> Source: [sk162544](https://support.checkpoint.com/results/sk/sk162544)

# sk162544 - SecureXL Templates Disabled by 'gdhcp' Related Services

| Property | Value |
|----------|-------|
| Solution ID | sk162544 |
| Date Created | 2019-09-20 |
| Last Modified | 2022-10-05 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R81.10 (EOS), R81 (EOS) |

## Symptoms

- * When using 'gdhcp' services in the Security Policy it disables SecureXL Accept Templates.
* 'fwaccel stat' shows SecureXL Accept Templates are disabled. For example:  

  ```
  
  [Expert@Hostname:1]# fwaccel stat
  +-----------------------------------------------------------------------------+
  |Id|Name |Status  |Interfaces |Features                                       |
  +-----------------------------------------------------------------------------+
  |0 |SND  |enabled |eth1,eth2  |Acceleration,Cryptography                      |
  |  |     |        |           |Crypto: Tunnel,UDPEncap,MD5,                   |
  |  |     |        |           |SHA1,NULL,3DES,DES,CAST,                       |
  |  |     |        |           |CAST-40,AES-128,AES-256,ESP,                   |
  |  |     |        |           |LinkSelection,DynamicVPN,                      |
  |  |     |        |           |NatTraversal,AES-XCBC,SHA256                   |
  +-----------------------------------------------------------------------------+
  
  Accept Templates : disabled by Firewall
  Layer Network disables template offloads from rule #2
  Throughput acceleration still enabled.
  Drop Templates : disabled
  NAT Templates : disabled by Firewall
  Layer Network disables template offloads from rule #2
  Throughput acceleration still enabled.
  ```

## Cause

The statement found in [sk32578 - SecureXL Mechanism](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk32578&partition=Advanced&product=SecureXL%22) is not applicable to global DHCP services:

"Starting in R80.10, 'dhcp-request' / 'dhcp-reply' / 'dhcpv6-request' / 'dhcpv6-reply' / 'dhcpv6-relay' are exceptions of "Other Services". Therefore, rule that contains these services, does not disable SecureXL Accept Templates"

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content