topic Re: R81.10.x0 Smart Accel feature in Spark Firewall (SMB)

R81.10.x0 Smart Accel feature

G_W_Albrecht — Wed, 05 Apr 2023 09:45:43 GMT

In the new SMB folders, a new SMB feature is presented:

Smart Accel 30% performance improvement of low risk, high bandwidth apps

But Smart Accel is only available in WebGUI when locally managed - what about central management ? From CLI, i can see that it is enabled:

eighteen> show smart-accel-services 
mode: true
selected-services: 15
logs-enabled: false

CLI commands are present, but i can find no mention of Smart Accel in central management admin guide...

Re: R81.10.x0 Smart Accel feature

Chris_Atkinson — Wed, 05 Apr 2023 10:06:01 GMT

sk131852 which talks to the updatable object portion suggests it is only supported for locally managed appliances at this time.

Will enquire if this is planned for the next release/JHF etc.

Re: R81.10.x0 Smart Accel feature

Ruan_Kotze — Wed, 05 Apr 2023 10:13:35 GMT

I just ran this on a Spark device (81.10.5) managed via Infinity Portal. By default it's disabled, I've enabled it via "set smart-accel-services true".

It shows as enabled, but enabled services are zero. Need to do some RTFM'ing to figure out how to enable it for all supported services.

Re: R81.10.x0 Smart Accel feature

G_W_Albrecht — Wed, 05 Apr 2023 10:15:40 GMT

According to the CLI commands, Smart Accel is active on centrally managed SMBs. As i did configure it as locally Managed first, i am not sure if Smart Accel is enabled automatically when central management is used, but it seems logical. You can configure it using CLI, too !

I do not think that sk131852 suggests it is only supported for locally managed appliances at this time. According to marketing, this makes the Pro series faster, and it would be a very serious drawback if central management is slower than local management by 30% !

Re: R81.10.x0 Smart Accel feature

Ruan_Kotze — Wed, 05 Apr 2023 10:16:01 GMT

Further testing shows if I enable it via CLI, the option appears in the management portal. I can select services but get an error when trying to apply the firewall policy.

Re: R81.10.x0 Smart Accel feature

G_W_Albrecht — Wed, 05 Apr 2023 13:28:28 GMT

Any comments by @Amir_Ayalon @Zachi_Schnieder ?

Re: R81.10.x0 Smart Accel feature

PhoneBoy — Wed, 05 Apr 2023 14:17:20 GMT

Local Management only currently.
This was covered during our SMB Masters session yesterday: https://community.checkpoint.com/t5/SMB-Gateways-Spark/SMB-Masters-2-EMEA-and-APAC-Video-and-Materials/m-p/177244#M8689

Re: R81.10.x0 Smart Accel feature

G_W_Albrecht — Wed, 05 Apr 2023 16:41:05 GMT

Oh oh - i did overhear that yesterday, sorry ! So better not use the new SmartAccel benchmarks for central managed SMBs 8)

But CLI shows it as enabled - maybe a leftover from local management mode ?

Re: R81.10.x0 Smart Accel feature

Chris_Atkinson — Thu, 06 Apr 2023 12:26:45 GMT

sk178604 has been updated to document the status of Smart Accel.

Re: R81.10.x0 Smart Accel feature

G_W_Albrecht — Thu, 06 Apr 2023 12:40:27 GMT

Very good ! Any ETA for support on central managed SMBs ? Hard to explain up to 30% performance loss when used with central management.

Re: R81.10.x0 Smart Accel feature

G_W_Albrecht — Fri, 07 Apr 2023 09:28:38 GMT

What i do not understand is why Smart Accel Services are listed in R81.20 Dashboard Updateable Objects and can be used in TP Exclusions:

As also policy install is possible on GAiA and GAIA Embedded i can not really understand the comment above - if it is only EA for locally managed SMBs, why the detailed listing is provided in Dashboard Updateable Objects ?

Re: R81.10.x0 Smart Accel feature

Chris_Atkinson — Fri, 07 Apr 2023 15:33:58 GMT

Clearly there is some shared infrastructure there, I wouldn't read much more into it. When it's ready for production use on centrally managed it will be documented in the applicable versions release notes / what's new.

Re: R81.10.x0 Smart Accel feature

rdiaz — Tue, 04 Jun 2024 18:02:59 GMT

I'm very intreated in having the SmartEccel turned on as well since I could use the extra boost on the 1535 applicances I have. But i tried to enable it and got the "not suppored on centrally managed devices" see screenshot:

Re: R81.10.x0 Smart Accel feature

G_W_Albrecht — Wed, 05 Jun 2024 09:02:22 GMT

That is true, and a known limitation - same as https inspection, you can use either SmartAccel or https inspection on locally managed appliances !