U.S. Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

CheckPoint 156-315.81 Exam - Topic 9 Question 78 Discussion

What is the limitation of employing Sticky Decision Function?
B) Acceleration technologies, such as SecureXL and CoreXL are disabled when activating SDF
A) With SDF enabled, the involved VPN Gateways only supports IKEv1
C) With SDF enabled, only ClusterXL in legacy mode is supported
D) With SDF enabled, you can only have three Sync interfaces at most

CheckPoint 156-315.81 Exam - Topic 9 Question 78 Discussion

Actual exam question for CheckPoint's 156-315.81 exam
Question #: 78
Topic #: 9
[All 156-315.81 Questions]

What is the limitation of employing Sticky Decision Function?

Show Suggested Answer Hide Answer
Suggested Answer: B

Sticky Decision Function (SDF) is a feature that ensures that VPN traffic is handled by the same core on a Security Gateway with multiple CPU cores. This improves the performance and stability of VPN tunnels by avoiding out-of-order packets and reducing encryption overhead. However, the limitation of employing SDF is that acceleration technologies, such as SecureXL and CoreXL are disabled when activating SDF. This means that SDF may reduce the overall throughput and scalability of the Security Gateway. Therefore, SDF should be used only when necessary and only on gateways that are dedicated to VPN traffic. Reference:R81 Performance Tuning Administration Guide


Contribute your Thoughts:

0/2000 characters
Dottie
1 month ago
I think I remember something about SDF and its limitations, but I'm not entirely sure if it's related to IKEv1 support.
upvoted 0 times
...

Save Cancel