topic Re: Can't enable TE blade on VSX Gateway in General Topics

Can't enable TE blade on VSX Gateway

Baasanjargal_Ts — Wed, 25 Oct 2023 03:36:58 GMT

Hello,

We've trying to enable TE blade on maestro VSX gateway object. When we enable TE and select remote TE250X appliance,, Smart console gives error and disconnecting. Is this supported or not?

Re: Can't enable TE blade on VSX Gateway

Chris_Atkinson — Wed, 25 Oct 2023 09:28:07 GMT

Which version/JHF of Management & Maestro does the environment consist of?

Enable Threat Emulation only at the Virtual System Level.

Do not enable the Threat Emulation Software Blade in the VSX Gateway or VSX Cluster object, because it does not participate in the Threat Emulation process.

Source: https://sc1.checkpoint.com/documents/r81.20/webadminguides/en/cp_r81.20_threatprevention_adminguide/content/topics-tpg/configuring-threat-prevention-settings-on-vsx-gateways.htm

Refer also:

sk79700: VSX supported features

sk173183: Scalable Platforms (Maestro and Chassis) comparison between versions

Re: Can't enable TE blade on VSX Gateway

G_W_Albrecht — Wed, 25 Oct 2023 07:11:44 GMT

sk106496:

When I enable the Threat Emulation Software Blade in the Virtual System object, should I also enable this blade in the VSX Gateway object?

No.

The VSX Gateway is not involved in the Threat Emulation process.

Re: Can't enable TE blade on VSX Gateway

Baasanjargal_Ts — Mon, 30 Oct 2023 07:00:18 GMT

Hello Chris,

Management and Maestro VSX gateway both R81.10 Take 95 environment. We're using only VSX gateway (VS0). There is no any VS is not created yet now. Can we use VSX gateway VS0 for enabling TE blade?

Re: Can't enable TE blade on VSX Gateway

Baasanjargal_Ts — Mon, 30 Oct 2023 07:39:27 GMT

Hello,

It means no support TE blade on VSX gateway (VS0)?

Re: Can't enable TE blade on VSX Gateway

G_W_Albrecht — Mon, 30 Oct 2023 10:48:23 GMT

No - read sk106496 for the details !

Re: Can't enable TE blade on VSX Gateway

Baasanjargal_Ts — Tue, 31 Oct 2023 01:15:10 GMT

Hello,

I am confusing on this doc. Is it possible to enable TE blade on VSX gateway (VS0). As I understand If we want to use TE blade on specific VS, just enable TE blade on VS. But in our case, we need to use TE blade on VS0. Is this possible, or not?

Re: Can't enable TE blade on VSX Gateway

Chris_Atkinson — Tue, 31 Oct 2023 01:38:10 GMT

Please revisit your design, it is typically not recommended to run production traffic through VS0 intended for Management.