- Products
- Learn
- Local User Groups
- Partners
- More
Introduction to Lakera:
Securing the AI Frontier!
Quantum Spark Management Unleashed!
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
SharePoint CVEs and More!
Hello everyone,
Hoping someone can help me understand the differences and use cases for the Virtual System packages in the product catalog.
In general, I see two different types:
For the "X", there are package options for 3, 10, 25 and 50 VSs
My question is when is each license type used?
I assume that if I want to stand up a single hardware device (Say 7000 GW for example) as a VSX gateway, I would order the first line item to meet the # of VSs required (and what fits the compute capacity).
What if you are doing a VSX cluster (2 6600 nodes for example)? Is that where the CPSB-VS-X-VSLS package is used instead? If so, is it ordered as one SKU item that is shared among the cluster (2 7000 Gws and any future ones if expanding horizontally). Or is is still one per GW regardless?
There seems to be a general MSRP price difference in the catalog as well so really trying to understand each here.
Thanks in advance
Pretty much nailed it though I believe with the current generation hardware the VSLS SKU option is no longer relevant / presented in the product catalogue from memory. Also there isn't a 5 gateway license increment as such.
Ttraditionally (for 2016 series and earlier gateway appliances) the primary/first node of a cluster carries the non VSLS license package.
Then the -VSLS variant is only used on subsequent members of a cluster being nodes 2 or 3 etc.
Each cluster member requires it's own license.
The licenses are stackable (per-node) with exception of the smallest increment.
Thanks @Chris_Atkinson for the response. Let me see if I understand this right:
Using a 4 node VSX cluster for 4 VSs as an example, would it be fair to say we could deploy with these two possible license situations:
Option 1:
node 1 (Primary) has a CPSB-VS-5 license and nodes 2, 3 , & 4 all each need a CPSB-VS-5-VSLS license.
Option 2:
node 1 (Primary) has a CPSB-VS-5 license and nodes 2, 3 , & 4 also have their own CPSB-VS-5 license
Option 1 licensing truly ties 3 of the members to only run in a VSLS cluster; with node 1 being able to run in a VSLS or as a single standalone VSX gateway.
Option 2 licensing provides all 4 gateways with options to be single VSX gateways or in a VSX/VSLS cluster; providing more options with the licenses in their deployment possibilities....but with a little higher cost 😉
Is that an accurate assessment or am I off?
Pretty much nailed it though I believe with the current generation hardware the VSLS SKU option is no longer relevant / presented in the product catalogue from memory. Also there isn't a 5 gateway license increment as such.
Thank you @Chris_Atkinson . Duly noted on the lack of 5 VS package.....my failed attempt for an example breakdown. Should have just said '10' 😉
The VSLS SKU was something I was not aware of being 'legacy' but that would make sense on why the non-vsls license was recommended to us from our account team. Can't blame a customer for asking....especially when VSLS was cheaper 😉
thanks again.
Each gateway needs the relevant licenses.
VS licenses are used on the first member of your VSX cluster.
VSLS licenses can be used on the other members of the VSX cluster.
Note that VSLS licenses cannot be used on their own (i.e. it must be paired with a node that is using regular VS licenses).
This also means VSLS licenses cannot be used on Maestro.
VS/VSLS licenses for 10 VSes and above are stackable on a gateway (meaning, you can purchase multiple of them as needed).
VS-3 licenses are not stackable and must be traded in to a VS-10 or higher.
Hi,
also to check for virtual switch/virtual routers that are not counted as VS License, will they need to be accounted for management server license ?
example for a management server of 5 gateways, with a single firewall of 10VS license, can the management server manages 5VS( with include of VS0) + 1 virtual switch? (Understand that VS0 is not counted for management license)
thank you
regards
Virtual Switches/Routers are not counted.
VSX Management licensing is outlined in sk119075.
On older versions, routers definitely consumed a VS slot. Any idea when that changed?
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
15 | |
12 | |
8 | |
6 | |
6 | |
6 | |
5 | |
5 | |
4 | |
3 |
Tue 30 Sep 2025 @ 08:00 AM (EDT)
Tips and Tricks 2025 #13: Strategic Cyber Assessments: How to Strengthen Your Security PostureTue 07 Oct 2025 @ 10:00 AM (CEST)
Cloud Architect Series: AI-Powered API Security with CloudGuard WAFTue 30 Sep 2025 @ 08:00 AM (EDT)
Tips and Tricks 2025 #13: Strategic Cyber Assessments: How to Strengthen Your Security PostureThu 09 Oct 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!Wed 22 Oct 2025 @ 11:00 AM (EDT)
Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents OutagesAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY