IPS hardware acceleration
FortiGate units with CPx and NPx processes can accelerate IPS performance by offloading pattern matching to the CPx or NPx processor. If your FortiGate hardware supports this feature the following CLI command will be available:
config ips global
set hardware-accel-mode {engine-pick | none | CP-only | NP-only | NP+CP}
end
Where:
• engine-pick, let the IPS engine pick the best mode.
• none, hardware acceleration disabled.
• CP-Only, accelerate with content processors only.
• NP-only, accelerate with network processor only.
• NP+CP, accelerate with both network and content processors.