Fa2 Interfaces And Active-Active Ha Performance; Base Backplane Gigabit Communication; Fortigate-5005-Dist Security System - Fortinet FortiGate-5000 Introduction Manual
Fortigate-5000 series
Hide thumbs
Also See for FortiGate-5000:
- Backplane communications manual (47 pages) ,
- Quick manual (37 pages) ,
- Firmware and fortiusb manual (23 pages)
Table of Contents
Advertisement
Base backplane gigabit communication
FA2 interfaces and active-active HA performance
Base backplane gigabit communication
FortiGate-5005-DIST security system
44
•
Firewall and intrusion protection (IPS), when there is a reasonable percentage
of P2P packets.
•
Firewall, intrusion protection (IPS), and antivirus, when there is a reasonable
percentage of P2P packets.
•
Firewall and IPSec VPN applications.
The following traffic scenarios should be handled by the normal (or non-
accelerated) FortiGate-5005FA2 interfaces:
•
Session oriented traffic when the session lifetime is very short.
•
Firewall and antivirus only applications.
Traffic will not be off-loaded to the FortiGate-5005FA2 accelerator module. The
result will be high CPU usage because of the high CPU requirement for
antivirus scanning.
FortiOS v3.0 MR4 firmware can also use FA2 acceleration to improve
active-active HA load balancing performance. See the
the
FortiGate HA Guide
for more information.
The FortiGate-5005FA2 base1 and base2 backplane gigabit interfaces can be
used for HA heartbeat communication between FortiGate-5005FA2 boards
installed in the same or in different FortiGate-5000 chassis. You can also
configure FortiGate-5005FA2 boards to use the base backplane interfaces for
data communication between FortiGate boards. To support base backplane
communications your FortiGate-5140 or FortiGate-5050 chassis must include one
or more FortiSwitch-5003 boards. FortiSwitch-5003 boards are installed in chassis
slots 1 and 2. The FortiGate-5020 chassis supports base backplane
communication with no additions or changes to the chassis.
For information about base backplane communication in FortiGate-5140 and
FortiGate-5050 chassis, see the
Guide. For information about the FortiSwitch-5003 board, see the
FortiSwitch-5003
Guide.
You can install FortiGate-5005FA2 boards as worker boards in a
FortiGate-5005-DIST security system. Worker boards apply FortiGate security
system functionality such as applying firewall policies, virus scanning, IPS and
routing to distributed traffic.
For complete information about the FortiGate-5005-DIST security system and the
role of worker boards, see the
Administration
Guide.
FortiGate-5005FA2 security system
FortiGate HA Overview
FortiGate-5000 Base Backplane Communication
FortiGate-5005-DIST Security System
FortiGate-5000 Series Introduction
or
01-30000-83466-20090108
Advertisement
Table of Contents
