VSX plateform

[DZ_KB]

Hi Everybody,

Can someone share the link in wich I'll can find on which checkpoint plateform I can do VSX ?

Thanks a lot.

Regards

n.n

[JackPrendergast]

You should do VSX on the latest supported version - which is R80.40 🙂

Admin guide below.

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_VSX_AdminGuide/Content/Topic...

[DZ_KB]

Hi @JackPrendergast,

I am looking for a link that tells wich plateform can do VSX.

[JackPrendergast]

 You can run and build VSX on any supported Check Point platform such as open server or of course, Check Point hardware.

It’s recommended to use Check Point hardware.

A better question is, what hardware do you have and what do you want to build your VSX on? Then we can assist and tell you if it’s supported  🙂

[DZ_KB]

I have 21400, 23500 and 12600

[PhoneBoy · Accepted solution]

All of those should be able to run VSX with a varying number of VSes depending on which software blades you have enabled, how much RAM you have, etc.
It likely will require additional licensing depending on which SKUs you purchased.

If you're doing a new production VSX deployment on the 12600 and 21400, I strongly recommend getting newer appliances and use those instead.
The 12600 and 21400 were End of Engineering Support in June of this year, going fully End of Support in June 2022.
The latest release supported on these appliances is R80.40.

[DZ_KB]

If i can do vsx on 21400, what is the difference with a 21400-VSX ?

nb: of course we plane to change these hardware because of the end of support.

[JackPrendergast]

Hello.

Not sure we know what you mean here?

The difference will be that you are splitting up your 21000 series hardware into multiple virtual systems. As PhoneBoy said above, this then creates some extra overhead as each VS will be sharing the physical systems resources.

To clarify too, there isnt any VSX-Specific hardware. Check Point hardware can be used in a VSX or non-VSX way - but how much you can build and how much capacity you have is dependant on the system resources you are building on.

[Bob_Zimmerman]

The difference is the license which comes with the purchase.

VSX is a software feature. It has nothing to do with the hardware. It works on open servers or appliances (which are just really expensive and non-standard open servers). Last I checked, VSX can even be enabled without a specific license and it will let you run one VS this way for separation of management traffic from through-traffic. Running more VSs takes a license for the feature.

There is also nothing virtual about it beyond the virtualization inherent in preemptive multitasking. VSs are just additional routing tables (VRFs in old software versions, network namespaces in GAiA 3.10). There is exactly as much separation between VSs as there is between Cisco VRFs or Docker containers on Linux. Less separation than there is between Cisco VDCs, FreeBSD jails, or Solaris zones. It's all one single OS.

[PhoneBoy]

The 12400 and 12400-VSX only differed in the software license that was included.
With the possible exception of included RAM, they are otherwise identical.