Focus

What's New in the NetSec Platform

Intelligent Traffic Offload - NAT Support on VM-Series Firewall

Table of Contents

Intelligent Traffic Offload - NAT Support on VM-Series Firewall

VM-Series firewall with a software cut through based offload supporting NAT.

Intelligent Traffic Offload (ITO) is a VM-Series firewall Security subscription that, when configured with the supported NVIDIA Bluefield infrastructure compute platform, increases capacity throughput for the VM-Series firewall. In previous releases, Intelligent Traffic Offload required that you deploy your VM-Series firewall in virtual wire mode. This limitation prevented deployments of VM-Series firewalls with an ITO subscription from using NAT for perimeter security.

This release removes that limitation by allowing you to deploy your VM-Series firewall with an Intelligent Traffic Offload subscription in Layer 3 mode that supports NAT for IPv4. With this functionality, your ITO subscription fully supports environments requiring robust security features that prevent end-user devices from being exposed to outside threats. NAT support extends to NAT44 and DIPP in for both deployments with Intelligent Traffic Offload (DPU-based) and software cut-through for traffic inspection.

Intelligent Traffic Offload - Layer 3 (Dynamic Routing) Support on VM-Series Firewall

Zero Touch Provisioning (ZTP) Onboarding Enhancements