topic Re: CloudGuard IaaS VMware Questions in Cloud Firewall

CloudGuard IaaS VMware Questions

Daniel_Collins — Fri, 06 Nov 2020 10:57:20 GMT

Hello Check Mates!

Hoping you could help clear something up for me.

We know that Gaia can detect that it's on a virtual platform, as it states that it's installed on VMware in the Gaia portal.

Is this merely a cosmetic message? or is there some system customizations/optimizations that are made in the system at the point of install to best use the software for a virtual platform? Such as the scheduler etc?

I know of sk104848 and I can see that in R81 those customizations that are suggested aren't implemented by default. Not that this is a problem, I am just trying to establish if the system is somewhat-optimized for the hardware out of the box?

Thanks

Daniel

Re: CloudGuard IaaS VMware Questions

G_W_Albrecht — Fri, 06 Nov 2020 11:40:11 GMT

This is for licensing purposes - you get the error "Invalid license: VE license is required" on GWs only. Should use vSEC licenses, but there is no inforcement afaik. No optimization involved here at all 8)

Re: CloudGuard IaaS VMware Questions

Daniel_Collins — Fri, 06 Nov 2020 11:58:34 GMT

So you think it's there to just ensure the system is correctly licensed?

Re: CloudGuard IaaS VMware Questions

Sigbjorn — Fri, 06 Nov 2020 12:50:25 GMT

Check Point also provides vmware tools which is started as a service if its running on vmware.

The service is called vmtoolsd if you want to check if its started.

Without the tools, vmware will not be able to report ip etc.

Re: CloudGuard IaaS VMware Questions

PhoneBoy — Fri, 06 Nov 2020 15:45:11 GMT

Yes, running in VMware has some different drivers active and of course vmtools.
Not sure there are any specific optimizations outside that.

Re: CloudGuard IaaS VMware Questions

Daniel_Collins — Fri, 06 Nov 2020 16:35:57 GMT

I'm guessing that's the VMXNET drivers etc for the virtualised hardware.

vmtools I'm not really counting as that's a service needed for host access, rather than specific system optimizations.

Re: CloudGuard IaaS VMware Questions

Chris_Atkinson — Sat, 07 Nov 2020 00:27:25 GMT

There are some tuning recommendations for VE Gateways in sk169252.

Did you install from ISO or are you using the OVFs from sk158292?

Re: CloudGuard IaaS VMware Questions

Joerg_B — Sat, 07 Nov 2020 17:31:58 GMT

great info

Re: CloudGuard IaaS VMware Questions

Paul_Hagyard — Wed, 21 Apr 2021 03:41:33 GMT

For anyone that's interested, open-vm-tools is included when installing from ISO on VMware - you do not need to install from OVF.