Security Gateway Modules (SGMs)

Background

The Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. Modules (SGMs) in the Chassis work together as one, high performance Security Gateway or VSX GatewayClosed Physical server that hosts VSX virtual networks, including all Virtual Devices that provide the functionality of physical network devices. It holds at least one Virtual System, which is called VS0.. You can add SGMs and it scales the performance of the system. An SGM can be added and removed without losing connections. If an SGM is removed or fails, traffic is distributed to the other active SGMs.

These SGM models are available:

  • SGM400

  • SGM260

  • SGM220

For more information, see the Quantum Scalable Chassis Getting Started Guide and sk93332.

Identifying SGMs in the Chassis (asg_detection)

Description

Use this command in the Expert mode to flash the LEDs of an SGM.

Use Case

This lets you identify the specified SGM.

Syntax

asg_detection [ -b <SGM IDs> ] [ -t <time> | off ]

Parameters

Parameter

Description

-b <SGM IDs>

Applies to Security GroupClosed A logical group of Security Gateway Modules that provides Active/Active cluster functionality. A Security Group can contain one or more Security Gateway Modules. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Members as specified by the <SGM IDs>.

<SGM IDs> can be:

  • No <SGM IDs> specified, or all

    Applies to all Security Group Members and all Chassis

  • One Security Group Member (for example, 1_1)

  • A comma-separated list of Security Group Members (for example, 1_1,1_4)

  • A range of Security Group Members (for example, 1_1-1_4)

  • In Dual Chassis, one Chassis (chassis1, or chassis2)

  • In Dual Chassis, the Active Chassis (chassis_active)

The default is the local SGM, on which you run this command.

-t <Time>

Specifies for how long (in seconds ) the LEDs flash.

Default is 60 seconds.

-t off

Stops LED flashes if they continue after the time specified with the "-t <Time>" parameter.