Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Timothy_Hall
Legend Legend
Legend

USFW required for which specific gateway features?

What specific R81.20 gateway features require the gateway to be in User Space Firewall (USFW) mode?  USFW is indeed the default on all the most recent gateway appliances, which places the Firewall Worker Instances in process space as fwk processes, instead of being traditionally located in the kernel which gets around the previous 40-core limit for CoreXL. 

For those R81.20 firewalls still using the older kernel mode (KMFW), which specific features will be unavailable?  So far I have:

  • Hyperflow/pipelining
  • HTTPS Inspection of TLS 1.3
  • FutureX HSM support

Any more that I'm missing?  Thanks!

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
2 Replies
Lesley
Leader Leader
Leader

VSX only does USFW:

 In VSX Gateways, USFW is the only Firewall mode available.

Stated in: https://support.checkpoint.com/results/sk/sk167052

Maybe there is some more info in this SK that you could use.

-------
If you like this post please give a thumbs up(kudo)! 🙂
the_rock
Legend
Legend

Great reference sk Lesley. I believe its stated below as well.

Best,

Andy

https://community.checkpoint.com/t5/General-Topics/R80-x-Performance-Tuning-Tip-User-Mode-Firewall-v...

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events