policy hardware acceleration