User Space Firewall (USFW) support on 6500 appliance running 81.10

Moudar — Sun, 11 Feb 2024 14:38:50 GMT

Hi,

I was reading CCSE course book about HyperFlow, and it seems to be good to have it enabled!

Checking sk167052: https://support.checkpoint.com/results/sk/sk167052

and here is the result of fwaccel stats -s:

According to the first image, you need to use KSFW if 80% or more of the traffic undergoes the Fast path / Accelerated path, and it does (93%) if I understood SecureXL well!

What is PXL / Medium path, I can not find that? Could it be the same as "PSLXL pkts/Total pkts"?

If PXL / Medium path = PSLXL pkts/Total pkts, what should you do, use USFW or KSFW, again back to the first image you can see that in my case both KSFW and USFW can be used! or what I am missing here?

What could the reason of disabling "Accept Templates" as you can see at the second image?

What could the reason of enabling only "Drop Templates"?

Re: User Space Firewall (USFW) support on 6500 appliance running 81.10

Chris_Atkinson — Sun, 11 Feb 2024 15:35:48 GMT

sk178070: Hyperflow requires an appliance with 8 or more logical CPU cores

sk32578: Rules with services such as dcom / rpc / dce may impact templating.

Re: User Space Firewall (USFW) support on 6500 appliance running 81.10

the_rock — Sun, 11 Feb 2024 18:17:50 GMT

Those SKs @Chris_Atkinson provided should be relevant, for sure.

Best,

Andy

topic Re: User Space Firewall (USFW) support on 6500 appliance running 81.10 in General Topics

User Space Firewall (USFW) support on 6500 appliance running 81.10

Re: User Space Firewall (USFW) support on 6500 appliance running 81.10

Re: User Space Firewall (USFW) support on 6500 appliance running 81.10