Fortinet FortiGate-7000E, FPM-7620E Series Manual
FPM-7620E Processing Module Guide
FortiGate-7000E Series
FORTINET DOCUMENT LIBRARY
https://docs.fortinet.com
FORTINET VIDEO GUIDE
https://video.fortinet.com
FORTINET BLOG
https://blog.fortinet.com
CUSTOMER SERVICE & SUPPORT
https://support.fortinet.com
FORTINET TRAINING & CERTIFICATION PROGRAM
https://www.fortinet.com/support-and-training/training.html
NSE INSTITUTE
https://training.fortinet.com
FORTIGUARD CENTER
https://fortiguard.com/
END USER LICENSE AGREEMENT
https://www.fortinet.com/doc/legal/EULA.pdf
FEEDBACK
Email: techdoc@fortinet.com
October 28, 2019
FPM-7620E Processing Module Guide
01-606-374568-20191028
TABLEOFCONTENTS
Change log 4
FPM-7620E processing module 5
Mounting hardware 5
Module levers 5
Power sliders 6
Secure screws 6
Physical description 6
Front panel LEDs 7
Turning the module on and off 7
NMI switch 7
NP6 network processors - offloading data traffic 7
Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors) 8
Hardware installation 10
FPM-7620E mounting hardware 10
Inserting a FPM-7620E module into a chassis 11
Shutting down and removing a FPM-7620E module from a chassis 15
Troubleshooting 20
FPM-7620E does not startup 20
FPM-7620E status LED is flashing during system operation 20
Cautions and warnings 21
Environmental specifications 21
Safety 22
Regulatory notices 23
Federal Communication Commission (FCC) – USA 23
Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada 23
European Conformity (CE) - EU 23
Voluntary Control Council for Interference (VCCI) – Japan 24
Bureau of Standards Metrology and Inspection (BSMI) – Taiwan 24
China 24
FPM-7620E Processing Module Guide Fortinet Technologies Inc.
Change log
Date Change description
October 28, 2019 Restructuring and bug fixing.
FPM-7620E Processing Module Guide Fortinet Technologies Inc.
FPM-7620E processing module
Power
Slider
Module
Lever
Secure
Screw
Module
Lever
Power
Slider
Secure
Screw
Status, Alarm,
and Power LEDS
Power
Button
NMI
Button
The FPM-7620E processing module is a high-performance worker module that processes sessions load balanced to it
by FortiGate-7000 series interface (FIM) modules over the chassis fabric backplane. The FPM-7620E can be installed in
any FortiGate-7000 series chassis in slots 3 and up.
The FPM-7620E includes two 80Gbps connections to the chassis fabric backplane and two 1Gbps connections to the
base backplane. The FPM-7620E processes sessions using a dual CPU configuration, accelerates network traffic
processing with four NP6 processors, and accelerates content processing with eight CP9 processors. The NP6 network
processors are connected by the FIM switch fabric so all supported traffic types can be fast path accelerated by the NP6
processors.
FPM-7620E front panel
Mounting hardware
Module levers
FPM-7620E Processing Module Guide Fortinet Technologies Inc.
Use the module levers, power sliders, and secure screws to insert, secure and remove the module from the chassis.
Carefully slide the module all of the way into the chassis slot and fully close the module levers to seat the module into
the chassis slot and to connect the module to the chassis backplane connectors. When both module levers are fully
closed, the power sliders can be lowered to their bottom position, locking the module levers and turning on power to the
module.
Raise the power sliders to unlock the module levers and turn off module power. Then open the module levers to eject
the module from the backplane connectors; allowing the module to be removed from the chassis.
The module lever mechanism helps reduce the engagement force required to insert or eject the module from the
backplane connectors.
FPM-7620E processing module 6
The module levers do not fully secure the module in the chassis. The secure screws must be tightened to reliably secure
the module in the chassis and to make sure the module remains securely connected to the backplane for power and
network connectivity.
Power sliders
Close the module levers and move the power sliders to their bottom position to lock the module levers and turn the
module power switch on.
Move the power sliders to the top position to unlock the module levers and turn the module power switch off.
Gently push the power sliders down to make sure they are in their bottom position. If the module LEDs do not light the
module is not receiving power. If this happens check the power sliders to make sure they are in their bottom position.
Secure screws
Fully tighten the secure screws to lock the module in the chassis providing a secure and reliable connection with the
backplane.
Loosen the secure screws before ejecting the module from the chassis.
Physical description
Dimensions 1.69 x 17.11 x 18.49 in. (43 x 435 x 470 mm) (Height x Width x Length)
Weight 14.0 lb. (6.4 kg)
Operating Temperature 32 to 104°F (0 to 40°C)
Storage Temperature -31 to 158°F (-35 to 70°C)
Relative Humidity 10% to 90% (Non-condensing)
Power consumption Max: 410W; Average: 320W
Max Current 34A
Heat Dissipation 1395BTU/h
Joules/h 1466KJ/h
FPM-7620E Processing Module Guide Fortinet Technologies Inc.
FPM-7620E processing module 7
Front panel LEDs
LED State Description
STATUS Off The FPM-7620E is powered off.
Green The FPM-7620E is powered on and operating normally.
Flashing Green The FPM-7620E is starting up.
ALARM Red Major alarm.
Amber Minor alarm
Off No alarms
POWER Green The FPM-7620E is powered on and operating normally.
Off The FPM-7620E is powered off.
Turning the module on and off
You can use the front panel power button to turn the FPM-7620E power on or off. If the FPM-7620E is powered on,
press the power switch to turn it off. If the FPM-7620E is turned off and installed in a chassis slot, press the power
button to turn it on.
NMI switch
When working with Fortinet Support to troubleshoot problems with the FPM-7620E you can use the front panel nonmaskable interrupt (NMI) switch to assist with troubleshooting. Pressing this switch causes the software to dump
registers/backtraces to the console. After the data is dumped the FPM-7620E reboots. While the FPM-7620E is
rebooting, traffic is temporarily blocked. The FPM-7620E should restart normally and traffic can resume once the it is up
and running.
NP6 network processors - offloading data traffic
The four FPM-7620E NP6 network processors, eight CP9 processors, and FIM module integrated switch fabric (ISF)
provide hardware acceleration by offloading data traffic from the FPM-7620E CPUs. The result is enhanced network
performance provided by the NP6 processors plus the network processing load is removed from the CPU. The NP6
processor can also handle some CPU intensive tasks, like IPsec VPN encryption/decryption. Because of the integrated
switch fabric, all sessions are fast-pathed and accelerated.
FPM-7620E Processing Module Guide Fortinet Technologies Inc.
FPM-7620E processing module 8
Chassis Base Backplane
Chassis Fabric Backplane
CPU
CPU
1G
1G
80G
80G
CP9
CP9
CP9
CP9
CP9
CP9
CP9
CP9
NP6
np6_0
NP6
np6_1
NP6
np6_2
NP6
np6_3
System Bus
FPM-7620E hardware architecture
Accelerated IPS, SSL VPN, and IPsec VPN (CP9 content processors)
The FPM-7620E includes eight CP9 processors that provide the following performance enhancements:
l Flow-based inspection (IPS, application control etc.) pattern matching acceleration with over 10Gbps throughput
l IPS pre-scan
l IPS signature correlation
l Full match processors
l High performance VPN bulk data engine
l IPsec and SSL/TLS protocol processor
l DES/3DES/AES128/192/256 in accordance with FIPS46-3/FIPS81/FIPS197
l MD5/SHA-1/SHA256/384/512-96/128/192/256 with RFC1321 and FIPS180
l HMAC in accordance with RFC2104/2403/2404 and FIPS198
l ESN mode
l GCM support for NSA "Suite B" (RFC6379/RFC6460) including GCM-128/256; GMAC-128/256
l Key Exchange Processor that supports high performance IKE and RSA computation
l Public key exponentiation engine with hardware CRT support
l Primary checking for RSA key generation
l Handshake accelerator with automatic key material generation
l True Random Number generator
l Elliptic Curve support for NSA "Suite B"
FPM-7620E Processing Module Guide Fortinet Technologies Inc.
Loading...