R82 ElasticXL & VSNext Issues

[genisis__]

Built a R82 ElasticXL & VSNext Lab in Proxmox, JHFA installed is Take 25.

- I managed to delete ID0/VS0 which I should never be able to do.

- reassign magg1 from vs500 so in affect knocking at management, again should not be able to do this.

If you have had similar issues please post and hopefully Checkpoint can review and respond. 

I had one other issue where I created a virtual gateway through gclish however for some reason I could not connect to the management interface on the VG. So attempted to delete via GUI and then the system crashed.  I've logged a TAC case to investigate the crash logs.

[Timothy_Hall]

tp_dummy is an interface utilized by Zero Phishing, and I believe this interface was added in R82. It will be shown as non-accelerated in the output of fwaccel stat, as it terminates local traffic at the gateway ("local connection" F2F reason).  You can take a closer look at its SecureXL status with fwaccel if tp_dummy.  From the R82 Threat Prevention Administration Guide under Enabling the Zero Phishing Software Blade:

When you enable Zero Phishing with the automatic settings, a new interface is created in the Security Gateway infrastructure in GaiaClosed, called tp_dummy or tp_dummy_X (for VSX). This is a dummy interface which is intentionally isolated from external access. This interface has a constant IP and allows Zero Phishing clients to communicate with the Security Gateway. When automatic settings are used, the client communicates with the Security Gateway using the FQDN "zero-phishing.iaas.checkpoint.com".

[genisis__]

Thanks Tim.

When I first saw this, it was confusing until I figured out it had something to do with Threat Protection.

[genisis__]

Matan - I got told by Checkpoint that Proxmox is now supported, can you confirm?

[Chris_Atkinson]

Only Check Point appliances are officially supported with EXL for production use to my knowledge.

Perhaps the context was confused with sk180399.

[matanbe_chkpcp]

Hello,

Currently we support VMware only. Proxmox is on plan for 2026.

Thanks, 

Matan

[genisis__]

Great! Thanks for the confirmation.