Technical data
Configuring VSX
Check Point VSX Administration Guide NGX R67 | 41
Note - If you wish to enable anti-spoofing protection when there are no
routes pointing to internal networks, disable the Calculating topology
option and modify the appropriate interface definitions to enable anti-
spoofing.
VSX Gateway - NAT
This page contains various NAT options that are not relevant for VSX gateways.
VSX Gateway - VPN
The VPN page contains a variety of configuration properties for VSX gateways in site-to-site VPN
deployments. This window is only available if the Check Point VPN product is enabled on the General
Properties page.
Please refer to the online help and the R75 VPN Administration Guide
(http://supportcontent.checkpoint.com/documentation_download?ID=11675) for further details regarding
VPN concepts and configuration.
VSX Gateway - Remote Access
The Remote Access page contains properties that govern establishing VPN connections with Remote
Access clients. This window is only available if the Check Point VPN product is enabled on the General
Properties page.
Please refer to the online help and the R75 VPN Administration Guide
(http://supportcontent.checkpoint.com/documentation_download?ID=11675) for further details regarding
VPN with Remote Access clients.
VSX Gateway - Authentication
The Authentication page allows you to enable several different authentication options for a VSX gateway.
See Authentication ("Working with Authentication" on page 63) for further details.
VSX Gateway - Logs and Masters
The Logs and Masters page allows you define logging options for a VSX gateway. Refer to configuration
procedures ("Tracking Activity with SmartView Monitor" on page 69) for further details.
VSX Gateway - Capacity Optimization
The Capacity Optimization page allows you to maximize VSX gateway and VPN throughput by limiting the
number of concurrent connections to the VSX gateway, the number of concurrent IKE negotiations, and the
number of concurrent VPN tunnels.
To raise or lower the maximum, use the arrows in the appropriate field to set the desired value.
VSX Gateway - Advanced Pages
There are several configuration options for SNMP, connection persistence and permissions to install
policies. To learn more, see to the online help and theR75.20 Firewall Administration Guide
(http://supportcontent.checkpoint.com/documentation_download?ID=12267) and R75.20 IPS Administration
Guide (http://supportcontent.checkpoint.com/documentation_download?ID=12270).
Deleting a VSX Gateway
Deleting a VSX gateway object automatically deletes all Virtual Systems and other virtual devices
associated with that gateway. To delete a VSX gateway, right click the VSX gateway object on the Object
Tree and click Delete. Select Yes in the confirmation box.