Who rated this post

cancel
Showing results for 
Search instead for 
Did you mean: 
Lesley
Leader Leader
Leader

This depends. Sharing below output could help to answer the question. 

Best Practices

Use the factors listed below to select the best CoreXL Firewall mode for your Security Gateway - User Space (USFW) or Kernel Space (KSFW):

Factor Testing command Recommended
Firewall
mode
80% or more of the traffic undergoes the Fast / Accelerated path fwaccel stats -s KSFW
70% or more of the traffic undergoes the Firewall / Slow path fwaccel stats -s KSFW
30% or more of the traffic undergoes the PXL / Medium path fwaccel stats -s USFW
Security Gateway is configured with more CoreXL SND instances than CoreXL Firewall instances,
or when CoreXL SND instances are the bottleneck
fw ctl affinity -l -r KSFW
Security Gateway is configured with more than 38 CoreXL Firewall instances fw ctl affinity -l -r USFW
-------
If you like this post please give a thumbs up(kudo)! 🙂
(1)
Who rated this post