156-215.80 · Question #328
Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?
The correct answer is B. TCP port 265. Check Point ClusterXL uses TCP port 265 for full synchronization between cluster members, as handled by the Firewall Kernel.
Question
Full synchronization between cluster members is handled by Firewall Kernel. Which port is used for this?
Options
- AUDP port 265
- BTCP port 265
- CUDP port 256
- DTCP port 256
How the community answered
(20 responses)- A5% (1)
- B90% (18)
- C5% (1)
Why each option
Check Point ClusterXL uses TCP port 265 for full synchronization between cluster members, as handled by the Firewall Kernel.
UDP port 265 is incorrect because full synchronization requires TCP for guaranteed delivery - UDP is used for delta sync but on a different port (8116), not port 265.
Check Point ClusterXL performs full synchronization over TCP port 265, which provides reliable, connection-oriented delivery of the complete state table between cluster members. TCP is specifically required for full sync because completeness and ordering of data transfer is critical, while delta synchronization uses UDP port 8116 for lower-latency incremental state updates.
UDP port 256 is wrong on both counts - the protocol must be TCP for full sync, and the correct port number is 265, not 256.
TCP port 256 uses the correct protocol but the wrong port number - the Firewall Kernel uses port 265, not 256, for full cluster synchronization.
Concept tested: ClusterXL full synchronization TCP port 265
Source: https://support.checkpoint.com/results/sk/sk34476
Topics
Community Discussion
No community discussion yet for this question.