CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it yet again - That's right, the 3rd edition is here!
You can read his announcement post here.
It's a massive upgrade focusing on current versions, and well worth checking out. -E

 

Results 1 to 2 of 2

Thread: Enabling SecureXL

  1. #1
    Join Date
    2011-01-17
    Posts
    8
    Rep Power
    0

    Default Enabling SecureXL

    Hi folks

    I need to enable SecureXL on a few UTM-1 gateways running SPlat R75 build 141 and SPlat R75.10 build 141 in order to allow me to run the cpsizeme tool. Does anyone know if there are any gotchas associated with this, such as high CPU usage, dropped packets or anything else? Can it be done on the fly or is a reboot necessary? Is it safe to do during operational hours or is it best to do out of hours?

    Thanks in advance
    Phil.

  2. #2
    Join Date
    2006-01-25
    Location
    Americas
    Posts
    1,535
    Rep Power
    16

    Default Re: Enabling SecureXL

    cpsizeme does not work with multiqueue, however I doubt you have that enabled, so carry on.

    Quote Originally Posted by philKGH View Post
    Does anyone know if there are any gotchas associated with this, such as high CPU usage, dropped packets or anything else?
    Enabling SecureXL does run you the risk of dropping packets in weird ways, however those were generally pre-R75 days. CPU usage should improve (aka decrease) if you enable SecureXL.

    Quote Originally Posted by philKGH View Post
    Can it be done on the fly or is a reboot necessary?
    At the very least a cpstop / cpstart is required if not a reboot.

    Quote Originally Posted by philKGH View Post
    Is it safe to do during operational hours or is it best to do out of hours?
    After hours is recommended, but really depends on your environment and their tolerance for interruptions.

    HTH
    Its all in the documentation.

Similar Threads

  1. Enabling SecureXL
    By philKGH in forum R75.40 (GAiA)
    Replies: 0
    Last Post: 2014-05-21, 09:34
  2. auto-sra re-enabling?
    By dale.lakes in forum Check Point UTM-1 Edge Appliances
    Replies: 0
    Last Post: 2009-09-04, 12:30
  3. SecureXL
    By Testing-123 in forum Check Point IP Appliances and IPSO (Formerly Sold By Nokia)
    Replies: 1
    Last Post: 2008-09-17, 17:02
  4. SecureXL
    By charliey_2000 in forum Check Point IP Appliances and IPSO (Formerly Sold By Nokia)
    Replies: 12
    Last Post: 2007-12-27, 16:29
  5. Enabling IPv6
    By tgbayly in forum IPv6
    Replies: 6
    Last Post: 2006-08-13, 18:51

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •