topic Re: Checkpoint VSX - Security Zones in Firewall and Security Management

Checkpoint VSX - Security Zones

Lyaofei — Tue, 29 Nov 2022 06:24:18 GMT

Hi All,

Would like to check does VSX supports Security zones?

Try to search around but couldn't find documentation related to this config.

Thank You

Re: Checkpoint VSX - Security Zones

Danny — Tue, 29 Nov 2022 06:46:45 GMT

Of course. See here.

Re: Checkpoint VSX - Security Zones

Lyaofei — Tue, 29 Nov 2022 09:31:12 GMT

Hi Danny,

There is no option to define the security zone here.

Re: Checkpoint VSX - Security Zones

Danny — Tue, 29 Nov 2022 09:54:39 GMT

What does topology show?

Re: Checkpoint VSX - Security Zones

Chris_Atkinson — Tue, 29 Nov 2022 12:30:58 GMT

Just confirming your gateway version is R81 or higher?

(Required if you wish to use these objects in NAT & TP policy).

Re: Checkpoint VSX - Security Zones

Kristof_Vermael — Tue, 29 Nov 2022 10:23:51 GMT

Verified this on a R81.10 VSX cluster, security zone option is available.

Re: Checkpoint VSX - Security Zones

PhoneBoy — Tue, 29 Nov 2022 11:14:25 GMT

Support for Security Zones was added to R80.10 (VSX and regular gateway)

Re: Checkpoint VSX - Security Zones

Lyaofei — Tue, 29 Nov 2022 11:52:20 GMT

Just tested in R81.10 Cluster and yes, the security zone potion is available.
My existing lab is using checkpoint 4800 so it's actually running on r77.30 firmware.

Thank You

Re: Checkpoint VSX - Security Zones

PhoneBoy — Tue, 06 Dec 2022 00:30:10 GMT

Right, and R77.30 is both End of Support and doesn't support this feature.