QOS standalone configuration

[loudermi]

We are currently using QOS on our enforcement points, but with added load to the devices we need to remove the floodgate module. QOS (floodgate) forces the use of only one CPU in a multi-CPU/Core server and disables secureXL.
My question is can you run Floodgate on a standalone server without purchasing an additional licence for VPN-1 power. I understand that it requires features of VPN-1, however I do not want to use this as firewall; only QOS.

Thanks,

Tim

[mcnallym]

No you can't, it needs to be run ontop of the VPN-1 Power or as an add-on for UTM-1.

It might be worth looking at the VPN-1 Multicore depending upon what box you have to spread the load across the cpu cores in your server.

[loudermi]

Thanks,

I am unsure if coreXL will work with floodgate active. If it does, this will solve my problem. Do you have any idea on how to activate this module as a Demo to test functionality??? There is very little information on the checkpoint web site.

Thanks,

Tim

[mcnallym]

All CoreXL does is spread the load across multiple CPU cores. It isn't like SecureXL where is actually interfering with the processing of traffic.

I believe, although I could be wrong but it is a seperate package. You would need to contact your Check Point reseller to get the package to see if this would work for you.

[loudermi]

It has been confirmed by my local Checkpoint SE that CoreXL is not supported on systems running Floodgate QOS. This is just another limitation the floodgate QOS package adds to a VPN-1/Firewall-1 installation.