Engineered for Innovation
Manage security risks at speed, scale, and performance.Kontakt
Fortinet continues to innovate and create new Security Processing Units (SPUs) to fulfill one of our key founding principles: security devices should never become a performance bottleneck within a network and security architecture, nor should they sacrifice visibility, user experience, or security to achieve a required application performance. In short, to realize the promise of digital innovation.
The Fortinet family of SPUs radically increase the speed, scale, and performance of Fortinet solutions that can be characterized by measuring the Security Compute Rating. SPU leapfrogs competitors with the industry’s highest Security Compute Ratings for the following benchmarks:
Security Compute Rating is a benchmark that compares the network and security performance of the Fortinet purpose-built ASIC-based NGFW with other NGFWs that fall in the same price range and are built with general-purpose CPUs.
Network Processors operate in-line to deliver unmatched performance for network functions and hyperscale for stateful firewall functions.
As a co-processor to the main CPU, Content Processors offload resource intensive processing and drive content inspection to accelerate security functions.
The Security Processing Unit consolidates network and content processing, delivering fast application identification, steering, and overlay performance.
The fifth generation of the Fortinet Security Processing Unit, SP5, supports customer infrastructure edge transformation with the industry’s highest Security Compute Ratings and power efficiency. SP5 consolidates both network and content processing functions on a single chip, delivering secure computing power that will support the next generation of secure infrastructure.
SP5 is a fully integrated set of security functions, including a Layer 7 firewall, on a fast and cost-effective chip. It meets the high-performance and security requirements for the evolving infrastructure edge to accelerate network and security convergence that delivers best ROI, operational efficiencies and increased security posture.
|Specification||SP5||Security Compute Rating|
|Threat protection||2.8 Gbps||3.5x|
|SSL inspection||2.8 Gbps||NA|
NP7 runs at the network layer to speed functions that typically slow CPUs, such as IPv4, IPv6, unicast, and multicast. In addition, NP7 accelerates IPsec decryption, VXLAN termination, and address translation, while providing hardware logging and policy enforcement.
|Specification||FortiGate 1800F (NP7 ASIC)||Security Compute Rating|
|IPsec VPN||65 Gbps||15x|
|Threat Protection||9.1 Gbps||2.5x|
|SSL Inspection||17 Gbps||23x|
|Sessions per second||750k||7x|
The ninth generation of Fortinet Content Processor, CP9, is designed for protection. CP9 works as a CPU co-processor, taking on resource-intensive security functions such as Application Identification, IPS (pre-scan, signature correlation, etc.), and antivirus, so the CPU can perform other important tasks.
CP9 also performs pattern matching acceleration, fast inspection of real-time traffic for application identification, all without compromising user experience.
NSS Labs NGFW 2019 – Performance % degradation with HTTPS Traffic
Fortinet continues to innovate and set industry records for performance by achieving the highest security compute ratings delivering consistent security across all enterprise edges with the Fortinet secure networking framework.
The Fortinet Family of SPUs delivers best-of-breed security, scale, and performance across hyperscale data centers to SD-WAN enabled branches and campus locations, all without sacrificing performance or user experience.