Introduction to Kernel Parameters

Kernel parameters let you change the advanced behavior of your Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Members / Scalable Platform Security Group A logical group of Security Appliances (in Maestro) / Security Gateway Modules (on Scalable Chassis) that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances / Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. In Maestro, each Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected..

These are the supported types of kernel parameters:

Type	Description
Integer	Accepts only one integer value.
String	Accepts only a plain-text string.

Important: In Cluster, you must see and configure the same value for the same kernel parameter on each Cluster Member Security Gateway that is part of a cluster.. In VSX Gateway Physical server that hosts VSX virtual networks, including all Virtual Devices that provide the functionality of physical network devices. It holds at least one Virtual System, which is called VS0., the configured values of kernel parameters apply to all existing Virtual Systems and Virtual Routers. On Scalable Platforms (Maestro and Chassis), you must connect to the applicable Security Group.

Security Gateway / Cluster Member / Security Group gets the names and the default values of the kernel parameters from these kernel module files:

• $FWDIR/boot/modules/fw_kern_64.o

• $FWDIR/boot/modules/fw_kern_64_v6.o

• $PPKDIR/boot/modules/sim_kern_64.o

• $PPKDIR/boot/modules/sim_kern_64_v6.o