Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Krishnan
Participant

Virtual Router - PA Equivalent

Jump to solution

Hi,

Currently we have a PA Firewall (800 series) on which he has created two virtual routers and one is used for voice traffic which has a different gateway and the other one has data which has a different networks and different ISP. How can it be achieved in Checkpoint Firewall ? I know we can use PBR for voice traffic however what is the exact equivalent for the same? This is very similar to vrf concepts. Can it be achieved in say 3200 Checkpoint Firewall ?

0 Kudos
1 Solution

Accepted Solutions
Chris_Atkinson
Employee
Employee

VSX provides virtualization of a security gateway and allows creation of Virtual Firewall Systems & Virtual Routers.

View solution in original post

0 Kudos
6 Replies
Chris_Atkinson
Employee
Employee

VSX provides virtualization of a security gateway and allows creation of Virtual Firewall Systems & Virtual Routers.

View solution in original post

0 Kudos
Krishnan
Participant
Hello,
How can we do without creating virtualization ?
1. If we are creating virtualization, do we need any license for that ?
2. Don't we have any equivalent to have different vrfs.
0 Kudos
Chris_Atkinson
Employee
Employee

Two VS are included by default.

Paid license increments are 3,10,25,50

e.g. 

CPSB-VS-3 (primary gateway)

CPSB-VS-3-VSLS (standby gateway)

 

0 Kudos
Krishnan
Participant
But is there any equivalent for vrf with single instance instead of creating two ? Because in the existing they have a single instance of firewall with two virtual routers (PA). So will prefer the same.
0 Kudos
Chris_Atkinson
Employee
Employee

The only other choice that may be relevant is multi-instance OSPF depending on your actual requirements.

Krishnan
Participant
Thanks Chris
0 Kudos