R80.20SP Quantum Maestro Performance Tuning Administration Guide

fwaccel dos rate

Description

The "fwaccel dos rate" and "fwaccel6 dos rate" commands show and install the Rate Limiting policy in SecureXL Check Point product on a Security Gateway that accelerates IPv4 and IPv6 traffic that passes through a Security Gateway..

Important:

You must run the applicable commands in the Expert mode on the applicable Security Group A logical group of Security Appliances that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Every Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected..
In VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. mode, you must go to the context of an applicable Virtual System.

In the Expert mode, run: vsenv <VSID>

Syntax for IPv4

g_fwaccel [-i <SecureXL ID>] dos rate

get '<Rule UID>'

install

Syntax for IPv6

g_fwaccel6 dos rate

get '<Rule UID>'

install

Parameters

Parameter

Description

-i <SecureXL ID>

Specifies the SecureXL instance ID (for IPv4 only).

No Parameters

Shows the applicable built-in usage.

get '<Rule UID>'

Shows information about the rule Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session. specified by its Rule UID or its zero-based rule index.

The quote marks and angle brackets ('<...>') are mandatory.

install

Installs a new rate limiting policy.

Important - This command requires input from the stdin.

To use this command, run:

g_fw sam_policy get -l -k req_type -t in -v quota | g_fwaccel dos rate install

For more information about the "g_fw sam_policy" command, see fw sam_policy.

Notes

If you install a new rate limiting policy with more than one rule, it automatically enables the rate limiting feature.

To disable the rate limiting feature manually, run this command (see fwaccel dos config):

g_fwaccel dos config set --disable-rate-limit

To delete the current rate limiting policy, install a new policy with zero rules.

22 April 2024

© 2019 - 2024 Check Point Software Technologies Ltd.