topic Re: Appliance vs. Virtual Machine in Firewall and Security Management

Appliance vs. Virtual Machine

Nbto — Thu, 21 Nov 2019 11:16:33 GMT

Hi Mates!

I'm wondering whats the benefit of using VS on for example VMWare Esxi instead of normal CheckPoint Appliance.

When should choose VS over CHP App? For example I would like to setup enviroment with SandBlast which will operate on over 10000 users?

Best Wishes,

Nbto

Re: Appliance vs. Virtual Machine

Danny — Thu, 21 Nov 2019 11:23:34 GMT

Sandblast is Appliance or Cloud or Hybrid, no VS.

Re: Appliance vs. Virtual Machine

Nbto — Thu, 21 Nov 2019 11:26:28 GMT

Yes yes, but I mean more MGMT + some GWs on VS and for example SandBlast appliance.
Or even without Sandblast.

Re: Appliance vs. Virtual Machine

G_W_Albrecht — Thu, 21 Nov 2019 11:57:04 GMT

Out of my experience, Management works very fine in a VM - backup, clone in ESX, snapshot, backup, migrate export in GAiA, you will never have more promising security tools. What to do about the GW is another topic altogether...

Re: Appliance vs. Virtual Machine

mdjmcnally — Thu, 21 Nov 2019 11:57:40 GMT

Sandblast as in the ThreatEmulation/Threat Extraction solution is not supported as Virtual Machine. I believe for Official Check Point Courses that there are special installs that allow to run a Private Sandblast Machine but certainly not Production before anyone points that out.

No real difference in terms benefits/disadvantage of Physical vs Virtual for Check Point then any other solution. As long as you can provide the necessary hardware then will run fine as Physical or Virtual.

Re: Appliance vs. Virtual Machine

Chris_Atkinson — Thu, 21 Nov 2019 14:58:38 GMT

A further point of clarification VS (VSX) is not supported on VMware.

Virtual Edition (VE) is how we traditionally refer to security gateways deployed as Virtual Machines.

[Otherwise known as VSEC or Cloudguard IaaS.]