Check Point firewalls Alert of the Week: Two cluster members differ in their SecureXL configuration

This is a real life sample alert from indeni.

Description:

This cluster member has SecureXL disabled. This does not match the SecureXL configuration of other cluster members.

Manual Remediation Steps:

Compare the SecureXL configuration of all members of this cluster using “fwaccel stat” and identify discrepancies.
We also suggest reading SK41397.

How does this alert work?

indeni automatically identifies when several devices are part of a cluster and then compares their configurations. In this case, it compares the output of “fwaccel stat”.