Create a Post
Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
icon Performance Best Practices

Part 3 - SecureXL

Introduction

SecureXL is enabled by default on all Check Point firewalls.  Up through and including version R80.10 released in 2017, SecureXL only received relatively minor capability and feature updates.  However with the release of version R80.20 in 2018, SecureXL was heavily overhauled with many longstanding limitations removed.  This document assumes your firewall is using at least version R80.20 as a result.

What is SecureXL?  The ability for the firewall to process traffic more efficiently using less CPU thus decreasing latency and increasing throughput.  Prior to the advent of SecureXL in the early 2000’s, all traffic passing through the firewall was sent through the full INSPECT engine for handling; this is known as the F2F (Forward to Firewall) Path or is sometimes referred to as the “slowpath”.  In addition, a matching rule had to be found in the Access Control rulebase for every new connection that attempted to start through the firewall.

Introduced in the ea

...
TO READ THE FULL POST it's simple and free