156-215.80 · Question #291
The Firewall kernel is replicated multiple times, therefore:
The correct answer is D. The Firewall can run the same policy on all cores. Check Point CoreXL replicates the firewall kernel across multiple CPU cores to achieve parallel packet processing. All kernel instances enforce the same unified security policy.
Question
The Firewall kernel is replicated multiple times, therefore:
Options
- AThe Firewall kernel only touches the packet if the connection is accelerated
- BThe Firewall can run different policies per core
- CThe Firewall kernel is replicated only with new connections and deletes itself once the connection
- DThe Firewall can run the same policy on all cores
How the community answered
(15 responses)- C7% (1)
- D93% (14)
Why each option
Check Point CoreXL replicates the firewall kernel across multiple CPU cores to achieve parallel packet processing. All kernel instances enforce the same unified security policy.
The firewall kernel handles all connections regardless of acceleration status - SecureXL offloads accelerated sessions, but the kernel still processes new and complex connections.
Each replicated kernel instance enforces the identical policy - per-core policy differentiation is not supported and would undermine consistent security enforcement.
CoreXL kernel instances are persistent processes tied to CPU cores for the lifetime of the firewall service, not transient per-connection instances.
CoreXL creates multiple firewall kernel instances (FWK), one per assigned CPU core, and each instance processes separate network connections simultaneously. All instances share and enforce the same compiled security policy, ensuring consistent enforcement while maximizing multi-core throughput.
Concept tested: Check Point CoreXL multi-core firewall kernel replication
Source: https://support.checkpoint.com/results/sk/sk98737
Topics
Community Discussion
No community discussion yet for this question.