topic Re: SecureXL: fwaccel stat command does not show which rule disabled SecureXL in General Topics

SecureXL: fwaccel stat command does not show which rule disabled SecureXL

PhongNN — Mon, 13 Jul 2020 11:05:50 GMT

Hi all

I run the fwaccel stat command but i do not see which rule disabled SecureXL

Accept Templates : disabled by Firewall
Layer ---Drop Templates : enabled
NAT Templates : disabled by Firewall
Layer ---

I ran R80.30 version

Is it expected behavior ?

Thank you

Regards

Re: SecureXL: fwaccel stat command does not show which rule disabled SecureXL

_Val_ — Mon, 13 Jul 2020 11:43:24 GMT

The normal output for R80.10 and up should look like this:

Accept Templates   : disabled by Firewall
                     Layer <Name_of_Layer> disables template offloads from rule #<N>
                     Throughput acceleration still enabled.

However, some features on FW can disable templating altogether, for example Network quota.

Re: SecureXL: fwaccel stat command does not show which rule disabled SecureXL

Timothy_Hall — Mon, 13 Jul 2020 14:21:48 GMT

This is a known issue, the name of your Network policy layer is too long. If you shorten it to under 32 characters the fwaccel stat display should work properly again.

sk145533: "Layer ---" is displayed instead of specific layer name and rule number in output of 'fwaccel stat'

Re: SecureXL: fwaccel stat command does not show which rule disabled SecureXL

krit — Mon, 28 Sep 2020 07:07:49 GMT

Dear Mr. Hall,

Thank you for this reply, it resolved the same issue I had.

Just to add that the initial policy name was 26 chars and I shortened it to 16 in order to be displayed properly ( R80.20 environment )

Best Regards,