background image

VSX-1 Overview

Chapter 1

Introduction

11

VSX-1 Overview

The VSX-1 (Virtual System eXtension) appliance is a security and VPN 
solution, designed to meet the demands of large-scale environments. 
Based on the proven security of VPN-1, VSX provides comprehensive 
protection for multiple networks or VLANs within complex 
infrastructures. It securely connects them to shared resources such as 
the Internet and DMZs, and allows them to safely interact with each 
other. VSX is supported by SmartDefense™ Services, which provide 
up-to-date preemptive security. 

VSX incorporates the same patented Stateful Inspection and 
Application Intelligence technologies used in the Check Point VPN-1 
product line. It runs on high speed platforms (known as VSX 
gateways) to deliver superior performance in high-bandwidth 
environments. Administrators manage VSX via a SmartCenter server or 
a Provider-1 Multi-Domain Server (MDS), delivering a unified 
management architecture that supports enterprises and service 
providers.

A VSX gateway contains a complete set of virtual devices that 
function as physical network components, such as VPN-1 gateways 
(firewalls), routers, switches, interfaces, and even network cables. 
Centrally managed, and incorporating key network resources 
internally, VSX allows businesses to deploy comprehensive firewall 
and VPN functionality, while reducing hardware investment and 
improving efficiency. 

Key Features

:

Combines Virtual Firewall, VPN, and IPS

Consolidates Up to 250 Security Gateways Onto a Single 
Hardware Platform

Includes Virtualized Networking Components- Virtual routers, 
Virtual switches & Virtual cabling

Wire-Speed Security for Gigabit Networks

High Availability with Linear Growth Clustering

VSX_Appliance_GettingStarted.book  Page 11  Thursday, February 5, 2009  3:56 PM

Содержание VSX-1 3070

Страница 1: ...VSX 1 Getting Started Guide VSX NGX R65 U 40 P 20 703522 February 2009...

Страница 2: ......

Страница 3: ...s been taken in the preparation of this book Check Point assumes no responsibility for errors or omissions This publication and features described herein are subject to change without notice RESTRICTE...

Страница 4: ...4...

Страница 5: ...tistatic bag when they are not in use or not installed in the chassis Some circuitry on the system board can continue operating even though the power is switched off Under no circumstances should the...

Страница 6: ...ll or remove any system board components Failure to do this can result in personnel injury or equipment damage Avoid short circuiting the lithium battery this can cause it to superheat and cause burns...

Страница 7: ...w 17 Installing and Setting Up VSX 1 18 Ear Mount Installation 18 Installing VSX 1 in a Rack 20 Connecting the Cables and Power On 21 Initial Configuration 23 Logging in for the First Time 23 Configur...

Страница 8: ...Panel Components 38 Customer Replaceable Parts 40 Power Supply 40 Cooling Fan 42 Expansion Line Card 43 Hard Disk Drive 45 Chapter 4 Registration and Support Registration 47 Support 48 Where To From H...

Страница 9: ...t up to date and secure solutions available today Check Point also delivers worldwide technical services including educational professional and support services through a network of Authorized Trainin...

Страница 10: ...y solutions refer to http www checkpoint com or call Check Point at 1 800 429 4391 For additional technical information refer to http support checkpoint com Welcome to the Check Point family We look f...

Страница 11: ...liver superior performance in high bandwidth environments Administrators manage VSX via a SmartCenter server or a Provider 1 Multi Domain Server MDS delivering a unified management architecture that s...

Страница 12: ...nt Internal Firewalls Flexible Virtual Network Design SmartDefense Services Updates URL Filtering This document provides A brief overview of essential VSX 1 appliance concepts and features A step by s...

Страница 13: ...VSX 1 3070 Shipping Carton Item Description Appliance A single VSX 1 3070 appliance Rack Mounting Accessories Hardware mounting kit Cables 1 Power cable 1 Standard RJ 45 network cable 1 Serial consol...

Страница 14: ...ck Mounting Accessories Hardware mounting kit Cables 2 Power cables 1 Standard RJ 45 network cable 1 Serial console cable 1 RJ 45 loopback plug 2 CDs Includes the following CD1 VSX 1 Installation CD2...

Страница 15: ...liances Rack Mounting Accessories Hardware mounting kit Cables 4 Power cables 2 Standard RJ 45 network cable 2 Serial console cable 2 RJ 45 loopback plug 2 CDs Includes the following CD1 VSX 1 Install...

Страница 16: ...s a SmartConsole application that manages logs SmartDashboard A SmartConsole GUI application that is used by the system administrator to create and manage the security policy Centrally Managed Deploym...

Страница 17: ...detail further on To configure VSX 1 1 Install VSX 1 by ear mount or in the rack 2 Connect the cables and power on 3 Log in and perform the initial configuration Installation and Configuration Workflo...

Страница 18: ...n The VSX 1 appliance ships with two ear mount kits and screws of the type shown in Figure 2 1 Figure 2 1 Ear Mount Screws One ear mount fits on each side of the chassis To assemble the ear mounts 1 T...

Страница 19: ...etting Up VSX 1 Chapter 2 Installation and Configuration 19 Figure 2 2 Ear Mounts 3 Fasten the four retaining screws on each ear mount 4 Fasten the two screws that connect the ear mount to the handle...

Страница 20: ...Installing and Setting Up VSX 1 20 Installing VSX 1 in a Rack Install the system in the rack with the network ports facing the front of the rack Figure 2 3 Installing VSX 1 9070...

Страница 21: ...Power button to start the appliance 3 Wait for the appliance to initialize and boot The status of the appliance appears on the LCD screen Note When a power supply fails or is not connected to the out...

Страница 22: ...Installing and Setting Up VSX 1 22 The appliance is ready for use when the model number is displayed The example shown above is specific to VSX 1 9070...

Страница 23: ...ity None Stop bit 1 2 Log in for the first time using admin as the default username and password Follow the on screen instructions to change the password and optionally to change the administrator use...

Страница 24: ...n to continue the network configuration process 8 Follow the on screen instructions to change the Host Name Domain Name and Domain Name Servers as you choose based on your configuration See Configurin...

Страница 25: ...tion of the Management interface 1 In the Network Configuration screen type 4 to open the Network Connections screen The Network Connections screen opens 2 Type 2 to select Configure connection The Ch...

Страница 26: ...pe 1 to Change IP settings and then enter an IP address network mask and broadcast address for the Management interface 5 Return to the Network Configuration menu by typing e twice 6 Type 5 to select...

Страница 27: ...ype y to accept the license agreement and proceed to the clustering options Selecting Cluster Options To enable VSX clustering features 1 The question Would you like to install a Check Point clusterin...

Страница 28: ...to add a license at this time In most cases you should add licenses later using the GUI client 2 Enter and confirm a SIC activation key You will need to provide this key in order to establish SIC tru...

Страница 29: ...ceived in your shipping carton into a portable USB CD ROM DVD ROM drive 3 Connect the portable CD ROM DVD ROM drive to the appliance s USB socket 4 Power On your appliance 5 Once the appliance boots f...

Страница 30: ...owing information when prompted a SmartCenter server or primary CMA IP address b Administrator username and password c Gateway or member object name d SIC activation key for the recovered gateway or c...

Страница 31: ...e components of the VSX 1 appliance and instructions for installing and removing the hardware Overview This section discusses the hardware components comprising the VSX 1 appliance Overview page 31 Cu...

Страница 32: ...w 32 Front Panel Components This section describes the features and components located on the appliance front panel VSX 1 9070 page 33 VSX 1 3070 page 34 Expansion Line Cards page 35 Hard Disk Drives...

Страница 33: ...ization port for synchronizing with cluster members or a high availability peer 4 Console port for a serial connection to the appliance using a terminal emulation program such as HyperTerminal 5 USB p...

Страница 34: ...nal emulation program such as HyperTerminal 6 Internal connection port Ethernet connection to a remote management workstation 7 External connection port Ethernet connection to connect outside the orga...

Страница 35: ...splay up and down Use the ENTER button to make selections The ESC button is intended for future functionality All of the buttons on the LCD display are only functional while the count down to the boot...

Страница 36: ...ble Table 3 3 Expansion Cards Available for VSX 1 9070 Model Description CPPWR ACC 4 1C 1000BaseT line card CPPWR ACC 4 1SRF 1GbE Multi mode SR fiber optic line card CPPWR ACC 4 1LRF 1GbE Single mode...

Страница 37: ...ot swappable hard disk drives RAID1 Figure 3 1 Hard Disk Drives RAID1 Mirroring Implemented by a dedicated RAID controller the VSX 1 9070 model performs RAID1 mirroring across two hard disk drives Mir...

Страница 38: ...power to the entire unit Redundant Power Supply Units Located at the right rear of VSX 1 9070 two hot swappable power supply units provide built in power redundancy Each power supply connects to an e...

Страница 39: ...ains three replaceable cooling fans Each cooling fan operates independently of the others providing redundancy in the event of failure Figure 3 3 Cooling Fans in VSX 1 9070 VSX 1 3070 contains one coo...

Страница 40: ...drives Unless directed to do so by Check Point technical support customers are prohibited by warranty and support agreements from replacing any parts Customers are prohibited from opening the VSX 1 ap...

Страница 41: ...arm button to the right of the power supply The alarm stops 2 Remove the power cord 3 Loosen the retaining screw located above the power socket 4 Pull the extraction handle to remove the power supply...

Страница 42: ...til it clicks into place 2 Tighten the retaining screws 3 Insert the power cord Verify that the green LED is illuminated Cooling Fan This section presents the procedures for removing and installing a...

Страница 43: ...the appliance Push firmly until it clicks into place 2 Tighten the four retaining screws in the corners of the fan assembly Expansion Line Card This section presents the procedures for removing and i...

Страница 44: ...wer supply units 2 Loosen the retaining screws on either side of the expansion line card 3 Holding the screws pull the expansion line card out of the slot Installing Expansion Line Cards To install an...

Страница 45: ...ng or removing a hard disk drive VSX 1 9070 contains two hot swappable RAID 1 hard disk drives Figure 3 7 Hard Disk Drives Removing a Hard Disk Drive To remove a hard disk drive 1 Using the key suppli...

Страница 46: ...Hard Disk Drive To install a hard disk drive 1 Slide the replacement hard disk drive into the slot 2 Push the extraction handle until it closes and the drive clicks into place 3 Using the key supplied...

Страница 47: ...register your appliance please visit http register checkpoint com cpapp if you are evaluating a VSX 1 appliance you will have access to a 15 day evaluation license key Registration page 47 Support pag...

Страница 48: ...http support checkpoint com Where To From Here You have now learned the basics that you need to get started The next step is to obtain more advanced knowledge of your Check Point software Check Point...

Отзывы: