topic Re: Security Gateway Performance Optimization Excerpt in General Topics

Security Gateway Performance Optimization Excerpt

PhoneBoy — Sun, 17 Mar 2019 10:34:45 GMT

(view in My Videos)

Full video, available to CheckMates members: Security Gateway Performance Optimization with Tim Hall Video

Re: Security Gateway Performance Optimization Excerpt

Ali_Korkmaz — Wed, 26 Sep 2018 17:28:03 GMT

Hello,

This video does not work, is there another link?

Re: Security Gateway Performance Optimization Excerpt

_Val_ — Wed, 26 Sep 2018 18:00:15 GMT

This is a 2 minute teaser. The full video link is mentioned above as well

Re: Security Gateway Performance Optimization Excerpt

Ali_Korkmaz — Wed, 26 Sep 2018 18:04:21 GMT

I tried link of full video but it did not work. You can view the video?

Re: Security Gateway Performance Optimization Excerpt

_Val_ — Wed, 26 Sep 2018 18:09:55 GMT

Yes, the video is available and works all right. It is in the members exclusive section, so please make sure you are logged in when watching. If it is still not working for you, please clean your browser cache and try again.

Re: Security Gateway Performance Optimization Excerpt

Ali_Korkmaz — Wed, 26 Sep 2018 18:14:24 GMT

Firstly thanks for your quick reply. I am logged to community with my account on my phone. Might be this video not suitable for phone?

Re: Security Gateway Performance Optimization Excerpt

_Val_ — Wed, 26 Sep 2018 18:25:11 GMT

Should work there either. Clear the cache or try later.

Re: Security Gateway Performance Optimization Excerpt

PhoneBoy — Wed, 26 Sep 2018 19:38:35 GMT

What kind of phone do you have?

It seems to be ok on my iPhone at least.

Re: Security Gateway Performance Optimization Excerpt

Ali_Korkmaz — Wed, 26 Sep 2018 19:43:53 GMT

I have Xiaomi 6. I have try with different two browser but does not work.

Re: Security Gateway Performance Optimization Excerpt

PhoneBoy — Wed, 26 Sep 2018 19:53:24 GMT

I initially had an issue with my Samsung S8+ getting the video to start playing.

After refreshing the page, it seems to work now.

Re: Security Gateway Performance Optimization Excerpt

Ali_Korkmaz — Wed, 26 Sep 2018 19:58:14 GMT

I think the problem is related embedded video player on my phone. Thnks all.

Re: Security Gateway Performance Optimization Excerpt

Matthew_H_00 — Wed, 26 Sep 2018 23:24:29 GMT

Try this link

Video Link : 7987

Re: Security Gateway Performance Optimization Excerpt

Hugo_vd_Kooij — Thu, 27 Sep 2018 10:42:38 GMT

On R80.10 I get an extra line:

QXL pkts/Total pkts : 0/46011886447 (0%)

We are not using QoS so that 0 is no surprise.

But it wasn't mentioned in the talks.

Re: Security Gateway Performance Optimization Excerpt

_Val_ — Thu, 27 Sep 2018 11:59:20 GMT

Good point, Hugo van der Kooij‌. Timothy Hall‌, any comments?

Re: Security Gateway Performance Optimization Excerpt

Timothy_Hall — Fri, 21 Jun 2019 09:25:34 GMT

The QoS blade is rarely enabled and the QXL path will only show nonzero values when that blade is actually used. Heiko Ankenbrand‌ and I discussed this topic here: https://community.checkpoint.com/message/28463

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

Re: Security Gateway Performance Optimization Excerpt

_Val_ — Thu, 27 Sep 2018 13:45:22 GMT

Thanks Tim

Re: Security Gateway Performance Optimization Excerpt

HeikoAnkenbrand — Thu, 27 Sep 2018 14:33:18 GMT

Thanks Timothy for the presentation.

Regards

Heiko

Re: Security Gateway Performance Optimization Excerpt

HeikoAnkenbrand — Thu, 27 Sep 2018 14:51:44 GMT

What I notice more and more in the last years is CPAS (Active Streaming). It always works through the F2F path. With increased https, the firewall workers are more and more stressed if https inspection is enabled. Timothy you describe it very well in your book. Check Point Active Streaming active streaming allow the changing of data and play the role of “man in the middle”. Several protocols uses CPAS, for example: Client Authentication, VoIP (SIP, Skinny/SCCP, H.323, etc.), Data Leak Prevention (DLP) blade, Security Servers processes, etc. I think it's not to be underestimated in tuning.

Regards

Heiko

Re: Security Gateway Performance Optimization Excerpt

Timothy_Hall — Thu, 27 Sep 2018 15:45:23 GMT

Well it looks like the Medium Path (PXL) has been split into 2 separate paths called CPASXL and PSLXL in R80.20 gateway based on this screenshot I just took in my lab, so for the first time we will be able to easily see stats about utilization of CPAS vs PSL:

also in R80.20 we can now see actual statistics for the PXL path which will certainly help "demystify" it to some degree:

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

Re: Security Gateway Performance Optimization Excerpt

Veneet_Thakur — Fri, 28 Sep 2018 07:42:44 GMT

The video is not working, any other link pls