Enabling and Disabling CoreXL

Important Notes for Cluster:

• You must configure the CoreXL in the same way on all the cluster members. Otherwise, a cluster member with a greater number of CoreXL Firewall instances by design enters the Down state (see sk42096).
• If you enable CoreXL, disable CoreXL, or change the number of CoreXL Firewall instances, you should treat this change as a version upgrade.

  Schedule a full maintenance window and follow the instructions in the R80.20 Installation and Upgrade Guide - Chapter Upgrading ClusterXL Deployments.

  Perform either a Minimal Effort Upgrade procedure (requires downtime), or a Zero Downtime Upgrade procedure (no downtime, but active connections are lost). Instead of the version upgrade, configure the CoreXL on each cluster member.

To change the CoreXL configuration:

Step	Description
1	Connect to the command line on the Security Gateway.
2	Log in to Gaia Clish or Expert mode.
3	Run: cpconfig
4	Enter the number of the Check Point CoreXL option.
5	Enter the number of the applicable option: (1) Change the number of firewall instances (2) Change the number of IPv6 firewall instances (3) Disable Check Point CoreXL
6	Follow the instructions on the screen.
7	Exit from the cpconfig menu.
8	Reboot the Security Gateway.