ESXi virtual firewall instance

[Glenmark_Impex]

Hello all experts!

We would like to use Checkpoint gateway virtual (ESXi VM) instance instead "hardware" openserver solution or appliance. My question is what a kind of a license we should buy?
CPSG-XC-NGTP or CPSG-VSEC-VEN-BUN.

[G_W_Albrecht]

CPSG-VSEC-VEN-BUN-NGxx-... = 1 CloudGuard Network virtual core for VMware ESXi, Hyper-V, KVM Gateway.

[Chris_Atkinson]

Both will work but the VSEC SKU is the better option.

[Glenmark_Impex]

Dear Chris

If openserver "CPSG-XC-NGTP license + ESXi vm" supported by Checkpoint in this case cost of ownership will much more better.
But for example: we will open TAC request in the future.  Do we have any risk get back answer - your license officially incompatible with virtual solution?

[Chris_Atkinson]

Wouldn't think so but suggest discussing in detail with your CP SE as the scope of detail provided here around use case is pretty limited.

[G_W_Albrecht]

You will get a warning on every reboot that you do not have the appropriate license for ESXi - but no further adoo anyway. This is more a hint that Cost is lower with VSEC-VEN 😎

OpenServer licenses are expensive compared with alternatives - sales reports they are seldom sold, mostly renewed...

[G_W_Albrecht · Accepted solution]

Any CPSG-xC-NGTP will cost more as CPSG-VSEC-VEN-BUN-NGTP, especially after 1 year. Also, Management license is included in CPSG-VSEC-VEN-BUN, but not in CPSG-xC-NGTP.

[Glenmark_Impex]

Dear Albrecht,

Thank you for advice.

Just for clarification, we have answer from Checkpoint sales, Management blades should be purchased separately. May be they have some differences in an offers for different regions.

[PhoneBoy]

I cannot check at the moment if the SKU you mention includes local management or not.
In general, any gateway SKU that includes a management component can only run management on the same system as the gateway.
Meaning: if you want to run management on a separate system from your gateway, you need to purchase a separate license for it.

Hope that clarifies things.