Accelerated Ips, Ssl Vpn, And Ipsec Vpn (Cp9 Content Processors) - Fortinet FortiGate-7000E Series Manual

FPM-7620E processing module
FPM-7620E hardware architecture
CPU
CPU
Chassis Base Backplane

Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors)

The FPM-7620E includes eight CP9 processors that provide the following performance enhancements:
Flow-based inspection (IPS, application control etc.) pattern matching acceleration with over 10Gbps throughput
l
IPS pre-scan
l
IPS signature correlation
l
Full match processors
l
High performance VPN bulk data engine
l
IPsec and SSL/TLS protocol processor
l
DES/3DES/AES128/192/256 in accordance with FIPS46-3/FIPS81/FIPS197
l
MD5/SHA-1/SHA256/384/512-96/128/192/256 with RFC1321 and FIPS180
l
HMAC in accordance with RFC2104/2403/2404 and FIPS198
l
ESN mode
l
GCM support for NSA "Suite B" (RFC6379/RFC6460) including GCM-128/256; GMAC-128/256
l
Key Exchange Processor that supports high performance IKE and RSA computation
l
Public key exponentiation engine with hardware CRT support
l
Primary checking for RSA key generation
l
Handshake accelerator with automatic key material generation
l
True Random Number generator
l
Elliptic Curve support for NSA "Suite B"
l
FPM-7620E Processing Module Guide
CP9
CP9 CP9
1G
1G
CP9 CP9
CP9
NP6
np6_0
80G
Chassis Fabric Backplane
CP9
CP9
NP6
NP6
np6_1 np6_2
80G
Fortinet Technologies Inc.
8
System Bus
NP6
np6_3