Valuable features include centralized management using the MDM solution of Check Point and the Log Management module. The latest version of VSX supports all blades of Check Point's security suite.
I get maximum flexibility as I can use a standard management server to manage all virtual gateways along with a dedicated log server for each virtual gateway. Sometimes I can use a single server to manage all virtual gateways.
Improvements to My Organization
Earlier versions only supported the Firewall and VPN feature. Now I can run Anti-Bot/Anti-Virus, URL and App Filtering, Threat Emulation, and other blades.
I can assign weights to each virtual gateway depending on how critical each virtual gateway is.
The VSLS feature provides linear scalability so I can keep adding hardware (maximum of eight) to meet my performance expectations.
Room for Improvement
It is somewhat difficult to upgrade the entire hardware without downtime.
Use of Solution
We have been implementing this solution to many customers in India and the SAARC region for seven years now. This is one of the most popular virtual firewall products in the industry.
We have not encountered any problems with stability.
A sufficient amount of planning is required to deploy a solution that is scalable. However, as Check Point allows an Open Server to deploy its VSX solution, scalability is not a problem once the base hardware is chosen appropriately.
Customer Service and Technical Support
Support is one area where efforts should be required from Check Point. Customers having multiple, more than ten, gateways are encouraged to consider Diamond Support services.
We did not use any other solution previously.
Engineers having less than three years of hands-on experience on Check Point products may find this product somewhat challenging. However, the best part is, once the product is deployed, there is no difference between virtual gateway and physical gateway from the operational perspective.
Pricing, Setup Cost and Licensing
Check Point pioneered this product, so don't look anywhere else if you are looking for a stable and scalable product with top-notch security blades.
Other Solutions Considered
We did not evaluate any alternative products.
Choose your implementation partner very carefully. Choose someone who has done multiple, large-scale implementations and can show proof of the same in terms of customer references through emails or phone calls.
Disclosure: My company has a business relationship with this vendor other than being a customer: We are a value added partner of Check Point in India.
Jun 08 2017