Check Point Virtual Systems
Consolidate and simplify security for private clouds while delivering a lower total cost of ownership
Check Point Virtual Systemstaps the power of virtualization to consolidate and simplify security for private clouds while delivering a lower total cost of ownership. It enables customized security against evolving network threats with the extensible Software Blade Architecture. Virtual Systems is supported on Check Point Appliances, including the 61000 Security System as well as open servers.
Benefits
Simplify and consolidate network security with Virtual Systems
- Add Virtual Systems to any gateway or leverage pre-configured Virtual System Appliances to secure multiple network segments
- Simplify enterprise-wide policy by creating tailored policies for each Virtual System
- Resource monitoring for each Virtual System; easily add, provision and upgrade without downtime
Deploy any Software Blades on any virtual system for customized protection
- Advanced protections now include: Firewall, VPN, IPS, Application Control, URL Filtering, Antivirus, Anti-Bot, Identity Awareness and Mobile Access
- Flexibility to enable Software Blades uniquely for each Virtual System with customized protections
- Enable separation of IT duties with dedicated Virtual Systems for Web Security, Threat Prevention, Firewall and Remote Access
Boost performance using the latest Check Point technologies
- Over eight times more concurrent connections with 64-Bit GAiA OS
- Increased throughput by utilizing multi-core processors with CoreXL technology
- Cluster up to eight gateways using patented VSLS technology for unmatched scalability
Features
Security Consolidation
For years, Check Point’s Virtual Systems technology has been providing value and protection for enterprises and service providers. This proven technology enables organizations to consolidate up to 250 gateways into a hardware platform providing savings on both capital equipment investments and ongoing support and maintenance. The streamlined management of the virtualized gateways further improves the operational efficiency of a resource-challenged IT department, bringing the needed simplicity to network security.
Flexible Software Blade Security
Supporting the latest Check Point Software Blade Architecture on every Virtual System, this solution delivers comprehensive and customized protection to multiple networks or virtual LANs (VLANs) within complex network infrastructures. Supporting Software Blades including Firewall, VPN, Intrusion Prevention (IPS), Identity Awareness, Application Control, URL Filtering, Antivirus and Anti-bot, administrators have the flexibility to configure any Software Blades with any security policy to any Virtual System.
Customizable Security Policies per Virtual System
The ability to tailor security policies for each Virtual System enable administrators to break down large complex network security policies into smaller more granular and more manageable policies. Customizing security policy base on business requirements minimize the complexity and create better security practice to meet the business needs.
Simple Deployment and Streamlined Central Management
Easily deploy Virtual Systems with pre-configured appliances or upgrading existing gateways using One-Click Conversion, effectively manage these Virtual Systems with simplified and central management using Check Point Security Management and Multi-Domain Security Management.
- One-Click Conversion
Enabling Virtual Systems from a physical system is simple and fast with a single click to launch the Virtual System Conversion Wizard. - Centralized Management and Provisioning
- Integration with Check Point Security Management and Multi-Domain Security Management solutions
- One-click conversion with Virtual SystemsWizard
- Simple provisioning using the creation templates
- Separate per virtual system management and data segregation enable cloud-based security-as-a-service offerings
High Performance Security
Combining the latest security solutions with the patented CoreXL technology and the 64-bit GAiA OS, performance for virtualized security deployments is greatly enhanced. Up to eight times more concurrent connection capacity and the multi-gigabit-per-second performance for firewall and IPS throughputs are just a few examples of the outstanding performance the solution will deliver. The new Check Point Virtual Systems are designed to meet the requirements for the most demanding network environments.
Linear Scalability
Today’s networks require flexibility and expandability to support the fast-evolving business needs. To meet this demanding business environment, Virtual Systems can be deployed on multiple gateways using Check Point’ high-performance technologies, ensuring secure, resilient, multi-gigabit throughput. Virtual Systems leverage the following features and technologies to maximize performance, capacity and system scalability:
- Virtual System Load Sharing (VSLS) distributes traffic load within a cluster, providing the ability to distribute virtual systems across multiple cluster members. Additional cluster members effectively share the virtual system traffic loads within the cluster, providing improved throughputs, connection capacity, high availability, simplified management and linear scalability
- Resource Control allows administrators to manage the processing load by guaranteeing that each virtual system will receive only the memory and CPU allocation it needs to deliver its functions. Resources not needed by one virtual system are automatically made available to other virtual systems. Administrators can also limit the CPU resource available to a lower-priority virtual system and assign more capacity to mission-critical virtual systems.
Integrated Virtual Routers and Switches
Simplify deployment, configuration and save costs of external network routers and switches. The integrated virtual routers and switches direct inter-Virtual System traffics to their intended destinations with higher efficiency.
Per Virtual System Resource Utilization Monitoring
Need to understand how your Virtual Systems are used to better plan your security resources, or want to create billable customer services based on their usage? Granular resource monitoring of CPU and memory for each virtual system gives you the necessary insights to effectively plan for your network security resources, or to provide usage-based services to your customers.
Flexible Packaging Options
Check Point Virtual Systems are offered either as a software-only option or in pre-configured bundles with Check Point Security Appliances and Software Blades, providing the flexibility and convenience for different deployment situations.The software only option allows customers to upgrade their existing Check Point Appliances and open servers to a Virtual System environment, or to build a customized Virtual System for their specific network security needs. The pre-configured bundles offer a quick turn-key solution that is easy to purchase and deploy.
Specifications
| Operating System Release | GAiA (R75.40VS) or later |
| Supported Gateways | Check Point Appliances and Open Servers |
| Minimum Memory | 2GB |
| Supported Technologies | ClusterXL, CoreXL, SSL inspection |
| Monitoring | Resource monitoring (CPU & Memory), per Virtual System SNMP monitoring |
| Maximum Virtual Systems | ||
|---|---|---|
| Supported Appliances | Appliance Memory |
Maximum VS Supported (with Default / Max memory) |
| 2200 | 2 / 2 GB | 3 / 3 |
| 4200 | 4 / 4 GB | 3 / 3 |
| 4400 | 4 / 4 GB | 10 / 10 |
| 4600 | 4 / 4 GB | 10 / 10 |
| 4800 | 4 / 8 GB | 20 / 25 |
| 12200 | 4 / 12 GB | 20 / 50 |
| 12400 | 4 / 12 GB | 25 / 75 |
| 12600 | 6 / 12 GB | 75 / 150 |
| 13500 | 16 / 32 GB | 150 / 250 |
| 21400 | 12 / 24 GB | 125 / 250 |
| 21600 | 16 / 32 GB | 150 / 250 |
| 21700 | 16 / 32 GB | 150 / 250 |
| 41000 | 64 / 64 GB | 250 / 250 |
| 61000 | 12 / 64 GB | 125 / 250 |
| UTM-1 3070 | 4 / 4 GB | 10 / 10 |
| Power-1 9070 | 4 / 8 GB | 50 / 75 |
| Power-1 11000 | 6 / 12 GB | 75 / 125 |
| IP 1280 | 4 / 8 GB | 10 / 50 |
| IP 2450 | 4 / 8 GB | 50 / 75 |
Virtual System Appliances
Pre-configured Virtual Systems bundled with Check Point Security Appliance, Virtual Systems and Software Blades. The Virtual System Appliances are available in single system and high-availability (VSLS) configurations.
| 4400 Single|VSLS |
4600 Single|VSLS |
4800 Single|VSLS |
12200 Single|VSLS |
12400 Single|VSLS |
|
| Performance | |||||
| Firewall Throughput (Gbps) | 5 | 9 | 9 | 16 | 11 | 20 | 15 | 27 | 25 | 45 |
| VPN Throughput (Gbps) | 1.2 | 2.1 | 1.5 | 2.7 | 2 | 3.6 | 2.5 | 4.5 | 3.5 | 6 |
| Concurrent Sessions (M) | 1.2 | 1.4 | 1.2 | 1.4 | 3.31 | 41 | 51 | 61 | 51 | 61 |
| Network | |||||
| 10/100/1000Base-T Ports (Def/Max) | 8/12 | 16/24 | 8/12 | 16/24 | 8/16 | 16/32 | 8/16 | 16/32 | 10/26 | 20/52 |
| 1000Base-F SFP Ports (Def/Max) | 0/4 | 0/8 | 0/4 | 0/8 | 0/4 | 0/8 | 0/4 | 0/8 | 0/12 | 0/24 |
| 10GBase-F SFP+ Ports (Def/Max) | N/A | N/A | 0/2 | 0/4 | 0/4 | 0/8 | 0/12 | 0/24 |
| Expansion Slots | 1 | 2 | 1 | 2 | 1 | 2 | 1 | 2 | 3 | 6 |
| Additional Features | |||||
| R67 VSX Option | No | No | No | Yes | Yes |
| Virtual Systems (Included/Maximum) | 5/10 | 5/10 | 10/25 | 10/50 | 10/75 |
| Physical | |||||
| Enclosure | 1U | 2U | 1U | 2U | 1U | 2U | 1U | 2U | 2U | 4U |
| Weight (lb) | 16.5 | 33.1 | 16.5 | 33.1 | 16.8 | 33.5 | 16.8 | 33.5 | 51.6 | 103.2 |
| Power | |||||
| Dual, Hot-Swap PSU | No | No | Optional | Yes | Yes |
| Power Input | 110-240VAC, 47-63Hz | ||||
| Max Power Consumption (W) | 90 | 180 | 90 | 180 | 140 | 280 | 121 | 242 | 132 | 264 |
| DC Power Option2 | No | Yes | Yes | Yes | Yes |
| Software Blade | |||||
| Software Blades (Included) | Firewall, VPN, Identity Awareness, Advanced Networking & Clustering, Mobile Access, IPS, Application Control | ||||
| 12600 Single|VSLS |
13500 Single|VSLS |
21400 Single|VSLS |
21600 Single|VSLS |
21700 Single|VSLS |
|
| Performance | |||||
| Firewall Throughput (Gbps) | 30 | 54 | 77 | 138.6 | 50 | 90 | 75 | 135 | 78 | 141 |
| VPN Throughput (Gbps) | 6 | 10.5 | 17 | 30.6 | 7 | 12.5 | 8.5 | 15 | 11 | 27 |
| Concurrent Sessions (M) | 51 | 61 | 281 | 33.61 | 101 | 121 | 131 | 15.61 | 131 | 15.61 |
| Network | |||||
| 10/100/1000Base-T Ports (Def/Max) | 14/26 | 28/52 | 14/26 | 28/52 | 13/37 | 26/74 | 13/37 | 26/74 | 13/37 | 26/74 |
| 1000Base-F SFP Ports (Def/Max) | 0/12 | 0/24 | 0/12 | 0/24 | 0/36 | 0/72 | 0/36 | 0/72 | 0/36 | 0/72 |
| 10GBase-F SFP+ Ports (Def/Max) | 0/12 | 0/24 | 0/12 | 0/24 | 0/12 | 0/24 | 0/13 | 0/26 | 0/13 | 0/26 |
| Expansion Slots | 3 | 6 | 3 | 6 | 3 | 6 | 3 | 6 | 3 | 6 |
| Additional Features | |||||
| R67 VSX Option | Yes | No | Yes | No | No |
| Virtual Systems (Included/Maximum) | 20/150 | 20/250 | 20/250 | 20/250 | 20/250 |
| Physical | |||||
| Enclosure | 2U | 4U | 2U | 4U | 2U | 4U | 2U | 4U | 2U | 4U |
| Weight (lb) | 51.6 | 103.2 | 38.6 | 77.2 | 57.4 | 114.8 | 57.4 | 114.8 | 57.4 | 114.8 |
| Power | |||||
| Dual, Hot-Swap PSU | Yes | Yes | Yes | Yes | Yes |
| Power Input | 110-240VAC, 47-63Hz | ||||
| Max Power Consumption (W) | 220 | 440 | 431 | 862 | 449 | 898 | 449 | 898 | 489 | 978 |
| DC Power Option2 | Yes | Yes | Yes | Yes | Yes |
| Software Blade | |||||
| Software Blades (Included) | Firewall, VPN, Identity Awareness, Advanced Networking & Clustering, Mobile Access, IPS, Application Control | ||||
1 With memory upgrade and GAiA OS 2 Via a Solution Center Request