VSX Management Overview

VSX supports two Check Point management models: Security Management Server and Multi-Domain Security Management. Both models provide central configuration, management and monitoring for multiple VSX Gateways and Virtual Systems. The choice of management model depends on several factors, including:

• The scale of the current deployment and anticipated expansion
• Administrative requirements
• Physical and operational requirements
• Licensing restrictions

You can use either management model to manage a "physical" Security Gateway together with a VSX Gateway and Virtual Systems. You can also manage VPN communities and remote connections with either model.

Note - According to the Check Point EULA (End User License Agreement), a Security Gateway can only manage security policies for Virtual Systems belonging to a single legal entity. In order to manage Virtual Systems belonging to multiple legal entities, you need to deploy a Multi-Domain Security Management solution with a separate Domain Management Server for each legal entity. For more information regarding Licensing, refer to your Check Point Reseller.

Included Topics Security Management Server Model Multi-Domain Security Management Model Management Model Comparison Management Server Communication - SIC

Security Management Server Model

The Security Management Server model is for enterprise deployments with many Virtual Systems but one domain. SmartDashboard connects to the VSX Gateway, which contains the Virtual Systems, and directly manages each Virtual System.

Multi-Domain Security Management Model

Using the Multi-Domain Security Management model, administrators centrally manage multiple independent networks, typically belonging to different Domains, divisions or branches. The Multi-Domain Server is the central management node that controls the network and security policy databases for each of these networks.

Each Domain network is managed by a Domain Management Server, which provides the full functionality of a Security Management Server and can host multiple Virtual Systems, virtual and physical devices. The server that manages the VSX Gateway is the Main Domain Management Server. A VSX Gateway can host Virtual Systems that are managed by different Domain Management Servers.

Item	Description
1	SmartDomain Manager
2	Multi-Domain Server
3	SmartDashboard
4	Domain Management Server
5	Main Domain Management Server
6	VSX Gateway
7	Virtual Systems in Domain Management Servers

Using the SmartDomain Manager, you provision and configure Domains and Domain Management Servers. Each Domain Management Server uses its own SmartDashboard instance to provision and configure its Virtual Systems, Virtual Devices, and security policies.