Checkpoint VSX - Security Zones

[Lyaofei]

Hi All,

Would like to check does VSX supports Security zones?

Try to search around but couldn't find documentation related to this config.

Thank You

[Danny · Accepted solution]

Of course. See here.

[Lyaofei]

Hi Danny,

There is no option to define the security zone here.

[Danny]

What does topology show?

[Chris_Atkinson]

Just confirming your gateway version is R81 or higher?

(Required if you wish to use these objects in NAT & TP policy).

[Kristof_Vermael · Accepted solution]

Verified this on a  R81.10 VSX cluster, security zone option is available. 

[Lyaofei]

Just tested in R81.10 Cluster and yes, the security zone potion is available.
My existing lab is using checkpoint 4800 so it's actually running on r77.30 firmware.

Thank You

[PhoneBoy]

Right, and R77.30 is both End of Support and doesn't support this feature.

[PhoneBoy]

Support for Security Zones was added to R80.10 (VSX and regular gateway)