topic Re: SD-WAN/ISP Redundancy and SecureXL in SD-WAN

SD-WAN/ISP Redundancy and SecureXL

Timothy_Hall — Thu, 23 Jan 2025 22:02:47 GMT

It is well known that traffic subject to the old ISP Redundancy feature in Active-Active mode can only be handled in F2F/slowpath.

How does traffic subject to SD-WAN look to SecureXL on the gateway? It appears that SD-WAN is not currently supported with UPPAK mode, which would seem to indicate that SD-WAN traffic being steered involves SecureXL probably in the Medium Path, and that SD-WAN steered traffic will not always be stuck in the slowpath. Correct?

Re: SD-WAN/ISP Redundancy and SecureXL

PhoneBoy — Fri, 24 Jan 2025 00:38:50 GMT

I suspect if SD-WAN traffic were slowpath, there'd be a "known limitation" about it similar to ISP Redundancy.

Re: SD-WAN/ISP Redundancy and SecureXL

AmirArama — Fri, 24 Jan 2025 11:07:58 GMT

Hi Timothy,

Quantum SD-WAN is not affected by this limitation.
Traffic will be processed as Fast, Medium, or F2F, just as it would be without SD-WAN.

P.S. The UPPAK limitation has been resolved in JHF96.

https://support.checkpoint.com/results/sk/sk180605

Re: SD-WAN/ISP Redundancy and SecureXL

Amit_Navon — Thu, 15 May 2025 08:19:50 GMT

Hi Timothy,

UPPAK is now supported. See my recent post on new platform support EA on R82 from today.

BR, Amit

Re: SD-WAN/ISP Redundancy and SecureXL

Timothy_Hall — Thu, 15 May 2025 14:50:08 GMT

Good to know, thanks!