Enabling and Disabling CoreXL

Important Notes for Cluster:

You must configure the CoreXL Performance-enhancing technology for Security Gateways on multi-core processing platforms. Multiple Check Point Firewall instances are running in parallel on multiple CPU cores. in the same way on all the cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. members.
If you enable CoreXL, disable CoreXL, or change the number of CoreXL Firewall instances, you should treat this change as a version upgrade.

Schedule a full maintenance window and follow the instructions in the R81 Installation and Upgrade Guide - Chapter Upgrading ClusterXL Deployments.

Perform either a Minimal Effort Upgrade procedure (requires downtime), or a Zero Downtime Upgrade procedure (no downtime, but active connections are lost). Instead of the version upgrade, configure the CoreXL on each cluster member Security Gateway that is part of a cluster..

To change the CoreXL configuration

Step

Instructions

Run:

cpconfig

Enter the number of the Check Point CoreXL option.

Enter the number of the applicable option:

(1) Change the number of firewall instances

(2) Change the number of IPv6 firewall instances

(3) Disable Check Point CoreXL

Follow the instructions on the screen.

Exit from the cpconfig menu.

Reboot the Security Gateway.