Check Point VSX integration with VCE Vblock

[Alex_Rozhko]

Hello CHECKMATES,

was searching blogs, could not find relevant information thus posting new Q. Did anyone deployed integration of Check Point VSX with VCE Vblock? Can you share your challenges, recommendations and "not to do" things? What CP appliances were used, what physical ports used: 10gb, 40gb, ++? How many physical interfaces used? what segmentation approach was used?

[PhoneBoy]

Are you protecting the Vblock itself or segmenting VMs inside the Vblock?

For the latter, you should probably look at deploying CloudGuard IaaS (or a similar solution) for this.

To protect the Vblock itself, it really depends on how much traffic you're putting to/from it as to what the best solution is.

[Alex_Rozhko]

In my case both. Currently I have legs from Vblock in multiple physical DMZs behind physical firewalls that will be collapsed into VSX cluster.