Which two statements about an auxiliary session ate true? (Choose two.)
A.
With the auxiliary session selling disabled, only auxiliary sessions are offloaded.
B.
With the auxiliary session setting enabled. ECMP traffic is accelerated to the NP6 processor.
C.
With the auxiliary session setting enabled. Iwo sessions are created in case of routing change.
D.
With the auxiliary session setting disabled, for each traffic path. FortiGate uses the same auxiliary session.
The Answer Is:
B, C
This question includes an explanation.
Explanation:
Auxiliary sessions in Fortinet are designed to support ECMP (Equal Cost Multi-Path) and SD-WAN scenarios, allowing sessions to be handled efficiently when traffic needs to be dynamically distributed across multiple links. With the auxiliary session setting enabled, FortiGate creates additional session table entries for each possible path in ECMP or SD-WAN—meaning that if the routing path changes (such as a link failover), a new session can be immediately activated and offloaded to the NP6 network processor for acceleration, ensuring minimal disruption. This greatly benefits high-throughput deployments.
Official documentation specifies that when auxiliary sessions are enabled, FortiGate doesn’t just rely on dynamically creating new sessions after a routing event, it proactively creates sessions for all potential paths. This means that in the event of a route change, two sessions exist and the traffic is quickly re-routed and offloaded, maximizing performance and reliability. Without this feature, multiple paths cannot be efficiently offloaded, and routing changes trigger a single session update, reducing failover performance.