156-585: Check Point Certified Troubleshooting Expert

Certain IPS protections inspect or alter every packet in a flow and therefore force the affected connections out of the SecureXL accelerated (fast) path and into F2F processing, which can significantly reduce gateway throughput. Check Point recommends using the IPS protections' exception mechanism to limit application of protections like Network Quota, Fingerprint Scrambling, and TTL Masking to only the traffic/scope that genuinely needs them, so that unrelated connections remain eligible for SecureXL acceleration instead of unnecessarily bypassing it.