Software Cut-through based Offload on CN-Series Firewall
You can now use Intelligent Traffic Offload subscription on CN-Series as a Kubernetes
CNF mode to unlock more performance and protect mobile networks leveraging GTP
Security.
Intelligent Traffic Offload (ITO) allows your
CN-Series next-generation firewall to optimize security and network performance
simultaneously. This service eliminates the traditional compromise between
deep security inspection and necessary network throughput, focusing on successful
outcomes and user benefits. The ITO service intelligently analyzes new network flows to
determine if inspection is required, ensuring that only traffic needing advanced
protection is routed for analysis. By intelligently offloading known or trusted flows,
you maximize network speed and reduce operational costs without sacrificing
comprehensive security. Furthermore, ITO provides critical support for high-throughput
protocols like GTP-U tunnel traffic. This capability ensures that after an initial Layer
7 inspection, subsequent packets are processed efficiently, leveraging optimized data
paths for minimal latency in your CN-Series deployment.
