Performance firewall r81.10

lluner — Mon, 28 Oct 2024 15:21:25 GMT

I checked on my firewall when there is a conference via gogole meeting it increases the load average a lot. How do I prevent this google meeting traffic from being inspected by any blade ?

I have an average of 180 people connected to Google Meeting

Re: Performance firewall r81.10

Timothy_Hall — Mon, 28 Oct 2024 19:05:22 GMT

As long as the connections are not slowpath/F2F, they can be forced to the fastpath: sk156672: SecureXL Fast Accelerator (fw fast_accel) for R80.20 and above which will be substantially more efficient.

Keep in mind however that doing this will disable all deep inspection on this traffic (including HTTPS Inspection if active), so if a virus/malware tries to propagate through these connections it will be allowed through with no logging.

To diagnose if these connections are in the slowpath (in which case trying to use a fast_accel will simply not work) run this command and search for the connections in question:

fw tab -t connections -u -z

The new -z option will only display connections in F2F/slowpath, and also why they are stuck there ("reason") for R81+.

topic Performance firewall r81.10 in Firewall and Security Management

Performance firewall r81.10

Re: Performance firewall r81.10