CCSE Manual page 321
“SecureXL Traffic Flow
Packets passing through the Security Gateway. follow a path based on the acceleration. the inspection requirements and need for changing data.
Firewall (F2Fl Path- When SecureXL is not enabled. all packets passing through the gateway. have to:
• Pass through the modules of the Firewall's inbound chain
• Go to the network layer. handled by the operating system
• Get routed to the other side
• Pass through the modules of the Firewall's outbound chain
This is the slowest path and is called the Firewall Path or F2F. also called Slow Path.”
I'd say B
"Firewall Path - This path also processes all packets when SecureXL is disabled."
https://downloads.checkpoint.com/fileserver/SOURCE/direct/ID/115918/FILE/CP_R81.10_PerformanceTuning_AdminGuide.pdf
This post suggests B is correct:
"There are three main effects when SecureXL is disabled:
1) All traffic will now be handled in the F2F/Firewall path, and cannot be processed in the more efficient PXL or SXL paths. "
https://community.checkpoint.com/t5/Security-Gateways/Performance-Improved-with-SecureXL-turned-off/td-p/51844
Also here this diagram:
https://community.checkpoint.com/t5/General-Topics/R80-x-Performance-Tuning-Tip-Control-SecureXL-CoreXL-Paths/m-p/72006/highlight/true#M14599
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Keerberus
1 year, 2 months agoJimbob_101
1 year, 2 months agotimmitch1987
1 year, 3 months agoMcBeano
1 year, 4 months agoMcBeano
1 year, 4 months agoShahrouz
1 year, 4 months ago