Creating Checkpoint VSX and Virtual System - Part 1

VPN-1/FireWall-1 Virtual System Extension (VSX) is a security and VPN solution, designed to meet the demands of large-scale environments. Centrally managed and incorporating key network resources internally, VSX allows businesses to offer comprehensive firewall and VPN functions to their customers, while reducing production costs and improving efficiency. Through a “virtualization” of network infrastructure, VSX allows administrators to use it to replace a collection of standard hardware devices. The VSX Gateway is comprised of a virtual topology that includes virtual devices that replace physical ones, such as routers, traditional firewalls, and even some network cables. 

Checkpoint Configuring VSX document shows how to create a new VSX system and how to create new virtual system, router and switch as well. This is the post to record the procedure how the lab has been done in my virtual environment.

I am using VMware ESXi version 5.5.0 build 1623387 as the host to do lab for Checkpoint related products.In previous lab, a standalone security gateway R77.20 with management has been installed. This time I will add a new VSX gateway and a couple of virtual system, router and switch in.

Step1: create a new VSX gateway with VSX Gateway Wizard:

For how to install Checkpoint Gateway and management server, you should be able to find lots of videos in Youtube website, such as the following two:

•  Checkpoint GAIA R77 Installation & Configuration part I

• Checkpoint GAIA R77 Installation & Configuration part II

After you have installed Checkpoint Gateway and management server on your VM system, you will need to log into Checkpoint Smart Dashboard to start VSX gateway wizard.

 2. During wizard, you will have an option to add virtual system, virtual router or virtual switch in:

 

 3. VSX Gateway Properties:

 4. Now we can create Virtual System, Virtual Router or Virtual Switch