site-2-site VPN connections

[kinmun]

i am using fortigate 300D HA with fortiOS 5.4.4.

currently I have 2 site-2-site vpn connection with 3rd parties.

how many site-2-site VPN connections can this firewall support without impacting the performance of the unit??

am evalauting whether to setup site-2-site for backup ipvpn lines.

[ede_pfau]

Oodles.

Datasheet says 2000, so a couple of 100 tunnels should be OK.

IF !

If the encryption/decryption is offloaded to the NP6 - so AES128, AES256, SHA256 should all be accelerated but SHA512 probably is not. There is a guide to "Acceleration" somewhere on docs.fortinet.com if you need the exact details.

If VPN traffic is not offloaded it must be handled by the CPU, and while the 300D is not weak it may well be brought down with a couple of dozens of IPsec tunnels.