Support Center > Search Results > SecureKnowledge Details
SecureXL is automatically enabled on DAIP Gateway and it is not possible to disable it
Symptoms
  • SecureXL is automatically enabled on Security Gateway with Dynamically Assigned IP (DAIP) and it is not possible to disable it in "cpconfig" menu.

    Example scenario:

    1. During First Time Configuration Wizard select "Security Gateway" and select "Dynamically Assigned IP"
    2. Complete the Wizard
    3. Machine is rebooted
    4. Configure PPPoE
    5. Traffic over PPPoE is dropped with "...is dropped by cphwd_offload_conn Reason: VPN and/or NAT traffic between accelerated and non-accelerated interfaces or between non-accelerated interfaces is not allowed" message per sk79880, which means that SecureXL is currently enabled
    6. Connect to command line
    7. In "cpconfig" menu, there is no option "Disable Check Point SecureXL" (which is by design, because SecureXL is not supported on Security Gateway with Dynamically Assigned IP)
Cause

First Time Configuration Wizard automatically enables SecureXL before verifying if this machine is Security Gateway with Dynamically Assigned IP (DAIP).


Solution
Note: To view this solution you need to Sign In .