Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
MarcusLeung
New Contributor

Does NP7 support pre-encapsulation for IPsec VPN?

Technical Tip: Fragment IP packet before IPsec enc... - Fortinet Community

 

It seems the NP6 does not support pre-encapsulation and we need to turn off the NP by disable the auto-asic-offload in firewall policy.

 

May I know if NP7 support pre-encapsulation or not?

1 Solution
tthrilok
Staff
Staff

Hi Marcus,

 

Thank you for the query!

 

>> https://docs.fortinet.com/document/fortigate/7.0.5/hardware-acceleration/859331/reassembling-and-off...

 

As checked, NP7 supports assembling and offloading of fragmented packets. Let me know if this answers your query, or If I misunderstood your statement.

 

Thank you!

 

View solution in original post

3 REPLIES 3
tthrilok
Staff
Staff

Hi Marcus,

 

Thank you for the query!

 

>> https://docs.fortinet.com/document/fortigate/7.0.5/hardware-acceleration/859331/reassembling-and-off...

 

As checked, NP7 supports assembling and offloading of fragmented packets. Let me know if this answers your query, or If I misunderstood your statement.

 

Thank you!

 

MarcusLeung

Hi tthrilok,

 

Thank for your reply! I will test the settings later.

MarcusLeung
New Contributor

Hi tthrilok,

 

Thank for your reply!

I will test the settings later.

Labels
Top Kudoed Authors