Intelligent Traffic Offload (ITO) is a VM-Series firewall Security subscription that, when configured with the supported NVIDIA Bluefield infrastructure compute platform, increases capacity throughput for the VM-Series firewall. In previous releases, Intelligent Traffic Offload required that you deploy your VM-Series firewall in virtual wire mode. This limitation prevented deployments of VM-Series firewalls with an ITO subscription from using NAT for perimeter security.

This release removes that limitation by allowing you to deploy your VM-Series firewall with an Intelligent Traffic Offload subscription in Layer 3 mode that supports NAT for IPv4. With this functionality, your ITO subscription fully supports environments requiring robust security features that prevent end-user devices from being exposed to outside threats. NAT support extends to NAT44 and DIPP in for both deployments with Intelligent Traffic Offload (DPU-based) and software cut-through for traffic inspection. This release adds support for the Nvidia Bluefield-3 DPU while maintaining support for the existing Bluefield-2 DPU.