VSX supported features

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk79700
Technical Level
Product	VSX, Quantum Appliances, Quantum Security Gateways
Version	R77.20, R80.10 (EOL), R80.20, R80.30, R80.40, R81, R81.10
OS	Gaia
Platform / Model	2000, 3000, 4000, 5000, 12000, 13000, 15000, 21000, 23000, 41000, 44000, 61000, 64000, 6000, 7000, 16000, 26000, 28000
Date Created	19-Jul-2012
Last Modified	20-Apr-2022

Solution

The VSX mode is supported only on Security Gateways that run on these Operating Systems:

Check Point Gaia OS (from R75.40VS and higher)
X-Series XOS (from R75.40VS to R77.30)

The table below shows the Software Blades and Features supported in the VSX mode (read the notes under the table).

Enter the string to filter this table:

Blade / Feature	R75.40VS Gaia	R76 ⁽⁹⁾ Gaia	R76SP.X Gaia	R77 Gaia	R77.10 Gaia	R77.20 Gaia	R77.30 Gaia	R80.10 Gaia	R80.20 / R80.30 / R80.40 Gaia	R81 Gaia	R81.10 Gaia
Software Blades
Firewall	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
IPS Blade	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes	Yes
IPSec VPN Blade	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Anti-Bot Blade	Yes ^{(1 , 2)}	Yes ^{(1 , 2)}	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes	Yes
Anti-Virus Blade	Yes ^{(1 , 2)}	Yes ^{(1 , 2)}	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes	Yes
Traditional Anti-Virus Blade	No	No	No	No	No	No	No	No	No	No	No
Threat Emulation Blade	No	No	Yes ^{(2 , 16)}	No	No	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ⁽²⁾	Yes ^{(2, 16)}	Yes ^{(2, 16)}
Threat Extraction Blade (sk101553)	No	No	No	No	No	No	No	Yes	Yes	Yes	Yes
Anti-Spam and Email Security Blade	No	No	No	No	No	No	No	No	No	No	No
Data Loss Prevention (DLP) Blade	No	No	No	No	No	No	No	No	No	No	No
Application Control Blade	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾
URL Filtering Blade	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾	Yes ⁽⁹⁾
Content Awareness	No	No	No	No	No	No	No	Yes	Yes	Yes	Yes
Legacy URL Filtering Blade	No	No	No	No	No	No	No	No	No	No	No
Identity Awareness Blade	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Monitoring Blade	Yes ⁽¹⁾	Yes ⁽¹⁾		Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Mobile Access Blade	Supported partially ^{(1 , 3)}	Supported partially ^{(1 , 3)}	No	Supported partially ^{(1 , 3)}	Yes	Yes	Yes	Yes	Yes	Yes	Yes
QoS, Light Weight (CPQOS) ⁽¹¹⁾ (VSX has native QoS support)	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes	Supported: R80.20 R80.30 with 2.6.18 kernel Not Supported: R80.40 R80.30 with 3.10 kernel	No	No
QoS blade (Floodgate)	No	No	No	No	No	No	No	No	No	Yes	Yes
Compliance Blade	No	No	No	No	No	Yes ⁽¹⁵⁾	Yes ⁽¹⁵⁾	Yes ⁽¹⁵⁾	Yes ⁽¹⁵⁾	Yes ⁽¹⁵⁾	Yes ⁽¹⁵⁾
All Management Blades	No	No	No	No	No	No	No	No	No	No	No
Global Features
Network Address Translation (NAT)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
SecureXL	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
CoreXL	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Dynamic Routing	Yes ⁽⁴⁾	Yes ⁽⁴⁾	Yes	Yes ⁽⁴⁾	Yes ⁽⁴⁾	Yes ⁽⁴⁾	Yes ⁽⁴⁾	Yes	Yes	Yes	Yes
Source Based Routing on Virtual Router	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Policy Based Routing (PBR) on Virtual Router	Yes ⁽¹³⁾	Yes ⁽¹³⁾	Yes ⁽¹³⁾	Yes ⁽¹³⁾	Yes ⁽¹³⁾	Yes ⁽¹³⁾	Yes ⁽¹³⁾	Yes ⁽¹³⁾	Yes ⁽¹³⁾	Yes ⁽¹³⁾	Yes ⁽¹³⁾
SNMP Per Virtual System using SNMPv3	Yes ⁽¹⁾	Yes ⁽¹⁾	Yes	Yes ⁽¹⁾	Yes ⁽¹⁾	Yes ⁽¹⁾	Yes ⁽¹⁾	Yes ⁽¹⁾	Yes ⁽¹⁾	Yes	Yes
DHCP Client	No	No	No	No	No	No	No	No	No	No	No
DHCP Relay	Yes	Yes ⁽¹⁾	Yes	Yes ⁽¹⁾	Yes	Yes	Yes	Yes	Yes	Yes	Yes
DHCP Server	No	No	No	No	No	No	No	No	No	No	No
NTP Client	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
NTP Server	No ⁽¹¹⁾	No ⁽¹¹⁾	No ⁽¹¹⁾	No ⁽¹¹⁾	No ⁽¹¹⁾	No ⁽¹¹⁾	No ⁽¹¹⁾	No ⁽¹¹⁾	No ⁽¹¹⁾	No	No
Security Servers	Yes ⁽¹⁾	Yes ⁽¹⁾	Yes	Yes ⁽¹⁾	Yes ⁽¹⁾	Yes ⁽¹⁾	Yes ⁽¹⁾	Yes ⁽¹⁾	Yes ⁽¹⁾	Yes	Yes
Jumbo Frames	Yes ⁽¹⁴⁾	Yes ⁽¹⁴⁾	Yes ⁽¹⁴⁾	Yes ⁽¹⁴⁾	Yes ⁽¹⁴⁾	Yes ⁽¹⁴⁾	Yes ⁽¹⁴⁾	Yes ⁽¹⁴⁾	Yes	Yes	Yes
Rule Hit Count	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
UserCheck (supported for Application Control / URL Filtering / Identity Awareness blades)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Gaia Portal	Yes ^{(1 , 5)}	Yes ^{(1 , 5)}	No	Yes ^{(1 , 5)}	Yes ^{(1 , 5)}	Yes ^{(1 , 5)}	Yes ^{(1 , 5)}	Yes ⁽⁵⁾	Yes ⁽⁵⁾	Yes ⁽¹⁷⁾	Yes ⁽¹⁷⁾
Gaia OS "Cloning Groups"	No ⁽¹²⁾	No ⁽¹²⁾	No ⁽¹²⁾	No ⁽¹²⁾	No ⁽¹²⁾	No ⁽¹²⁾	No ⁽¹²⁾	No ⁽¹²⁾	No ⁽¹²⁾	No ⁽¹²⁾	No ⁽¹²⁾
StandAlone Configuration	No	No	No	No	No	No	No	No	No	No	No
IPv6	No	Yes ⁽⁶⁾	Yes ⁽⁶⁾	Yes ⁽⁶⁾	Yes ⁽⁶⁾	Yes ⁽⁶⁾	Yes ⁽⁶⁾	Yes ⁽⁶⁾	Yes ⁽⁶⁾	Yes	Yes
VRRP	No ⁽⁷⁾	No ⁽⁷⁾	No ⁽⁷⁾	No ⁽⁷⁾	No ⁽⁷⁾	No ⁽⁷⁾	No ⁽⁷⁾	No	No	No	No
VPN Link Selection	No	No	No	No	No	No	No	No	No	No	No
VPN VTI	No	No	No	No	No	No	No	No	No	Yes	Yes
Suspicious Activity Monitoring (SAM) Rules	No	No	No	No	No	No	No	No	No	No	No
Malicious Activity Detection (MAD)	No	No	No	No	No	No	No	No	No	No	No
Connect Control	No	No	No	No	No	No	No	No	No	No	No
ISP Redundancy	No	No	No	No	No	No	No	No	No	No	No
SmartUpdate	No	No	No	No	No	No	No	No	No	No	No
SmartProvisioning / SmartLSM	No	No	No	No	No	No	No	No	No	No	No
SmartWorkflow on Security Management Server / Multi-Domain Security Management Server	No	No	No	No	No	No	No	No	No	No	No
Database Revision Control on Security Management Server / Multi-Domain Security Management Server (sk65420)	No	No	No	No	No	No	No	No	No	No	No
Multi Bridge (support for multiple bridge interfaces on a Virtual System in Bridge Mode)	No	No	No	No	No	No	Yes ⁽¹⁰⁾	Yes ⁽¹⁰⁾	Yes ⁽¹⁰⁾	Yes	Yes
Anti-Virus archive scanning	No	No	No	No	No	No	Yes	Yes	Yes	Yes	Yes
Threat Emulation archive scanning	No	No	No	No	No	No	Yes	Yes	Yes	Yes	Yes
Mail Transfer Agent (MTA) support for Threat Emulation	No	No	No	No	No	No	No	Yes	Yes	Yes	Yes
SecureXL Penalty Box	No	No	No	No	No	No	No	No	Yes	Yes	Yes
DNS per VS	No	No	No	No	No	No	No	No	No	Yes	Yes
VS with Bridge interface	No	No	No	No	No	No	No	No	No	Yes	Yes
Resource Control
CPU monitoring per Virtual System (the 'vsx resctrl' command)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Supported R80.10 R80.20 R80.30 with kernel 2.6.18 Not Supported R80.40 - use the CPView utility R80.30 with kernel 3.10	No Use the CPView utility	No Use the CPView utility
Memory monitoring per Virtual System (the 'vsx mstat' command)	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes From R80.40, use the CPView utility	Yes Use the CPView utility	Yes Use the CPView utility
CPU enforcement per Virtual System (known as Resource Control Enforcer in VSX R6x versions)	No	No	No	No	No	No	No	No	No	No	No
Memory enforcement per Virtual System (known as Resource Control Enforcer in VSX R6x versions)	No	No	No	No	No	No	No	No	No	No	No
Virtual System in Bridge Mode
Refer to sk101371 - Bridge Mode on Gaia OS and SecurePlatform OS.
Additional Features
Merging VSX objects using cp_merge utility (sk33751)	No	No	No	No	No	No	No	No	No	No	No
Alias / Secondary IP address	No	No	No	No	No	No	No	No	No	No	No
ECMP (Static Routes)	No	No	No	No	No	No	No	No	No	No	No
CoreXL Dynamic Dispatcher (sk105261)	No	No	No	No	No	No	No	No	Yes	Yes	Yes
CoreXL Dynamic Balancing (sk164155)	No	No	No	No	No	No	No	No	Starting R80.40 (see sk164155)	Yes	Yes
LLDP	N / A	N / A	N / A	N / A	N / A	N / A	N / A	N / A	N / A	No	No

Notes:

In this version, this Software Blade / Feature is not supported on X-Series XOS.
For this version, refer to sk106496 - Software Blades updates - FAQ.
In this version, the Mobile Access Software Blade is supported partially.
Refer to:
- Release Notes (R75.40VS, R76, R77) - "Security Gateway Software Blades"
- R77 versions Mobile Access Administration Guide
- sk67820 - Check Point Remote Access Solutions
X-Series XOS uses its own routing suite (Gaia OS uses the RouteD daemon).
In this version, Gaia Portal is supported only to run the Gaia 'First Time Configuration Wizard'.
In this version, IPv6 is supported with these limitations:
- Pure IPv6 is not supported (must have IPv4 addresses assigned) - applies only to Clusters.
- IPv6 is not supported on Virtual Routers.
VRRP cluster in VSX mode is supported only on X-Series XOS.
For information about 60000 / 40000 Security Systems, refer to the corresponding Release Notes (41000, 44000, 61000, 64000) - chapter "System Requirements" - section "Gateway Requirements" - subsection "Supported Software Blades".
For this version, refer to sk106496 - Software Blades updates - FAQ and to the VSX Administration Guide for your version.
For this version, refer to the VSX Administration Guide for your version (R80.40 and lower).
For this version, refer to sk32027 - NTP Server support on Gaia and SecurePlatform OS.
For this version, refer to sk97494 - Gaia "Cloning Groups" are not supported on Security Gateway in VSX mode.
For this version, refer to sk100500 - Policy-Based Routing (PBR) on Gaia OS.
For this version, refer to sk110351 - Traffic latency on VSX Gateway if MTU larger than 4096 (Jumbo Frames) is configured on an interface.
Because "Compliance" Software Blade is a Management blade, you cannot activate it in a VSX Gateway / VSX Cluster object.
"Compliance" Software Blade supports VSX Gateways / VSX Clusters running R77.20 and higher.
By design, the "Security Best Practices" for "Gaia OS" are not checked on VSX Gateways / VSX Clusters.
Refer to sk92861 - ATRG: Compliance Blade.
Scalable Platforms support this Software Blade only in R76SP.40, R76SP.50, R80.20SP, R80.30SP, R81 and higher.
For R76SP.40 and R76SP.50 versions, follow the instructions in sk111405 - 60000 / 40000 Appliances - How to enable Threat Emulation blade on R76SP.40 and R76SP.50.
In this version, Gaia Portal is supported only to install CPUSE packages.

Related documentation:

Release Notes and VSX Administration Guide

Related solutions:

Give us Feedback

Please rate this document

[1=Worst,5=Best]

Comment
	Submitting rating