156-315.80 · Question #171
The Firewall kernel is replicated multiple times, therefore:
The correct answer is D. The Firewall can run the same policy on all cores. On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy, or instance, runs on one processing core. These instances handle traffic concurrently, and each instance is a complete and independent inspection kernel. When…
Question
The Firewall kernel is replicated multiple times, therefore:
Options
- AThe Firewall kernel only touches the packet if the connection is accelerated
- BThe Firewall can run different policies per core
- CThe Firewall kernel is replicated only with new connections and deletes itself once the connection
- DThe Firewall can run the same policy on all cores.
How the community answered
(31 responses)- A3% (1)
- B3% (1)
- C13% (4)
- D81% (25)
Explanation
On a Security Gateway with CoreXL enabled, the Firewall kernel is replicated multiple times. Each replicated copy, or instance, runs on one processing core. These instances handle traffic concurrently, and each instance is a complete and independent inspection kernel. When CoreXL is enabled, all the kernel instances in the Security Gateway process traffic through the same interfaces and apply the same security policy. https://sc1.checkpoint.com/documents/R77/CP_R77_PerformanceTuning_WebAdmin/6731.htm
Topics
Community Discussion
No community discussion yet for this question.