Intelligent Traffic Offload (ITO) is a VM-Series firewall Security subscription that, when configured with the supported NVIDIA Bluefield infrastructure compute platform, increases capacity throughput for the VM-Series firewall. In previous releases, ITO required that you deploy your VM-Series firewall in virtual wire mode. This limitation prevented deployments in Layer 3 mode supporting dynamic routing.

This release removes that limitation by allowing you to deploy your VM-Series firewall with Intelligent Traffic Offload for L3 traffic supporting dynamic routing. With dynamic routing, you attain stable, high-performing, and highly available L3 routing through profile-based filtering lists and conditional route maps which can be used across logical routers. These profiles provide finer granularity to filter routes for each dynamic routing protocol and improve redistribution across multiple protocols. When combined with NAT for IPv4, you can extend security policy to protect end user devices from being exposed to outside threats. This release adds support for the Nvidia Bluefield-3 DPU while maintaining support for the existing Bluefield-2 DPU.