[FortiLightHouse-announcements] Version 1.14 released

[Ondrej Holecek]

Hello,

in version 1.14 there are two new commands implemented, both related to IPSec:

- “ipseccpu <https://fortilighthouse.com/cli/docs/usage/#ipseccpu>” : This is to see on which CPU(s) IPSec is decrypting/encrypting packets (only useful when this is happening in software and it is not offloaded to hardware like NP6). It can be useful when one or more CPUs on FortiOS is to busy and you want to find out whether it can be because of IPSec operations that are perfomed there.

- “ipsectop <https://fortilighthouse.com/cli/docs/usage/#ipsectop>” : Displays traffic statistics about (phase2) tunnels and/or summarized statistics about phase1s. Advanced views are available to see more details, including percentage of traffic inside p1 or overall. Detailed filtering and sorting is available via additional command line parameters. This is useful when IPSec is not offloaded to hardware (or generally on VMs) to find out what tunnels are consuming most bandwidth.




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.holecek.eu/pipermail/fortilighthouse-announcements/attachments/20220815/9d4d79c8/attachment.htm>