topic R80.20 mgmt VM in VMware in Firewall & Security Management

R80.20 mgmt VM in VMware

ED — Thu, 14 Mar 2019 11:42:37 GMT

Hi,

I want to setup R80.20 management server as a VM in VMware ESXi. Can someone confirm these are the correct settings?

Guest OS: RHEL7?

CPU:

I wish to have 8xCore. 1 core x 8 sockets OR 8 cores x 1 socket. What do I choose?

Memory:

Hard disk: Thick provision or thin provision?

Network: E100E or VMXNET 3?

Re: R80.20 mgmt VM in VMware

Jerry — Thu, 14 Mar 2019 11:51:46 GMT

yes it should work but why don't you make thin provisioning instead? would that be only SMS or also SMS+CLM? if only SMS - you seem good to go, I got it exactly same fasion and it works like a charm 🙂

Re: R80.20 mgmt VM in VMware

Wolfgang — Thu, 14 Mar 2019 12:23:37 GMT

8xCore. 1 core x 8 sockets OR 8 cores x 1 socket. What do I choose?

It's up to you, with both settings you get 8 cores in your virtual machine. There are existing licensing models from some software vendors related to cores or socket, but Check Point licenses only cores.

Re: R80.20 mgmt VM in VMware

ED — Thu, 14 Mar 2019 12:31:54 GMT

Hi Jerry,

What did you choose on CPU? I mean the question related to cores and sockets, what option of the two I showed. It's only SMS. Thin provision or thick provision will not be any important difference for Gaia OS? Probably the only risk is VMware itself getting full on a datastore without Gaia knowing that if i choose thin.

Re: R80.20 mgmt VM in VMware

ED — Thu, 14 Mar 2019 12:34:01 GMT

Hi Wolfgang,

So Gaia OS will see it the same way and not impact anything on performance based on what I choose? Which of these two options do you usually go for?

Re: R80.20 mgmt VM in VMware

Jerry — Thu, 14 Mar 2019 12:50:36 GMT

based on my experience and regardless whether you've got loads of disk space on "store" or not I'd recommend to use thin rather than tick as the performance impact on new linux kernel matters 🙂 the call is still yours! cheers

Re: R80.20 mgmt VM in VMware

ED — Thu, 14 Mar 2019 13:23:47 GMT

Interesting Jerry. What is the official Check Point recommendation for management server on a virtual machine, thick or thin? You say that it affects performance on the new linux kernel based on what we choose, thick or thin. Do you know how or is it just based on your own experience? Sorry if i ask too much 🙂

Re: R80.20 mgmt VM in VMware

Jerry — Thu, 14 Mar 2019 13:34:07 GMT

hi Enis

what is the official vendor's answer I cannot tell obviously and this need to be addressed with either @PhoneBoy or Tim/Heiko - sorry if I missed anyone.
with regards to my own experience with R80.20 SMS performance wise THIN is better as it is faster, that's what I can tell only.

Re: R80.20 mgmt VM in VMware

Timothy_Hall — Thu, 14 Mar 2019 14:00:44 GMT

Don't think it will matter much in VMWare, but I'd go 8x1 on CPUs instead of 1x8. Thin disk provisioning is not recommended, but thick/lazy is OK. Please see this SK which has been updated for the new 3.10 kernel:

sk104848: Best Practices - Performance Optimization of Security Management Server installed on VMware ESX Virtual Machine

Re: R80.20 mgmt VM in VMware

PhoneBoy — Fri, 15 Mar 2019 16:19:34 GMT

As I recall "thick provisioned" is what is supported though I use "thin provisioned" successfully in my lab.

Re: R80.20 mgmt VM in VMware

Jerry — Sat, 16 Mar 2019 10:25:44 GMT

told you THIN is also not a bad one 🙂