Which condition must be met for offloading the encryption and decryption of IPsec traffic to an NP6 processor?

Which condition must be met for offloading the encryption and decryption of IPsec traffic to an NP6 processor?

• A. No protection profile can be applied over the IPsec traffic.
• B. Phase-2 anti-replay must be disabled.
• C. Both phase 1 and phase 2 must use encryption algorithms supported by the NP6.
• D. IPsec traffic must not be inspected by any FortiGate session helper.

Answer: (C)

For offloading the encryption and decryption of IPsec traffic to an NP6 processor, both phase 1 and phase 2 must use encryption algorithms supported by the NP6. This condition is crucial because the NP6 processor is designed to accelerate specific encryption algorithms. Only when these algorithms are used in both the initial negotiation phase (phase 1) and the data transfer phase (phase 2) can the NP6 effectively offload the processing workload from the main CPU. This offloading enhances the overall performance of the device by freeing resources for other tasks, ultimately ensuring more efficient handling of IPsec traffic. Other conditions, while relevant to the configuration and security aspects of IPsec, do not directly pertain to the NP6's capability to perform encryption and decryption offloading.

For offloading the encryption and decryption of IPsec traffic to an NP6 processor, both phase 1 and phase 2 must use encryption algorithms supported by the NP6. This condition is crucial because the NP6 processor is designed to accelerate specific encryption algorithms. Only when these algorithms are used in both the initial negotiation phase (phase 1) and the data transfer phase (phase 2) can the NP6 effectively offload the processing workload from the main CPU. This offloading enhances the overall performance of the device by freeing resources for other tasks, ultimately ensuring more efficient handling of IPsec traffic.

Other conditions, while relevant to the configuration and security aspects of IPsec, do not directly pertain to the NP6's capability to perform encryption and decryption offloading.