Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Iron

Virtual Router - PA Equivalent

Jump to solution

Hi,

Currently we have a PA Firewall (800 series) on which he has created two virtual routers and one is used for voice traffic which has a different gateway and the other one has data which has a different networks and different ISP. How can it be achieved in Checkpoint Firewall ? I know we can use PBR for voice traffic however what is the exact equivalent for the same? This is very similar to vrf concepts. Can it be achieved in say 3200 Checkpoint Firewall ?

0 Kudos
1 Solution

Accepted Solutions
Highlighted
Employee++
Employee++

VSX provides virtualization of a security gateway and allows creation of Virtual Firewall Systems & Virtual Routers.

View solution in original post

0 Kudos
6 Replies
Highlighted
Employee++
Employee++

VSX provides virtualization of a security gateway and allows creation of Virtual Firewall Systems & Virtual Routers.

View solution in original post

0 Kudos
Highlighted
Iron
Hello,
How can we do without creating virtualization ?
1. If we are creating virtualization, do we need any license for that ?
2. Don't we have any equivalent to have different vrfs.
0 Kudos
Highlighted
Employee++
Employee++

Two VS are included by default.

Paid license increments are 3,10,25,50

e.g. 

CPSB-VS-3 (primary gateway)

CPSB-VS-3-VSLS (standby gateway)

 

0 Kudos
Highlighted
Iron
But is there any equivalent for vrf with single instance instead of creating two ? Because in the existing they have a single instance of firewall with two virtual routers (PA). So will prefer the same.
0 Kudos
Highlighted
Employee++
Employee++

The only other choice that may be relevant is multi-instance OSPF depending on your actual requirements.

Highlighted
Iron
Thanks Chris
0 Kudos