Chapter 8 Hardware Acceleration : Hardware acceleration overview : Security processors (SPs) : Displaying information about security processing modules
  
Displaying information about security processing modules
You can display information about installed SP modules using the CLI command
diagnose npu spm
For example, for the FortiGate-5101C:
FG-5101C # diagnose npu spm list
Available SP Modules:
 
ID Model Slot Interface
0 xh0 built-in port1, port2, port3, port4
base1, base2, fabric1, fabric2
eth10, eth11, eth12, eth13
eth14, eth15, eth16, eth17
eth18, eth19
You can also use this command to get more info about SP processing. This example shows how to display details about how the module is processing sessions using the syn proxy.
diagnose npu spm dos synproxy <sp_id>
This is a partial output of the command:
Number of proxied TCP connections :                 0
Number of working proxied TCP connections :         0
Number of retired TCP connections :                 0
Number of valid TCP connections :                   0
Number of attacks, no ACK from client :             0
Number of no SYN-ACK from server :                  0
Number of reset by server (service not supportted): 0
Number of establised session timeout :              0
Client timeout setting :                            3 Seconds
Server timeout setting :                            3 Seconds