Technical data

VSX Architecture and Concepts
Check Point VSX Administration Guide NGX R67 | 31
High Availability
VSX provides for high system availability by ensuring transparent failover for VSX gateways and/or for
individual Virtual Systems. If the active VSX gateway member fails, all sessions continue to run, securely
and without interruption, on a standby cluster member. If an individual Virtual System fails, you can
configure that Virtual System to fail over to a standby member while all other Virtual Systems continue to
function on the active VSX gateway member.
Users need not reconnect and re-authenticate, nor do they notice that an alternate machine has taken over.
The Selective Sync feature allows you to selectively activate, delay or disable cluster member
synchronization.
Virtual System Load Sharing (VSLS)
Load Sharing offers significant performance advantages while providing failover for individual Virtual
Systems. Using multiple gateways instead of a single gateway significantly increases linear performance for
CPU intensive applications such as VPNs, Security servers, Policy servers, and Active Directory (LDAP).
By distributing Virtual System instances between different cluster members, the performance load is
efficiently spread amongst the members. For example, active Virtual System 1 runs on member A, while
active Virtual System 2 runs on member B. Standby and backup Virtual system instances are likewise
distributed amongst members to maximize throughput, even in a failover scenario.
VSLS provides an excellent scalability solution, allowing administrators to add additional physical members
to an existing VSLS cluster as traffic loads and performance requirements increase.
VSLS is available only in a Check Point ClusterXL environment.