High (softirq) CPU usage with Checkpoint NGX R65 with VLAN's, Less than optimal performance.

Products

• XOS

Issue/Introduction

High (softirq) CPU usage with Checkpoint NGX R65 with VLAN's, Less than optimal performance.When running with SecureXL enabled on Checkpoint Firewall NGX R65 and VLAN interfaces, performance is less than optimal. A higher than normal CPU load is seen as a result.

Cause

SecureXL is not accelerating the related packets.

Resolution

Add the following Checkpoint parameter as instructed in the Check Point HFA40 release notes (ID 00355718):

sim_vnd_route=1 to $PPKDIR/boot/modules/simkern.conf

Workaround

N/A