Management Interface

A VSX deployment can be managed using one of the following interface schemes:

• Dedicated Management Interface (DMI): Uses a separate interface that is restricted to management traffic, such as provisioning, logging and monitoring
• Non-Dedicated Management Interface: Uses a shared internal or external interface that also carries routine user traffic

Dedicated Management Interface (DMI)

Check Point recommends that you use a DMI for management to segregate management traffic from routine "production" traffic enhanced performance, especially for end users.

Non-Dedicated Management Interface

When configuring a non-DMI deployment, you can define remote management connections only via a Virtual Switch or Virtual Router. Remote management connects via a Virtual System are not supported.

When using non-DMI for the following reasons:

• Provisioning and logging may degrade user performance.
• Non-DMI is irreversible - you cannot change a non-DMI gateway to DMI.