topic Re: R82 - ElasticXL on OpenServers & Virtual Servers in Firewall and Security Management

R82 - ElasticXL on OpenServers & Virtual Servers

David_Robinson — Wed, 17 Jul 2024 10:06:24 GMT

Hi All,

Will ElasticXL support Openservers and KVM virtual machines?

Also, will there be an upgrade path from existing ClusterXL to ElasticXL?

Thanks

Dave

Re: R82 - ElasticXL on OpenServers & Virtual Servers

G_W_Albrecht — Wed, 17 Jul 2024 11:58:45 GMT

Q1: No, only CP appliances are supported, no mix and match as in Maestro

Q2: This is a different solution - you can decide to use SecureXL or ElasticXL including Maestro features

Re: R82 - ElasticXL on OpenServers & Virtual Servers

David_Robinson — Wed, 17 Jul 2024 12:34:55 GMT

Q1, so ElesticXL will only ever be supported on physical checkpoint appliances?

It will be a nightmare for testing in labs, etc, if that's the case, especially if it won't support virtual labs i.e KVM

Re: R82 - ElasticXL on OpenServers & Virtual Servers

G_W_Albrecht — Wed, 17 Jul 2024 13:15:39 GMT

At least upon release this will be a limitation ! No nightmare, it will just not work 😉

As with Maestro or VSX you would need a demo appliance for Lab. We even got temporary additional HW for our Maestro Lab deployment from CP local office for customer presentation...

Re: R82 - ElasticXL on OpenServers & Virtual Servers

PhoneBoy — Wed, 17 Jul 2024 18:01:32 GMT

At the time of release of R82, only physical Check Point appliances will support ElasticXL.
I believe there are plans to release a conversion (from ClusterXL) sometime after that.

As for support in VM and/or on Open Servers, at least not initially.
In terms of it being made to work on VM/Open Servers, it seems possible (albeit without official support) based on several CheckMates threads.
Partners do have access to an ElasticXL blueprint in DemoPoint where this functionality can be demonstrated.

Re: R82 - ElasticXL on OpenServers & Virtual Servers

the_rock — Thu, 18 Jul 2024 01:13:36 GMT

Check out this workaround @ShaiF provided in my post. Its NOT officially supported, but it does work.

Andy

Solved: Re: R82 elasticXL lab - Check Point CheckMates

Re: R82 - ElasticXL on OpenServers & Virtual Servers

ShaiF — Fri, 19 Jul 2024 06:52:24 GMT

Hi,

1. Open servers and vms- there's an option to work with VMs and open servers using R82 for labs testing, demo etc... not for production.

Just need to make sure we connect eth0 to mgmt network and eth1 to Sync network. For VM it might be you will need to adjust some security settings on the vSwitches if gateways are not auto discovered. Official support is on roadmap and will be released later on with JHF or R82.10

2. Migration tool from Cluster XL to ElasticXL and clusterXL vsx to ElasticXL VSNext - Tool will be available close to R82 GA release.

Regards,

Shai

Re: R82 - ElasticXL on OpenServers & Virtual Servers

PhoneBoy — Fri, 19 Jul 2024 18:50:39 GMT

Thanks for the clarification @ShaiF

Re: R82 - ElasticXL on OpenServers & Virtual Servers

Don_Paterson — Wed, 19 Mar 2025 18:34:33 GMT

Hi @ShaiF

Maybe you can help me to understand for certain, if:

1. Traditional VSX R82 is supported on VMs (as per the Gaia HCL and the R82 RN)?

2. if this is a change from VSX in older versions (e.g. R81.20), which were not being supported on VMs (for live/production)?

That is how I understood it and see it now.

From https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_RN/Content/Topics-RN/Supported-Environments.htm?TocPath=%20Supported%20Environments%7C_____0#Supported_Environments

VSNext and Traditional VSX

This table shows the support for VSNext and Traditional VSX

in R82:

Platforms	VSNext ⁽¹⁾	Traditional VSX
ElasticXL Cluster ⁽²⁾	Yes ⁽³⁾	No
Security Group - Maestro	Yes ⁽⁴⁾	Yes ⁽⁵⁾
Security Group - Scalable Chassis	No	Yes ⁽⁶⁾
Open Servers	No	Yes ⁽⁶⁾
Virtual Machines	No	Yes ⁽⁶⁾

The Gaia Operating System must be after a clean install, or restored to factory defaults.

In SmartConsole, you configure a VSX Gateway object and the required Virtual System / Virtual Switch objects.

Thanks,

Don