This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Help

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Wolfgang
Mentor
Mentor
‎2022-04-06 11:51 AM

VSX not in USFW ?

We did some troubleshooting regarding a problem and detect that we have definite Output of 'fw ctl affinity' does not show FWK affinity to CPU core after upgrade of R80.30 Security ...

cpprod_util FwIsUSFW shows „0“

Some virtual switches, firewalls and a virtual router are running, looks like no problem at the moment. To change this a reboot will be need and we are waiting for a maintenance schedule. 
Please can someone explain if we run in a problem with USFW disabled?

15600 appliance running R80.40 VSX HA

0 Kudos
2 Replies
Chris_Atkinson
Employee
Employee
‎2022-04-06 06:00 PM

15600 generally wouldn't have USFW enabled by default, also it's unlikely that you were previously using the 3.10 kernel version of R80.30. With that said VSs are already user mode processes...

What could be made clearer is the interaction between VSX & USFW on such appliance models. Will submit feedback on sk167052 accordingly. 

0 Kudos
shais
Employee
Employee
‎2022-04-06 11:07 PM

Hi,

While VSX indeed utilizes USFW infra, it's not registered as USFW.

The registry helps us understand in what mode the setup is - Kernel mode / User mode / VSX
As VSX contains more than the regular USFW, we identify it by using a specific registry and not the User Mode.

This is valid and you should not change the registry unless you are removing VSX and changing to User Space FireWall mode