ClusterXL Load Sharing mode limitations and important notes

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution

Category	Feature	Limitation	Comments
Networking	NAT		Allocation of NAT ports is divided between all cluster members (also applies to the High Availability mode)
	IPv6	Not supported
	Layer 2 Bridge mode	Not supported
Configuration	Full HA	Not supported
Configuration	VSX mode	Not supported
Software Blades and features	DLP UserCheck	Not supported
	DLP 'Ask User' action	Not supported
	IPSec VPN with 3rd party IPsec peers	Enables Sticky Decision Function, which disables SecureXL	Applies only to clusters R80.10 and lower
	IPSec VPN	In versions from R80.20 to R81, Cluster Load Sharing mode is not supported with the IPsec VPN Software Blade This limitation does not apply to VSX in VSLS mode	Support for the IPsec VPN Software Blade is integrated starting in: Check Point R81.10 R81 Jumbo Hotfix Accumulator Take 34 and higher (PMTR-63196)
	Mobile Access SNX clients Visitor Mode support	Enables Sticky Decision Function, which disables SecureXL	For example, refer to sk105018.
	Application Control		Application Control Limit is divided between all cluster members. Example: If the 10 Mb limit is configured in the Application Control rulebase on ClusterXL with two members, then each cluster member enforces the 5 Mb limit.

Note: For support of ClusterXL Load Sharing mode in versions R80.20 and higher, refer to sk162637.

Give us Feedback

Please rate this document

[1=Worst,5=Best]

Comment
	Submitting rating