topic Re: CloudGuard Network KVM - Mellanox Connect-5 Support in Cloud Firewall

CloudGuard Network KVM - Mellanox Connect-5 Support

franctorres — Tue, 01 Feb 2022 17:28:28 GMT

Hi Cloudmates a costumer have a Gygabyte Server with Mellanox MCX516A-GCAT ConnectX-5 cards.... they told me that Fortinet and PAN have support to do a PCI passthrough with the KVM virtual enviroment....

Can we have this functionality with Cloudguard Network for KVM?

Re: CloudGuard Network KVM - Mellanox Connect-5 Support

Chris_Atkinson — Tue, 08 Feb 2022 00:25:05 GMT

NVIDIA ConnectX NICs are leveraged in Quantum Lightspeed appliances today.

Cloud applications seems like a logical extension of this and I would encourage you to speak to your local Check Point SE about submitting an RFE / HCL request if this is important to you.

Re: CloudGuard Network KVM - Mellanox Connect-5 Support

franctorres — Mon, 07 Feb 2022 16:02:45 GMT

Hi Chris I understand that CloudGuard don't have support of the PCI-PassThrough? can you confirm me?

Re: CloudGuard Network KVM - Mellanox Connect-5 Support

HeikoAnkenbrand — Mon, 07 Feb 2022 16:47:23 GMT

Hi @franctorres,

The following drivers (see below) are supported by Check Point and also supported with multi queueing. If necessary, PCI-PassThrough should also work here. In this case, they will probably also have to be listed in the Check Point HW Compatibility List.


Driver	Max Speed (Gbps)	Description	Maximal Number of RX Queues
igb	1	Intel® Network Adapter Driver for PCIe 1 Gigabit Ethernet Network	2-16 (depends on the interface)
ixgbe	10	Intel® Network Adapter Driver for PCIe 10 Gigabit Ethernet Network	16
i40e	40	Intel® Network Adapter Driver for PCIe 40 Gigabit Ethernet Network	64
i40evf	40	Intel® i40e driver for Virtual Function Network Devices	4
mlx5_core	40	Mellanox® ConnectX® mlx5 core driver	60
ena	20	Elastic Network Adapter in Amazon® EC2	Configured automatically
virtio_net	10	VirtIO paravirtualized device driver from KVM®	Configured automatically
vmxnet3	8	VMXNET Generation 3 driver from VMware®	8

Re: CloudGuard Network KVM - Mellanox Connect-5 Support

Chris_Atkinson — Tue, 08 Feb 2022 00:23:56 GMT

We support PCI passthrough only for certified NICs for some this also includes SR-IOV.