Does NP7 support pre-encapsulation for IPsec VPN?

[MarcusLeung]

Technical Tip: Fragment IP packet before IPsec enc... - Fortinet Community

It seems the NP6 does not support pre-encapsulation and we need to turn off the NP by disable the auto-asic-offload in firewall policy.

May I know if NP7 support pre-encapsulation or not?

[tthrilok · Accepted solution]

Hi Marcus,

Thank you for the query!

>> https://docs.fortinet.com/document/fortigate/7.0.5/hardware-acceleration/859331/reassembling-and-off...

As checked, NP7 supports assembling and offloading of fragmented packets. Let me know if this answers your query, or If I misunderstood your statement.

Thank you!

[MarcusLeung]

Hi tthrilok,

Thank for your reply! I will test the settings later.

[MarcusLeung]

Hi tthrilok,

Thank for your reply!

I will test the settings later.