Engineered for Innovation
Manage security risks at speed, scale, and performance.
Overview
Fortinet continues to innovate and create new Security Processing Units (SPUs) to fulfill one of our key founding principles: security devices should never become a performance bottleneck within a network and security architecture, nor should they sacrifice visibility, user experience, or security to achieve a required application performance. In short, to realize the promise of digital innovation.
Security Compute Rating
The Fortinet family of SPUs radically increase the speed, scale, and performance of Fortinet solutions that can be characterized by measuring the Security Compute Rating. SPU leapfrogs competitors with the industry’s highest Security Compute Ratings for the following benchmarks:
- Stateful Firewall Throughput
- IPsec VPN Performance
- Concurrent Sessions
- Sessions per Second
- Threat Protection
- SSL Inspection
Security Compute Rating is a benchmark that compares the network and security performance of the Fortinet purpose-built ASIC-based NGFW with other NGFWs that fall in the same price range and are built with general-purpose CPUs.
Investing in Innovation
Fortinet continues to innovate and set industry records for performance by achieving the highest security compute ratings delivering consistent security across all enterprise edges with the Fortinet secure networking framework.
The Fortinet Family of SPUs delivers best-of-breed security, scale, and performance across hyperscale data centers to SD-WAN enabled branches and campus locations, all without sacrificing performance or user experience.
Three Families of Fortinet SPUs
Network Processor 7 (NP7)
Network Processors operate in-line to deliver unmatched performance for network functions and hyperscale for stateful firewall functions.
Content Processor 9 (CP9)
As a co-processor to the main CPU, Content Processors offload resource intensive processing and drive content inspection to accelerate security functions.
Security Processing Unit (SP5)
The Security Processing Unit consolidates network and content processing, delivering fast application identification, steering, and overlay performance.
The ASIC Advantage
2023 CyberRatings.org Enterprise Firewall Report
Fortinet Scores 99.88% Security Effectiveness in 2023 CyberRatings
CyberRatings.org conducted an independent test of the FortiGate 600F against the Enterprise Firewall Test Methodology v3.0 at their facility in Austin, Texas.
FortiGate 600F received a 99.88% security effectiveness rating, as well as AAA scores across the following categories:
- Routing & Access Control
- SSL/TLS Functionality
- Threat Prevention
- Stability & Reliability
Security Processing Unit 5 (SP5): Engineered for Efficiency
The fifth generation of the Fortinet Security Processing Unit, SP5, supports customer infrastructure edge transformation with the industry’s highest Security Compute Ratings and power efficiency. SP5 consolidates both network and content processing functions on a single chip, delivering secure computing power that will support the next generation of secure infrastructure.
SP5 is a fully integrated set of security functions, including a Layer 7 firewall, on a fast and cost-effective chip. It meets the high-performance and security requirements for the evolving infrastructure edge to accelerate network and security convergence that delivers best ROI, operational efficiencies and increased security posture.
Key Benefits
- Accelerates network and security convergence enhancing operational efficiencies
- Delivers high-performance application experience with best ROI
- Reduces the power and space requirements
Use Cases
- Support edge compute, OT, branch, campus and 5G infrastructures
- Ensure the edge infrastructure convergence is efficient and cost effective
- Deliver consistent user experience with an optimized and sustainable platform
SP5 Advantage
| Specification | SP5 | Security Compute Rating |
| Firewall | 40 Gbps | 17x |
| IPsecVPN | 37 Gbps | 32x |
| Threat protection | 2.8 Gbps | 3.5x |
| SSL inspection | 2.8 Gbps | NA |
Networking Processing Unit 7 (NP7): Engineered for Hyperscale
NP7 runs at the network layer to speed functions that typically slow CPUs, such as IPv4, IPv6, unicast, and multicast. In addition, NP7 accelerates IPsec decryption, VXLAN termination, and address translation, while providing hardware logging and policy enforcement.
Key Benefits
- Single-session flow with 100 Gbps throughput needed for high-bandwidth internet2 sites.
- Millions of connections per second in hardware as required by high-demand e-commerce.
- Single-digit microsecond latency as called for by a financial exchange.
Use Cases
- Receive market data with the lowest required latency to avoid revenue loss
- Keep up with microbursts of traffic with high-speed packet forwarding
- Accelerate tens of millions of connections per second
NP7 Advantage
| Specification | FortiGate 1800F (NP7 ASIC) | Security Compute Rating |
| Firewall | 198 Gbps | 14x |
| IPsec VPN | 65 Gbps | 15x |
| Threat Protection | 9.1 Gbps | 2.5x |
| SSL Inspection | 17 Gbps | 23x |
| Concurrent Sessions | 12M | 4x |
| Sessions per second | 750k | 7x |
Content Processing Unit 9 (CP9): Engineered for Protection
The ninth generation of Fortinet Content Processor, CP9, is designed for protection. CP9 works as a CPU co-processor, taking on resource-intensive security functions such as Application Identification, IPS (pre-scan, signature correlation, etc.), and antivirus, so the CPU can perform other important tasks.
CP9 also performs pattern matching acceleration, fast inspection of real-time traffic for application identification, all without compromising user experience.
Key Benefits
- Manages internal and external risks while reducing complexity
- Protects applications while optimizing user experience
- Removes blind spots while minimizing performance degradation
Use Cases
- Gain full visibility into clear-text and encrypted traffic flows to implement granular web policies
- Automatically detect and remediate malware
- Implement safety compliance measures such as the Children’s Internet Protection Act (CIPA)
CP9 Advantage
| Specification | FortiGate 201F (CP9 ASIC) | Security Compute Rating |
| IPsec VPN | 13 Gbps | 8.2x |
| SSL Inspection | 4 Gbps | 11.3x |
| Specification | FortiGate 1801F (CP9 ASIC) | Security Compute Rating |
| IPsec VPN | 55 Gbps | 6x |
| SSL Inspection | 17 Gbps | 5x |
