topic Virtual system on VSX in Firewall and Security Management

Virtual system on VSX

SkipperNavy — Tue, 24 Nov 2020 16:30:32 GMT

Hello,

I just created a new interface on a virtual system that coexist with other virtaul systems on a VSX.

On my SMS i see icmp request from a virtual system with ip 192.168.196.34.

i don't have this ip anywhere on my scope.

Does someone faced the same case?

Thank you

Re: Virtual system on VSX

JackPrendergast — Tue, 24 Nov 2020 16:36:20 GMT

Hello.

Yes, this is the default VSX Internal communication network.

This is the network that the VSX uses internally to pass traffic.

This is normal traffic.

If you need to change it, which isnt necessary in most cases, follow this SK

Re: Virtual system on VSX

Kaspars_Zibarts — Tue, 24 Nov 2020 19:30:03 GMT

Indeed it's a normal behaviour. If you add explicit rule with source your VS object, desired destination and service (i.e ICMP) then it should do automatic NAT and traffic will appear from real interface IP as a source instead of internal 192.168.x.x