156-585: Check Point Certified Troubleshooting ExpertDemo

By Checkpoint · Question Mode

QuestionQ1

Advanced Troubleshooting Techniques

If IPS protections that stop SecureXL from accelerating traffic, such as Network Quota, Fingerprint Scrambling, and TTL Masking, must be used, what practice is recommended to improve gateway performance?

  • A Use the IPS exception mechanism
  • B Disable all such protections
  • C Disable SecureXL and use CoreXL
  • D Upgrade the hardware to include more Cores and Memory
Explanation

Certain IPS protections inspect or alter every packet in a flow and therefore force the affected connections out of the SecureXL accelerated (fast) path and into F2F processing, which can significantly reduce gateway throughput. Check Point recommends using the IPS protections' exception mechanism to limit application of protections like Network Quota, Fingerprint Scrambling, and TTL Masking to only the traffic/scope that genuinely needs them, so that unrelated connections remain eligible for SecureXL acceleration instead of unnecessarily bypassing it.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!