cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Yes, it is very helpful to learn for CCSA and CCSE.

Thake you

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Thanks yor for the great summary. I also use it to learn for CCSA and CCSE.

Thanks to https://community.checkpoint.com/people/h.ank2614aef2-c5d1-3f73-bbbd-45c59b9e2728 

Highlighted

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Very nice document.

Thanks,

Jan

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Hi,

thanks for the link but it does not answer my question. I want to know how ofther Dynamic Dispatcher checks the CPU load. it is not explicit written how often it checks for the load of a CPU to decide how to dispatch.

There is one sentce which could lead to the assumption that it checks every second but this is not for sure:

Administrator should enable CoreXL Dynamic Dispatcher if:

  1. A CoreXL FW instance consumes its CPU core at 85% (and above) even for 1 second.

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

That's a nice one and to be downloaded for offline reference.

Thanks,

Karsten

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Great work.

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Excellent flowchart!

THX, Malte

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Great flowchart!

Alit

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Hi Hiko,

You describe PXL but there is also active streaming. Where can I find this in your drawing?

Lars

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Hi Lars,

You can find more information about CPAS here:

R80.x Security Gateway Architecture (Content Inspection) 

CPAS is a "man in the midle" module that works in the inchain and outchain. That's why it's hard to draw it here.

Regards,

Heiko

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

This is excellent work

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

The following statements are not 100% correct:

>>Inline Streaming Path - is the new name for R80.20+ PSL and CPAS over the F2F path.

>>Medium Streaming Path - is the new name for R80.20+ PXL (new in R80.20 PSLXL) and CPASXL over the medium path.

R80.20 has improved performance, but in this particular case we are just talking on better visibility of how Medium Path is used. Inline is related to Threat Emulation, Medium Streaming term is self explanatory. I would suggest refrain from putting new statements in to the document before they can be backed up with official Check Point documentation. We expect relevant SKs to be updated shortly.

Thank you

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Thanks, I'll delete that from the document for now.

As I said, Check Point should disclose this information.

You can find my other comment here:

Security Gateway Performance Optimization Excerpt 

Regards,

Heiko

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Already answered there. 

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Excellent work, thx.

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Great work:-)

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Yes, great flowchart.

THX,

Vivec

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Only one tiny correction - on slow path (F2F) the first decision block is "Connection Table" (not Tabel).

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Hi Hiko,

That's a good article series. I could use a lot of useful content in a project.

I gave you 1,000 points.

Many thanks

Christian

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Nice articel series.

Thanks

Adi

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Yes it is very nice!

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

In the drawing the new R80.20 inspection points (id and iD) are missing.

Regards

Pasqual

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

nice

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

great job   

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

great work!

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Nice!

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Is it possible to add the QOS path?

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Yes, that would be very interesting.

0 Kudos

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

Great information.

Re: R80.x Security Gateway Architecture (Logical Packet Flow)

top:-)