Can't enable TE blade on VSX Gateway

[Baasanjargal_Ts]

Hello,

We've trying to enable TE blade on maestro VSX gateway object. When we enable TE and select remote TE250X appliance,, Smart console gives error and disconnecting. Is this supported or not?

[Chris_Atkinson]

Which version/JHF of Management & Maestro does the environment consist of?

Enable Threat Emulation only at the Virtual System Level.

Do not enable the Threat Emulation Software Blade in the VSX Gateway or VSX Cluster object, because it does not participate in the Threat Emulation process.

Source: https://sc1.checkpoint.com/documents/r81.20/webadminguides/en/cp_r81.20_threatprevention_adminguide/...

Refer also:

sk79700: VSX supported features 

sk173183: Scalable Platforms (Maestro and Chassis) comparison between versions 

[Baasanjargal_Ts]

Hello Chris,

Management and Maestro VSX gateway both R81.10 Take 95 environment. We're using only VSX gateway (VS0). There is no any VS is not created yet now. Can we use VSX gateway VS0 for enabling TE blade?

[Baasanjargal_Ts]

Hello,

I am confusing on this doc. Is it possible to enable TE blade on VSX gateway (VS0). As I understand If we want to use TE blade on specific VS, just enable TE blade on VS. But in our case, we need to use TE blade on VS0. Is this possible, or not? 

[Chris_Atkinson]

Please revisit your design, it is typically not recommended to run production traffic through VS0 intended for Management.

[G_W_Albrecht]

sk106496:

When I enable the Threat Emulation Software Blade in the Virtual System object, should I also enable...

No.

The VSX Gateway is not involved in the Threat Emulation process.

[Baasanjargal_Ts]

Hello,

It means no support TE blade on VSX gateway (VS0)?

[G_W_Albrecht]

No - read sk106496 for the details !