As of 08 May 2017, VMware vCloud Air product no longer supported by VMware (this product has been acquired by OVH). As a result, this product is announced as End-of-Life by Check Point.

 

Table of Contents:

1. Introduction
2. Prerequisites
3. Supported configurations
4. Deployment
5. Related documentation
6. Revision History

 

(1) Introduction

This article describes the technical instructions for deploying a Check Point vSEC Gateway in VMware vCloud Air environment.

VMware vCloud Air is a secure public cloud Infrastructure-as-a-Service (IaaS) platform providing compute, storage, networking and disaster recovery services.

Check Point vSEC for vCloud Air enables security administrators to securely deploy a Check Point Security Gateway in the public cloud environment.
This solution allows administrators to provide the same level of security, controls and policy as on-premises infrastructures, and manage the cloud security gateways using the same central security management server.

Note: Free trial period of two weeks is included with the download.

 

(2) Prerequisites

1. vCloud Air account (dedicated cloud or virtual private cloud).

2. Check Point Security Management Server R77.30.

3. Check Point vSEC Gateway R77.30 OVF Template with Take_84 and higher of Jumbo Hotfix Accumulator for R77.30.

   Note: The Jumbo Hotfix Accumulator is not included in the OVF Template and should be installed manually.

4. vCloud Air gateway license for required number of virtual cores: CPSG-VCA-NGTX-GW and CPSG-VCA-NGTP-GW.
   For explanation about this license, refer to sk109713 and the Product Catalog.

 

(3) Supported configurations

• Starting from R77.30, integrated as a Layer-3 device in vCloudAir.

• Supports dedicated Cloud and Virtual Private Cloud use cases.

• Requires separate dedicated Security Management Server / Multi-Domain Security Management Server.

• ClusterXL and VRRP are not supported.

 

(4) Deployment

The video below illustrates the deployment procedure and includes:

1. Download of vSEC Gateway image.

2. Using VMware OVF tool to prepare the image and uploading it to vCloud catalog.

3. Deploying the vSEC Gateway form the catalog using vCloud Director.

4. Adding the vSEC Gateway to the cloud.

5. Configuring of the deployed vSEC Gateway.

 

 

 

(5) Related documentation

• R77.30 documentation
• R77 GA documentation
• sk110884 - vSEC for VMware vCloud Air Trial Guide

 

(6) Revision History

This solution is about products that are no longer supported and it will not be updated