Skip to content Skip to navigation Skip to footer


Fortinet continues to innovate and create new Security Processing Units (SPUs) to fulfill one of our key founding principles: security devices should never become a performance bottleneck within a network and security architecture, nor should they sacrifice visibility, user experience, or security to achieve a required application performance. In short, to realize the promise of digital innovation.

Security Compute Rating

The Fortinet family of SPUs radically increase the speed, scale, and performance of Fortinet solutions that can be characterized by measuring the Security Compute Rating. SPU leapfrogs competitors with the industry’s highest Security Compute Ratings for the following benchmarks:

  • Stateful Firewall Throughput
  • IPsec VPN Performance
  • Concurrent Sessions
  • Sessions per Second
  • Threat Protection
  • SSL Inspection

Security Compute Rating is a benchmark that compares the network and security performance of the Fortinet purpose-built ASIC-based NGFW with other NGFWs that fall in the same price range and are built with general-purpose CPUs.


Three Families of Fortinet SPUs

Network Processor 7 (NP7)

Network Processors operate in-line to deliver unmatched performance for network functions and hyperscale for stateful firewall functions.

Content Processor 9 (CP9)

As a co-processor to the main CPU, Content Processors offload resource intensive processing and drive content inspection to accelerate security functions.

Security Processing Unit 5 (SP5)

The Security Processing Unit consolidates network and content processing, delivering fast application identification, steering, and overlay performance.



Security Processing Unit 5 (SP5): Engineered for Efficiency

The fifth generation of the Fortinet Security Processing Unit, SP5, supports customer infrastructure edge transformation with the industry’s highest Security Compute Ratings and power efficiency. SP5 consolidates both network and content processing functions on a single chip, delivering secure computing power that will support the next generation of secure infrastructure.

SP5 is a fully integrated set of security functions, including a Layer 7 firewall, on a fast and cost-effective chip. It meets the high-performance and security requirements for the evolving infrastructure edge to accelerate network and security convergence that delivers best ROI, operational efficiencies and increased security posture.

Key Benefits

  • Accelerates network and security convergence enhancing operational efficiencies
  • Delivers high-performance application experience with best ROI
  • Reduces the power and space requirements

Use Cases

  • Support edge compute, OT, branch, campus and 5G infrastructures
  • Ensure the edge infrastructure convergence is efficient and cost effective
  • Deliver consistent user experience with an optimized and sustainable platform

SP5 Advantage

Specification SP5 Security Compute Rating
Firewall 40 Gbps 17x
IPsecVPN 37 Gbps 32x
Threat protection 2.8 Gbps 3.5x
SSL inspection 2.8 Gbps NA


Networking Processing Unit 7 (NP7): Engineered for Hyperscale

NP7 runs at the network layer to speed functions that typically slow CPUs, such as IPv4, IPv6, unicast, and multicast. In addition, NP7 accelerates IPsec decryption, VXLAN termination, and address translation, while providing hardware logging and policy enforcement.

Key Benefits

  • Single-session flow with 100 Gbps throughput needed for high-bandwidth internet2 sites.
  • Millions of connections per second in hardware as required by high-demand e-commerce.
  • Single-digit microsecond latency as called for by a financial exchange.

Use Cases

  • Receive market data with the lowest required latency to avoid revenue loss
  • Keep up with microbursts of traffic with high-speed packet forwarding
  • Accelerate tens of millions of connections per second

NP7 Advantage

Specification FortiGate 1800F (NP7 ASIC) Security Compute Rating
Firewall 198 Gbps 14x
IPsec VPN 65 Gbps 15x
Threat Protection 9.1 Gbps 2.5x
SSL Inspection 17 Gbps 23x
Concurrent Sessions 12M 4x
Sessions per second 750k 7x


Content Processing Unit 9 (CP9): Engineered for Protection

The ninth generation of Fortinet Content Processor, CP9, is designed for protection. CP9 works as a CPU co-processor, taking on resource-intensive security functions such as Application Identification, IPS (pre-scan, signature correlation, etc.), and antivirus, so the CPU can perform other important tasks.

CP9 also performs pattern matching acceleration, fast inspection of real-time traffic for application identification, all without compromising user experience.

Key Benefits

  • Manages internal and external risks while reducing complexity
  • Protects applications while optimizing user experience
  • Removes blind spots without minimizing performance degradation

Use Cases

  • Gain full visibility into clear-text and encrypted traffic flows to implement granular web policies
  • Automatically detect and remediate malware
  • Implement safety compliance measures such as the Children’s Internet Protection Act (CIPA)

CP9 Advantage

NSS Labs NGFW 2019 – Performance % degradation with HTTPS Traffic

Investing in Innovation

Fortinet continues to innovate and set industry records for performance by achieving the highest security compute ratings delivering consistent security across all enterprise edges with the Fortinet secure networking framework.

The Fortinet Family of SPUs delivers best-of-breed security, scale, and performance across hyperscale data centers to SD-WAN enabled branches and campus locations, all without sacrificing performance or user experience.