Per Security Policy-based Express Forwarding
Focus
Focus
What's New in the NetSec Platform

Per Security Policy-based Express Forwarding

Table of Contents

Per Security Policy-based Express Forwarding

Learn about Per Security Policy-based Express Forwarding.
This release provides support for Per Security Policy-based Express Forwarding. This feature is a low latency solution designed for high frequency trading in Financial Technology environments where ultra-low latency is critical for operations. This solution introduces an express forwarding path to select PA-5500 series firewalls, allowing mission-critical traffic (like FIX protocol trading feeds) to bypass deep buffer bottlenecks by significantly reducing latency. Specifically, it provides security performance at low latency required by major financial institutions without sacrificing the next generation firewall visibility required to protect such environments. Security policy-based express forwarding:
  • Achieves latency of sub 10 microseconds for hardware-offloaded packets.
  • Introduces a pathway within the NGFW architecture express pass App-ID overridden packets.
This feature is available on PA-5540, PA-5550, PA-5560, PA-5570 and PA-5580.
You can configure Per Security Policy-based Express Forwarding using Panorama or through the REST APIs. It requires no device reboots while providing explicit logging and session flags for easy troubleshooting.