Support Center > Search Results > SecureKnowledge Details
ClusterXL Load Sharing mode limitations and important notes Technical Level
Solution
This problem was fixed. The fix is included in: Note: ClusterXL in Load Sharing mode is not supported with IPSec VPN blade enabled.

Check Point recommends to always upgrade to the most recent version.


Category Feature Limitation Comments
Networking NAT   Allocation of NAT ports is divided between all cluster members (also applies to the High Availability mode).
IPv6 Not supported  
Layer 2 Bridge mode Not supported  
Configuration Full HA Not supported  
VSX mode Not supported  
Software Blades
and features
DLP UserCheck Not supported  
DLP 'Ask User' action Not supported  

IPSec VPN with 3rd party IPsec peers

Enables Sticky Decision Function, which disables SecureXL  

IPSec VPN

In versions from R80.20 to R81, Cluster Load Sharing mode is not supported with the IPsec VPN Software Blade For more information and possible solution, refer to sk171421.

Mobile Access

  • SNX clients
  • Visitor Mode support
Enables Sticky Decision Function, which disables SecureXL For example, refer to sk105018.
Application Control   Application Control Limit is divided between all cluster members.
Example:
If 10Mb limit is set in Application Control rulebase on ClusterXL with two members, then each cluster member will enforce 5Mb limit.

Note: For support of ClusterXL Load Sharing mode in versions R80.20 and higher, refer to sk162637.

Applies To:
  • This solution replaces sk87241

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment