Description

Allow flow acceleration while pushing policy to the system.

Configuration

Select "Keep all connections" in the SmartDashboard gateway’s properties Other->connection persistence

Note - Feature is enabled only if:

• SecureXL is enabled
• Firewall Software Blade only is enabled

In SmartDashboard:

Legacy mode

To allow Keep all connections while disabling SecureXL keep connections set cphwd_policy_accel=0 in $FWDIR/boot/modules/fwkern.conf

Verification

After policy installation, templates of the old policy should be deleted.
This can be tracked in the following way:

1. Run g_fwaccel stats
2. Save the old value of the Policy deleted tmpl statistics
3. Install policy
4. Run g_fwaccel stats
5. Make sure that templates were deleted