-->
Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Wolfgang
MVP Gold
MVP Gold
Jump to solution

performance impact of sk34295 (How to configure DNS NAT) ?

Are there any performance impact following How to configure DNS NAT (checkpoint.com) ?

If enabled all UDP-DNS traffic will be not accelerated by SecureXL but I think this has not much impact. 

0 Kudos
1 Solution

Accepted Solutions
Timothy_Hall
MVP Gold
MVP Gold

Traffic subject to this feature cannot be handled fastpath and will be handled in at least the Medium Path.  It does not appear to always force this traffic F2F/slowpath (which would not be good), but this DNS traffic could end up in the slowpath anyway if some other condition is present requiring it.  Unlikely that enabling this feature would cause any noticeable performance impact in my opinion.

New Book: "Max Power 2026" Coming Soon
Check Point Firewall Performance Optimization

View solution in original post

3 Replies
PhoneBoy
Admin
Admin

I don't believe DNS traffic benefits from SecureXL that substantially, given the relatively short nature of a DNS query.
Never heard of a performance-related issue tied to this feature, either.

0 Kudos
Timothy_Hall
MVP Gold
MVP Gold

Traffic subject to this feature cannot be handled fastpath and will be handled in at least the Medium Path.  It does not appear to always force this traffic F2F/slowpath (which would not be good), but this DNS traffic could end up in the slowpath anyway if some other condition is present requiring it.  Unlikely that enabling this feature would cause any noticeable performance impact in my opinion.

New Book: "Max Power 2026" Coming Soon
Check Point Firewall Performance Optimization
the_rock
MVP Diamond
MVP Diamond

I cant speak for others, but TAC had customer follow this back in 2020 and they never had any issues afterwards.

Best,

Andy

Best,
Andy
"Have a great day and if its not, change it"

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Thu 07 May 2026 @ 01:30 PM (AEST)

    CheckMates Live Sydney

    Tue 02 Jun 2026 @ 09:00 AM (CEST)

    CheckMates Live Denmark - Aarhus

    Wed 03 Jun 2026 @ 09:00 AM (CEST)

    CheckMates Live Denmark - Copenhagen
    CheckMates Events