Solved: SD-WAN/ISP Redundancy and SecureXL

Timothy_Hall · ‎2025-01-23

It is well known that traffic subject to the old ISP Redundancy feature in Active-Active mode can only be handled in F2F/slowpath.

How does traffic subject to SD-WAN look to SecureXL on the gateway? It appears that SD-WAN is not currently supported with UPPAK mode, which would seem to indicate that SD-WAN traffic being steered involves SecureXL probably in the Medium Path, and that SD-WAN steered traffic will not always be stuck in the slowpath. Correct?

Attend my Gateway Performance Optimization R81.20 course
CET (Europe) Timezone Course Scheduled for July 1-2

AmirArama · ‎2025-01-24

Hi Timothy,

Quantum SD-WAN is not affected by this limitation.
Traffic will be processed as Fast, Medium, or F2F, just as it would be without SD-WAN.

P.S. The UPPAK limitation has been resolved in JHF96.

https://support.checkpoint.com/results/sk/sk180605

View solution in original post

PhoneBoy · ‎2025-01-23

I suspect if SD-WAN traffic were slowpath, there'd be a "known limitation" about it similar to ISP Redundancy.

AmirArama · ‎2025-01-24

Hi Timothy,

Quantum SD-WAN is not affected by this limitation.
Traffic will be processed as Fast, Medium, or F2F, just as it would be without SD-WAN.

P.S. The UPPAK limitation has been resolved in JHF96.

https://support.checkpoint.com/results/sk/sk180605

Are you a member of CheckMates?

SD-WAN/ISP Redundancy and SecureXL