Technical data

Deploying VSX
Check Point VSX Administration Guide NGX R67 | 172
The figure below illustrates a deployment scenario with three cluster members, each containing three Virtual
Systems. In this configuration, an equalized load sharing deployment might have one active Virtual System
on each cluster member.
Figure 11-39 Normalized VSLS deployment
A different member hosts the active peer for each Virtual System. This distribution spreads the load equally
amongst the members. Once you create a Virtual System, VSX automatically assigns standby and backup
states to the appropriate peers and distributes them among the other cluster members.
In the event that a cluster member fails, VSLS directs traffic destined to affected Virtual Systems to their fully
synchronized standby peers, which then become active. At the same time, a backup Virtual Systems
switches to standby, and synchronizes with the newly active Virtual System.
In the event that an individual active Virtual System fails, it immediately fails over to its standby peer and
one of its backup peers becomes the standby, synchronizing with the newly active peer.
Organizational Deployment Strategies
This section presents deployment scenarios for different types of large organizations and illustrates how
VSX provides security both internally and at the perimeter. The discussion covers the following types of
organizations:
 Large Enterprises
 Managed Service Providers
 Data Centers
Enterprise Deployments
Large enterprise network environments typically contain a wide variety of diverse networks, distributed over
multiple locations around the world. These networks often have differing security and access requirements
for various departments and branches. The ability to centrally manage network security while maintaining
throughput is a critical requirement.