To change the internal default behavior of SecureXL or to configure special advanced settings for SecureXL, you can use SecureXL kernel parameters.
The names of applicable SecureXL kernel parameters and their values appear in various SK articles in Support Center, and provided by Check Point Support.
Important
fw ctl set
command.You must configure them only permanently in the special configuration file ($PPKDIR/conf/simkern.conf
).
Schedule a maintenance window, because this procedure requires a reboot.
fw ctl get
command (see sk43387).Examples of SecureXL kernel parameters
Type |
Name |
---|---|
Integer |
|
String |
|
To see the list of the available SecureXL integer kernel parameters and their values on your Security Gateway:
Step |
Description |
---|---|
1 |
Connect to the command line on your Security Gateway. |
2 |
Log in to the Expert mode. |
3 |
Get the list of the available integer kernel parameters and their values:
|
4 |
Analyze the output file:
|
To see the list of the available SecureXL string kernel parameters and their values on your Security Gateway:
Step |
Description |
---|---|
1 |
Connect to the command line on your Security Gateway. |
2 |
Log in to the Expert mode. |
3 |
Get the list of the available integer kernel parameters and their values:
|
4 |
Analyze the output file:
|
To set a value for a SecureXL kernel parameter permanently:
Step |
Description |
---|---|
1 |
Connect to the command line on your Security Gateway. |
2 |
Log in to the Expert mode. |
3 |
See if the configuration file already exists:
|
4 |
If this file already exists, skip to Step 5. If this file does not exist, then create it manually and then skip to Step 6:
|
5 |
Back up the current configuration file:
|
6 |
Edit the current configuration file:
|
7 |
Add the required SecureXL kernel parameter with the assigned value in the exact format specified below. Important - This configuration file does not support space characters, tabulation characters, and comments (lines that contain the # character).
|
8 |
Save the changes in the file and exit the Vi editor. |
9 |
Reboot the Security Gateway. Important - In cluster, this can cause a failover. |
10 |
Connect to the command line on your Security Gateway. |
11 |
Log in to Gaia Clish or the Expert mode. |
12 |
Make sure the new value of the kernel parameter is set:
|
For more information, see sk26202: Changing the kernel global parameters for Check Point Security Gateway.