Accelerated Ips, Ssl Vpn, And Ipsec Vpn (Cp9 Content Processors) - Fortinet FortiGate-7060E Handbook

FIM-7904E interface module

Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors)

The FPM-7620E includes eight CP9 processors that provide the following performance enhancements:
Flow-based inspection (IPS, application control etc.) pattern matching acceleration with over 10Gbps throughput
l
IPS pre-scan
l
IPS signature correlation
l
Full match processors
l
High performance VPN bulk data engine
l
IPsec and SSL/TLS protocol processor
l
DES/3DES/AES128/192/256 in accordance with FIPS46-3/FIPS81/FIPS197
l
MD5/SHA-1/SHA256/384/512-96/128/192/256 with RFC1321 and FIPS180
l
HMAC in accordance with RFC2104/2403/2404 and FIPS198
l
ESN mode
l
GCM support for NSA "Suite B" (RFC6379/RFC6460) including GCM-128/256; GMAC-128/256
l
Key Exchange Processor that supports high performance IKE and RSA computation
l
Public key exponentiation engine with hardware CRT support
l
Primary checking for RSA key generation
l
Handshake accelerator with automatic key material generation
l
True Random Number generator
l
Elliptic Curve support for NSA "Suite B"
l
Sub public key engine (PKCE) to support up to 4096 bit operation directly (4k for DH and 8k for RSA with CRT)
l
DLP fingerprint support
l
TTTD (Two-Thresholds-Two-Divisors) content chunking
l
Two thresholds and two divisors are configurable
l
FortiGate-7000
Fortinet Technologies Inc.
Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors)
30