Support Center > Search Results > SecureKnowledge Details
ClusterXL Load Sharing mode limitations and important notes Technical Level
Solution



Category Feature Limitation Comments
Networking NAT   Allocation of NAT ports is divided between all cluster members (also applies to the High Availability mode)
IPv6 Not supported  
Layer 2 Bridge mode Not supported  
Configuration Full HA Not supported  
VSX mode Not supported  
Software Blades
and features
DLP UserCheck Not supported  
DLP 'Ask User' action Not supported  

IPSec VPN with 3rd party IPsec peers

Enables Sticky Decision Function, which disables SecureXL Applies only to clusters R80.10 and lower

IPSec VPN

In versions from R80.20 to R81, Cluster Load Sharing mode is not supported with the IPsec VPN Software Blade

This limitation does not apply to VSX in VSLS mode

Support for the IPsec VPN Software Blade is integrated starting in:

Mobile Access

  • SNX clients
  • Visitor Mode support
Enables Sticky Decision Function, which disables SecureXL For example, refer to sk105018.
Application Control   Application Control Limit is divided between all cluster members.
Example:
If the 10 Mb limit is configured in the Application Control rulebase on ClusterXL with two members, then each cluster member enforces the 5 Mb limit.

Note: For support of ClusterXL Load Sharing mode in versions R80.20 and higher, refer to sk162637.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment