Solved: SD-WAN/ISP Redundancy and SecureXL

Timothy_Hall · ‎2025-01-23

It is well known that traffic subject to the old ISP Redundancy feature in Active-Active mode can only be handled in F2F/slowpath.

How does traffic subject to SD-WAN look to SecureXL on the gateway? It appears that SD-WAN is not currently supported with UPPAK mode, which would seem to indicate that SD-WAN traffic being steered involves SecureXL probably in the Medium Path, and that SD-WAN steered traffic will not always be stuck in the slowpath. Correct?

Gaia 4.18 (R82) Immersion Tips, Tricks, & Best Practices Video Course
Now Available at https://shadowpeak.com/gaia4-18-immersion-course

AmirArama · ‎2025-01-24

Hi Timothy,

Quantum SD-WAN is not affected by this limitation.
Traffic will be processed as Fast, Medium, or F2F, just as it would be without SD-WAN.

P.S. The UPPAK limitation has been resolved in JHF96.

https://support.checkpoint.com/results/sk/sk180605

View solution in original post

PhoneBoy · ‎2025-01-23

I suspect if SD-WAN traffic were slowpath, there'd be a "known limitation" about it similar to ISP Redundancy.

AmirArama · ‎2025-01-24

Hi Timothy,

Quantum SD-WAN is not affected by this limitation.
Traffic will be processed as Fast, Medium, or F2F, just as it would be without SD-WAN.

P.S. The UPPAK limitation has been resolved in JHF96.

https://support.checkpoint.com/results/sk/sk180605

Amit_Navon · ‎2025-05-15

Hi Timothy,

UPPAK is now supported. See my recent post on new platform support EA on R82 from today.

BR, Amit

Timothy_Hall · ‎2025-05-15

Good to know, thanks!

Gaia 4.18 (R82) Immersion Tips, Tricks, & Best Practices Video Course
Now Available at https://shadowpeak.com/gaia4-18-immersion-course

Are you a member of CheckMates?

SD-WAN/ISP Redundancy and SecureXL