VSX Management Interface

Dedicated Management Interface (DMI)

Uses a separate interface on a VSX GatewayClosed Physical server that hosts VSX virtual networks, including all Virtual Devices that provide the functionality of physical network devices. It holds at least one Virtual System, which is called VS0. / VSXClosed Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. ClusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Members that is restricted to management traffic, such as provisioning, logging and monitoring.

Note - Dedicated Management InterfaceClosed Separate physical interface on VSX Gateway or VSX Cluster Members, through which Check Point Security Management Server or Multi-Domain Server connects directly to VSX Gateway or VSX Cluster Members. DMI is restricted to management traffic, such as provisioning, logging and monitoring. Acronym: DMI. (DMI) management is not supported through a physical interface (on the VSX Gateway / VSX Cluster Members) that has one or more VLAN interfaces configured.

Best Practice - Use a DMI for management to segregate management traffic from routine "production" traffic enhanced performance, especially for end users.

Non-Dedicated Management Interface (Non-DMI)

Note - From R81, configuration with a Non-Dedicated Management InterfaceClosed Shared physical interface on VSX Gateway or VSX Cluster Members (supported only in versions R80.40 and lower), which carries user "production" traffic and through which Check Point Security Management Server or Multi-Domain Server connects to VSX Gateway or VSX Cluster Members. Non-DMI configuration requires the use of a Virtual Router or Virtual Switch. Acronym: Non-DMI. (Non-DMI, shared interface) is deprecated and not supported.