Technical data
Configuring VSX
Check Point VSX Administration Guide NGX R67 | 34
Shared Interface: Virtual systems share one external interface, but maintain separate internal
interfaces.
Separate Interfaces: Virtual systems use their own separate internal and external interfaces. This
template creates a Dedicated Management Interface (DMI) by default.
If the default templates are not appropriate, you can create a custom configuration:
Custom Configuration: Define Virtual System, Virtual Router, Virtual Switch, and Interface
configurations.
Establishing SIC Trust
Initialize Secure Internal Communication trust between the VSX gateway and the management server. The
gateway and server cannot communicate without Trust.
Initializing SIC Trust
When you create a VSX gateway, you must give an Activation Key. Enter and confirm the activation key and
then click Initialize. If you enter the correct activation key, the Trust State changes to Trust
established.
Troubleshooting SIC Trust Initialization Problems
If SIC trust was not successfully established, click Check SIC Status to see the reason for the failure. The
most common issues are an incorrect activation key and connectivity problems between the management
server and the VSX gateway.
Troubleshooting to resolve SIC initialization problems:
Re-enter and re-confirm the activation key.
Verify that the IP address defined in General Properties is correct.
Ping the management server to verify connectivity. Resolve connectivity issues.
From the VSX gateway command line, use the cpconfig utility to re-initialize SIC. After this process
completes, click Reset in the wizard and then re-enter the activation key.
See the R75 Security Management Administration Guide
(http://supportcontent.checkpoint.com/documentation_download?ID=11667).