SD-WAN/ISP Redundancy and SecureXL

[Timothy_Hall]

It is well known that traffic subject to the old ISP Redundancy feature in Active-Active mode can only be handled in F2F/slowpath. 

How does traffic subject to SD-WAN look to SecureXL on the gateway?  It appears that SD-WAN is not currently supported with UPPAK mode, which would seem to indicate that SD-WAN traffic being steered involves SecureXL probably in the Medium Path, and that SD-WAN steered traffic will not always be stuck in the slowpath.  Correct?

[PhoneBoy]

I suspect if SD-WAN traffic were slowpath, there'd be a "known limitation" about it similar to ISP Redundancy.

[AmirArama · Accepted solution]

Hi Timothy,

Quantum SD-WAN is not affected by this limitation.
Traffic will be processed as Fast, Medium, or F2F, just as it would be without SD-WAN.

P.S. The UPPAK limitation has been resolved in JHF96.

https://support.checkpoint.com/results/sk/sk180605

[Amit_Navon]

Hi Timothy,

UPPAK is now supported. See my recent post on new platform support EA on R82 from today.

BR, Amit

[Timothy_Hall]

Good to know, thanks!