Configuring SecureXL

The Gaia First Time Configuration Wizard automatically installs and enables SecureXL on your Security Gateway. No additional configuration is required.

Starting from R80.20, you can disable the SecureXL only temporarily. The SecureXL starts automatically when you start Check Point services (with the cpstart command), or reboot the Security Gateway.

Important:

• Disable the SecureXL only for debug purposes, if Check Point Support explicitly instructs you to do so.
• If you disable the SecureXL, this change does not survive reboot.

  SecureXL remains disabled until you enable it again on-the-fly, or reboot the Security Gateway.

• If you disable the SecureXL, this change applies only to new connections that arrive after you disable the acceleration.

  SecureXL continues to accelerate the connections that are already accelerated.

  Other non-connection oriented processing continues to function (for example, virtual defragmentation and VPN decrypt).

• In Cluster, you must configure the SecureXL in the same way on all of the cluster members.

To temporarily disable SecureXL for IPv4:

Step	Description
1	Connect to the command line on your Security Gateway.
2	Log in to Gaia Clish, or Expert mode.
3	Examine the SecureXL status: fwaccel stat
4	Disable the SecureXL: fwaccel off [-a]
5	Examine the SecureXL status again: fwaccel stat

To temporarily disable SecureXL for IPv6:

Step	Description
1	Connect to the command line on your Security Gateway.
2	Log in to Gaia Clish, or Expert mode.
3	Examine the SecureXL status: fwaccel6 stat
4	Disable the SecureXL: fwaccel6 off [-a]
5	Examine the SecureXL status again: fwaccel6 stat

To enable SecureXL again for IPv4:

Step	Description
1	Connect to the command line on your Security Gateway.
2	Log in to Gaia Clish, or Expert mode.
3	Examine the SecureXL status: fwaccel stat
4	Enable the SecureXL: fwaccel on [-a]
5	Examine the SecureXL status again: fwaccel stat

To enable SecureXL again for IPv6:

Step	Description
1	Connect to the command line on your Security Gateway.
2	Log in to Gaia Clish, or Expert mode.
3	Examine the SecureXL status: fwaccel6 stat
4	Enable the SecureXL: fwaccel6 on [-a]
5	Examine the SecureXL status again: fwaccel6 stat