Fortinet black logo

Hyperscale firewall GUI changes

Hyperscale firewall GUI changes

When hyperscale firewall features are enabled for your Hyperscale firewall for FortiOS 6.2.6 Build 6988, the GUI has the following changes:

Hyperscale firewall policies

Only hyperscale firewall policies are available.

Note

If you are upgrading your hyperscale firewall configuration from FortiOS 6.2.5 to 6.2.6 you must re-configure all of your hyperscale firewall policies using the new 6.2.6 hyperscale firewall policies.

Hyperscale firewall policy options

Hyperscale firewall policies have similar options to normal firewall policies for selecting traffic for which to offload session setup. Hyperscale firewall policies do not support UTM or NGFW features.

CGNAT features in IPv4 and NAT64 firewall policies

IPv4 and NAT64 Hyperscale firewall policies allow you to configure carrier grade NAT (CGNAT) options.

Hardware logging in a firewall policy

You can also add hardware logging to a Hyperscale firewall policy.

Hyperscale hardware logging servers

You can set up multiple hyperscale hardware logging servers and add them to server groups. This is a global feature. If multiple VDOMs are enabled, all VDOMs can use these globally configured servers. To configure hardware logging, go to Log & Report > Hyperscale SPU Offload Log Settings.

Hyperscale firewall GUI changes

When hyperscale firewall features are enabled for your Hyperscale firewall for FortiOS 6.2.6 Build 6988, the GUI has the following changes:

Hyperscale firewall policies

Only hyperscale firewall policies are available.

Note

If you are upgrading your hyperscale firewall configuration from FortiOS 6.2.5 to 6.2.6 you must re-configure all of your hyperscale firewall policies using the new 6.2.6 hyperscale firewall policies.

Hyperscale firewall policy options

Hyperscale firewall policies have similar options to normal firewall policies for selecting traffic for which to offload session setup. Hyperscale firewall policies do not support UTM or NGFW features.

CGNAT features in IPv4 and NAT64 firewall policies

IPv4 and NAT64 Hyperscale firewall policies allow you to configure carrier grade NAT (CGNAT) options.

Hardware logging in a firewall policy

You can also add hardware logging to a Hyperscale firewall policy.

Hyperscale hardware logging servers

You can set up multiple hyperscale hardware logging servers and add them to server groups. This is a global feature. If multiple VDOMs are enabled, all VDOMs can use these globally configured servers. To configure hardware logging, go to Log & Report > Hyperscale SPU Offload Log Settings.