The NP verifies the session key or IPSec Security Association (SA) to ensure that the traffic matches an established session and is eligible for offloading. This process is part of the NP's function in optimizing secure traffic handling.
A is correct, according to Study guide page 44.
D is not correct. Fortigate CPU doesn't immediately offload the first packets of SYN/ACK and ACK of the three-way handshake to NP like the question implies. It processes them, to perform the required checks to determine whether the packets can be accelerated and offloaded to the NP processor.
Both A & D are correct though, as stated on page 44 for NP check of SA and session, and on page 46 for TCP NP Session Flow. Here the following is stated:
If the FortiGate CPU determines that the conditions are met for the first part of the traffic, then the CPU accelerates and offloads the rest of the traffic to the NP6 processor.
D is not correct. Fortigate CPU doesn't immediately offload the first packets of SYN/ACK and ACK of the three-way handshake to NP. It processes them, to perform the required checks to determine whether the packets can be accelerated and offloaded to the NP processor.
D is not correct. Fortigate CPU doesn't offload the first packets of SYN/ACK and ACK of the three-way handshake to NP. It processes them, to perform the required checks to determine
whether the packets can be accelerated and offloaded to the NP processor.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
myrmidon3
3 months, 1 week agosugar12
8 months, 3 weeks agohavokdu
11 months agocharruco
1 year agotruserud
1 year, 1 month agohavokdu
11 months ago5deee77
1 year, 1 month ago33k_
1 year, 1 month agomollyk70
1 year, 1 month agohavokdu
11 months agomollyk70
1 year, 1 month ago