Unlike a standard web server or file server, a firewall is a stateful inspection engine. Every packet that traverses the virtual network interface cards (vNICs) must be processed by the CPU. This involves decrypting SSL/TLS traffic, inspecting for Intrusion Prevention System (IPS) signatures, and maintaining state tables.
Key features and benefits of the 2-CPU virtual appliance include: FortiGate Virtual Appliances Data Sheet - Fortinet fortigate-vm -2 cpu-
However, one of the most common—and often misunderstood—deployment configurations involves the resource allocation of (specifically, assigning 2 vCPUs to the virtual appliance). While it may appear to be a simple resource slider in your hypervisor console, running a FortiGate-VM with 2 vCPUs triggers a complex interplay of licensing constraints, multi-threading architecture, and network throughput limitations. Unlike a standard web server or file server,
First, one must decode the specification. Unlike a physical FortiGate appliance, which has dedicated ASICs (Application-Specific Integrated Circuits) for acceleration, the FortiGate-VM relies entirely on the hypervisor’s resources. The designation "-2 cpu-" explicitly means the virtual machine is assigned (vCPUs) from the host server’s pool. This is not merely a hardware limit; it is a licensing boundary . Fortinet typically licenses VM firewalls by the number of vCPUs or throughput. A 2-vCPU license sits between a low-end 1-vCPU edition (suitable for branch offices or low-bandwidth inspection) and high-end 4, 8, or 16-vCPU editions intended for data centers or internet gateways. Key features and benefits of the 2-CPU virtual
Fortinet structures its VM licensing (BYOL - Bring Your Own License) based on CPU count, not just throughput. If you allocate 2 vCPUs to your VM, you are occupying a specific licensing tier.