FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes additional actions needed when disabling nTurbo globally for troubleshooting purposes. The existing sessions are not marked 'dirty', and long-lived sessions are affected.
Scope
FortiGate.
Solution
If, for any reason, nTurbo needs to be disabled globally:
FG # config ips global FG (global) # set np-accel-mode none FG (global) # end
The existing sessions that are already offloaded are not marked 'dirty'.
As a result, this specific traffic is dropped.
Solution. Any of the options below will resolve the issue:
Clear all sessions after disabling nTurbo. This will delete all sessions.
