Which is one of the conditions that must be met for offloading the encryption and decryption of IPsec traffic to an NP6 processor?

The application of protection profiles over IPsec traffic does not inherently prevent NP6 offloading if other conditions, particularly algorithm compatibility, are met.

Phase-2 anti-replay protection is a security feature and its state (enabled or disabled) is not a general condition for NP6 offloading of encryption/decryption.

NP6 processors are specialized hardware accelerators that can offload cryptographic operations, but only for specific encryption algorithms that they are designed to support, thus Phase 2 must use one of these algorithms.

While certain deep inspection features might interfere, a blanket statement that IPsec traffic must not be inspected by any FortiGate session helper is not the primary condition for NP6 crypto offloading.