156-215.80 · Question #319
Which of the following is NOT an attribute of packer acceleration?
The correct answer is D. Application Awareness. SecureXL packet acceleration uses lower-layer connection attributes (5-tuple) to build templates, but Application Awareness requires deep packet inspection which is incompatible with the acceleration path.
Question
Which of the following is NOT an attribute of packer acceleration?
Options
- ASource address
- BProtocol
- CDestination port
- DApplication Awareness
How the community answered
(50 responses)- A6% (3)
- C4% (2)
- D90% (45)
Why each option
SecureXL packet acceleration uses lower-layer connection attributes (5-tuple) to build templates, but Application Awareness requires deep packet inspection which is incompatible with the acceleration path.
Source address is a standard 5-tuple attribute used by SecureXL to build and match acceleration templates for connections.
Protocol (TCP, UDP, ICMP) is one of the core 5-tuple attributes that SecureXL uses for packet acceleration template matching.
Destination port is part of the 5-tuple used by SecureXL to identify and accelerate matching traffic flows.
Application Awareness requires Layer 7 deep packet inspection performed by the Application Control blade and the full firewall inspection stack - it cannot be handled by SecureXL acceleration templates. SecureXL operates on network-layer attributes and bypasses full inspection, so any traffic requiring application-level classification is excluded from packet acceleration.
Concept tested: SecureXL packet acceleration template attributes
Source: https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecureXL_AdminGuide/Topics-SXLAG/SecureXL-Overview.htm
Topics
Community Discussion
No community discussion yet for this question.