VSX instance for just URL/Application Control

[Aaron_Tebo]

Does anyone see the value to having a VSX instance of Checkpoint for URL filtering/Application control and one instance for traditional Edge Firewall activities?  Since the Edge firewall have few changes and URL filtering could have multiple changes within a week or day? 

Has anyone done anything similar or have thought to configure it this way? 

[Kaspars_Zibarts]

I probably would stick with one. It would be more efficient CPU resource wise. It didn't make much difference if you push policy once a week or once day as long as platform is not seriously underpowered. Just need to plan CoreXL adequately

[PhoneBoy]

If you have a need to maintain separation of duties above and beyond what R80.10 allows, it might make sense to use VSX.

That said you might also need multi-domain as well