Configuring SecureXL

The GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. First Time Configuration Wizard automatically installs and enables SecureXLClosed Check Point product on a Security Gateway that accelerates IPv4 and IPv6 traffic that passes through a Security Gateway. on your Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources.. No additional configuration is required.

Starting from R80.20, you can disable the SecureXL only temporarily.

The SecureXL starts automatically when you start Check Point services (with the cpstart command), or reboot the Security Gateway.

Important:

  • Disable the SecureXL only for debug purposes, if Check Point Support explicitly instructs you to do so.

  • If you disable the SecureXL, this change does not survive reboot.

    SecureXL remains disabled until you enable it again on-the-fly, or reboot the Security Gateway.

  • If you disable the SecureXL, this change applies only to new connections that arrive after you disabled the acceleration.

    SecureXL continues to accelerate the connections that are already accelerated.

    Other non-connection oriented processing continues to function (for example, virtual defragmentation and VPN decrypt).

  • In a ClusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., you must configure all the Cluster Members in the same way.

Step

Instructions

1

Connect to the command line on your Security Gateway.

2

Log in to Gaia ClishClosed The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)., or Expert mode.

3

Examine the SecureXL status:

fwaccel stat

4

Disable the SecureXL:

fwaccel off [-a]

5

Examine the SecureXL status again:

fwaccel stat

Step

Instructions

1

Connect to the command line on your Security Gateway.

2

Log in to Gaia Clish, or Expert mode.

3

Examine the SecureXL status:

fwaccel6 stat

4

Disable the SecureXL:

fwaccel6 off [-a]

5

Examine the SecureXL status again:

fwaccel6 stat

Step

Instructions

1

Connect to the command line on your Security Gateway.

2

Log in to Gaia Clish, or Expert mode.

3

Examine the SecureXL status:

fwaccel stat

4

Enable the SecureXL:

fwaccel on [-a]

5

Examine the SecureXL status again:

fwaccel stat

Step

Instructions

1

Connect to the command line on your Security Gateway.

2

Log in to Gaia Clish, or Expert mode.

3

Examine the SecureXL status:

fwaccel6 stat

4

Enable the SecureXL:

fwaccel6 on [-a]

5

Examine the SecureXL status again:

fwaccel6 stat

For more information on these commands, see: