VSX Provisioning

The procedures for provisioning and configuring VSX Gateways, clusters and Virtual Devices using the Multi-Domain Server model are essentially the same as described for the Security Gateway management model. The most important difference is that you must first create and configure each Domain and its associated Domain Management Server objects using the SmartConsole connected to a Multi-Domain Server.

Each Domain Management Server is the functional equivalent of one VSX Gateway. You connect to each Domain Management Server with SmartConsole to work with network objects, security policies and other objects for that VSX Gateway.

This is the basic workflow for provisioning a VSX environment in a Multi-Domain Server deployment:

1. Define and configure Multi-Domain Server and Multi-Domain Log Server as applicable for your deployment.
2. Create and configure a Domain and Domain Management Server for each VSX Gateway and/or VSX Cluster.
3. With SmartConsole, connect to the Domain Management Server to create and configure the VSX Gateway and/or VSX Cluster objects.

   Configure the default security policy for these objects as necessary.

4. Define individual Domains and Domain Management Servers as required for your deployment.
5. Create and configure Virtual Systems and other Virtual Devices for each Domain in the SmartConsole connected to that Domain.

Defining Multi-Domain Servers

This section briefly presents the procedures for installing and deploying Multi-Domain Server machines in a VSX / Multi-Domain Security Management environment. See the R80.20 Multi-Domain Security Management Administration Guide for conceptual information and detailed procedures for configuring Multi-Domain Servers and Domain Management Servers.

When working with Management High Availability, define at least two Multi-Domain Server machines. You can also use multiple Multi-Domain Server machines to efficiently distribute management traffic (management Load Sharing) with more than one Domain Management Server for each Domain. For a load sharing Load Sharing deployment, define a Domain Management Server for each Multi-Domain Server.