Which statements are true about offloading antivirus inspection to a Security Processor (SP)? (Choose two.)

Security Processors primarily support offloading for flow-based inspection, but deep, proxy-based inspection for antivirus often requires main CPU involvement and cannot be fully offloaded to an SP.

When antivirus inspection is offloaded to a Security Processor (SP), the SP typically handles the scanning efficiently but usually lacks the capability to generate and present custom replacement messages to users upon virus detection, often resulting in a dropped file.

Offloading computationally intensive tasks like antivirus inspection to a dedicated Security Processor is primarily done to reduce the load on the main FortiGate CPU, thereby saving CPU resources and enhancing overall performance.

For hardware offloading by an SP, both the ingress and egress interfaces for a traffic flow typically need to reside within the domain of the same SP to allow for continuous acceleration; traffic spanning different SPs often falls back to the main CPU.