- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
Hi Team,
I need some clarification on fwaccel stats -s command. There are different values on different fields. Need explanation for the same.
Accelerated conns/Total conns : 98%
Accelerated pkts/Total pkts : 92 %
F2Fed pkts/Total pkts : 7 %
PXL pkts/Total pkts : 4%
QXL pkts/Total pkts : 0
The values are example values.
In case if i see QXL very less like 0% is that mean the fastest path is not utilized at all ,?? PXL is medium path and F2Fed is a default path and even that value is around 7% and what is the difference between Accelerated conns / Total conns and
Accelerated pkts / Total pkts,, if those values are higher than 90% what does that exactly means..
It would be really great if i get a clarification.
Accelerated conns/Total conns : 98%
How many current connections were templated by SecureXL Session Rate Acceleration and avoided a firewall path (slowpath) rulebase lookup upon start of the new connection.
Accelerated pkts/Total pkts : 92 %
How many total packets were fully accelerated by SecureXL Throughput Acceleration after the connection was established
F2Fed pkts/Total pkts : 7 %
How many packets were processed through the slowest Firewall path due to fragmentation or other situations that cannot be handled by PXL
PXL pkts/Total pkts : 4%
How many packets required streaming inspection by blades such as APCL/URLF/IPS/AV and were partially accelerated. The vast majority of traffic on real-world firewalls tends to congregate in this path.
QXL pkts/Total pkts : 0
Special PXL path for traffic handled by QoS/Floodgate-1/etm feature, will always be zero unless QoS blade is enabled.
These statistics can be reset on the fly with fwaccel stats -r.
--
My book "Max Power: Check Point Firewall Performance Optimization"
now available via http://maxpowerfirewalls.com.
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY