Check Point VPN-1 Power VSX NGX – Virtual Firewalls Get Clustered

Use Netsparker


Clustered Firewalls? What on earth next, beowulf IDS systems?

Check Point has added cluster support and more granular controls to its virtual firewall software, memorably named Check Point VPN-1 Power VSX NGX.

Virtual firewalls can now be distributed around a server cluster, with standby firewalls on alternative servers. System administrators can also shift processor power around, taking it from low priority systems and giving to to high priority ones.

“We are seeing a growing market within data centres to have clustered environments so there is no single point of failure,” said Check Point security engineer Caroline Ikomi.

Virtual servers are getting pretty big though, for all kinds of purposes.

“Within the VSX scalability pack, you can allocate virtual systems to specific cluster members based on their performance requirement, and have alternative virtual systems backed up to the same blade as a standby, so making maximum use of resources.”

Check Point claimed that the new clustering capability in VSX enables linear growth in performance, plus real-time monitoring of traffic load distribution, and reduced synchronisation traffic.

The program, which costs from $24,000 for 10 virtual system licences, is a version of Check Point’s firewall, VPN and anti-intrusion software that runs as a virtual application. The company said that it allows a single physical server to run up to 250 virtual security devices.

It’s aimed at large organisations with multiple VLANs so it might interest some of you. It’s also good for running multiple ‘firewall’ devices with different policy sets from the same bit of hardware.

Source: The Register

Posted in: Countermeasures, Security Software


Latest Posts:


CloudFrunt - Identify Misconfigured CloudFront Domains CloudFrunt – Identify Misconfigured CloudFront Domains
CloudFrunt is a Python-based tool for identifying misconfigured CloudFront domains, it uses DNS and looks for CNAMEs which may be allowed to be associated with CloudFront distributions.
Airbash - Fully Automated WPA PSK Handshake Capture Script Airbash – Fully Automated WPA PSK Handshake Capture Script
Airbash is a POSIX-compliant, fully automated WPA PSK handshake capture script aimed at penetration testing, it is compatible with Bash and Android Shell.
XXEinjector - Automatic XXE Injection Tool For Exploitation XXEinjector – Automatic XXE Injection Tool For Exploitation
XXEinjector is an XXE Injection Tool that automates retrieving files using direct and out of band methods. Directory listing only works in Java applications.
Yahoo! Fined 35 Million USD For Late Disclosure Of Hack Yahoo! Fined 35 Million USD For Late Disclosure Of Hack
Ah Yahoo! in trouble again, this time the news is Yahoo! fined for 35 million USD by the SEC for the 2 year delayed disclosure of the massive hack, we actually reported on the incident in 2016 when it became public.
Drupwn - Drupal Enumeration Tool & Security Scanner Drupwn – Drupal Enumeration Tool & Security Scanner
Drupwn is a Python-based Drupal Enumeration Tool that also includes an exploit mode, which can check for and exploit relevant CVEs.
MyEtherWallet DNS Hack Causes 17 Million USD User Loss MyEtherWallet DNS Hack Causes 17 Million USD User Loss
Big news in the crypto scene this week was that the MyEtherWallet DNS Hack that occured managed to collect about $17 Million USD worth of Ethereum in just a few hours.


Comments are closed.