topic Re: SecureXL and Application Control Layer in General Topics

SecureXL and Application Control Layer

PhongNN — Fri, 19 Jun 2020 04:29:01 GMT

Hi experts

I have a question about SecureXL

There is a policy package with 2 Layer: Network ( only Firewall enabled ) and App ( only App&URL enabled )

For accessing to the Internet, I have a rule in Layer network like this:

Src: x.x.x.x Dst:Any service: http,https

I must create the same rule in layer App, because we set action DROP on cleanup rule:

Src: x.x.x.x Dst:Any service: http,https

So is the traffic accelerating ?

Thank you

Regards

Re: SecureXL and Application Control Layer

HeikoAnkenbrand — Fri, 19 Jun 2020 07:01:12 GMT

Hi @PhongNN,

In principle the connection is processed by SecureXL if it is SecureXL compliant.

If the connection must be checked for content, the PSLXL path (old name PXL) is used. Otherwise the acceleration path is used.

From R80.20 on there are differences in the processing compared to R80.10. The picture shows you the processing in the FW.

More read here:
R80.x - Security Gateway Architecture (Logical Packet Flow)

Re: SecureXL and Application Control Layer

PhongNN — Fri, 19 Jun 2020 09:02:13 GMT

Hi Heiko

Thank you so much for your reply

But i have a question

With layer App ( only App&Url enabled ), in Services & Applications column, only have https and http.

It means FW will not inspection content,right ?

If i enable both App&URL and FW for layer App, so FW will inspect when S&A column have any one Application, and won't inspect when there are any services ( like https,http, ssh )

sorry for my poor english

Thank you so much

Regards