topic Re: Lightspeed acceleration disabled in Firewall and Security Management

Lightspeed acceleration disabled

BrianHansen — Tue, 02 Dec 2025 15:09:47 GMT

Hello,

I am trying to find out why LightSpeed acceleration is disabled on an appliance with lightspeed interfaces.

Version: R81.20 take 118

Running: Firewall/CoreXL in userspace and SecureXL in Kernel Space (Recommended by CP support due to performance issues with SecureXL in userspace, at this customer implementation)

I currently suspect that "Accept Templates : disabled by Firewall" this is causing Lightspeed acceleration to be disabled as well.

If this assumption is correct, then I think that this is a major limiting factor for using LightSpeed acceleration, as most of customers, that I have worked for has one or more rules in their policy, which disables accept templates, as there are quite a log list of features, which causes templating to be disabled.

fwaccel stat:

Accept Templates : disabled by Firewall
                   Layer Network disables template offloads from rule #826
                   Throughput acceleration still enabled.
Drop Templates   : enabled
NAT Templates    : disabled by Firewall
                   Layer Network disables template offloads from rule #826
                   Throughput acceleration still enabled.
LightSpeed Accel : disabled

Best regards

Brian Hansen

Re: Lightspeed acceleration disabled

PhoneBoy — Tue, 02 Dec 2025 22:26:14 GMT

Yes, Lightspeed is reliant on SecureXL accelerating connections.
Makes sense it would be disabled when templates are disabled.

Re: Lightspeed acceleration disabled

Chris_Atkinson — Tue, 02 Dec 2025 22:45:45 GMT

The gateway should be running in UPPAK mode to fully leverage Lightspeed benefits.

What were the performance issues you encountered prior?

Re: Lightspeed acceleration disabled

the_rock — Tue, 02 Dec 2025 23:11:14 GMT

I totally get the point Phoneboy made. That makes 100% sense.

Re: Lightspeed acceleration disabled

BrianHansen — Wed, 03 Dec 2025 08:29:28 GMT

Hi PhoneBoy,

Thank you for commenting.

I now managed to fix templating, but still LightSpeed accel is disabled. Any other ideas?

Best Regards

Brian Hansen

Re: Lightspeed acceleration disabled

BrianHansen — Wed, 03 Dec 2025 08:33:49 GMT

Hi Chris,

Also thank you for commenting 🙂
Unfortunately these performance issues and CP support involvement, was before my time with this customer and I do not know the specifics.
Although, I have also read that SecureXL in userspace should be preferred and also the default settings with new clean installs, then I do not expect it to be the reason that LightSpeed accel is disabled.

Is it your understanding that it could be the reason for the disabled state or "just" that it would be best to run in userspace ?

Best Regards

Brian Hansen

Re: Lightspeed acceleration disabled

Chris_Atkinson — Wed, 03 Dec 2025 11:18:16 GMT

Please review sk179432 to understand this further, UPPAK is needed.

Look for this row in the tables specifically:

Firewall Blade with Hardware Acceleration

Re: Lightspeed acceleration disabled

Jan_Kleinhans — Wed, 03 Dec 2025 09:40:48 GMT

Apart from using UPPAK. Is your customer using VSX?

Re: Lightspeed acceleration disabled

the_rock — Wed, 03 Dec 2025 11:56:01 GMT

Hey Brian,

See if below helps.

https://community.checkpoint.com/t5/Security-Gateways/SecureXL-Templates-show-disabled/td-p/187182

https://support.checkpoint.com/results/sk/sk71200

Re: Lightspeed acceleration disabled

BrianHansen — Thu, 04 Dec 2025 11:37:10 GMT

No they are not