Which statement about network processor (NP) offloading is true?
Which statement about network processor (NP) offloading is true?
The network processor (NP) checks the session key or IPSec Security Association (SA). This is a fundamental function of NP offloading as it ensures secure and efficient handling of network traffic. Other options provided either do not describe typical responsibilities of network processors or contain incorrect assertions about the process. For instance, while the FortiGate CPU does interact with TCP traffic during the initial handshake, it does not offload the first packets of SYN/ACK and ACK of the three-way handshake directly to the NP without processing.
Only A is correct, D is wrong because for TCP traffic, the first packets of the three-way handshake must first go to the FortiGate CPU.
A correct, P44 study guide 7.2
D is also correct....
D is not correct. Fortigate CPU doesn't offload the first packets of SYN/ACK and ACK of the three-way handshake to NP. It processes them, to perform the required checks to determine whether the packets can be accelerated and offloaded to the NP processor.
study guide 7.2, page 44
Both A & D are correct though, as stated on page 44 for NP check of SA and session, and on page 46 for TCP NP Session Flow. Here the following is stated: If the FortiGate CPU determines that the conditions are met for the first part of the traffic, then the CPU accelerates and offloads the rest of the traffic to the NP6 processor.
D is not correct. Fortigate CPU doesn't immediately offload the first packets of SYN/ACK and ACK of the three-way handshake to NP. It processes them, to perform the required checks to determine whether the packets can be accelerated and offloaded to the NP processor.
A is correct study guide 7.2, page 44
A is correct, according to Study guide page 44. D is not correct. Fortigate CPU doesn't immediately offload the first packets of SYN/ACK and ACK of the three-way handshake to NP like the question implies. It processes them, to perform the required checks to determine whether the packets can be accelerated and offloaded to the NP processor.