Technical data

Configuring VSX
Check Point VSX Administration Guide NGX R67 | 54
You can define Virtual Routers for both external and internal communications. A Virtual Router that connects
to external networks, including a DMZ and the Internet, are referred to as an external Virtual Router. A
Virtual Router that connects to internal, protected networks is known as an internal Virtual Router.
Figure 3-16 Deployment with an external virtual router
An external Virtual Router functions as the external gateway for Virtual Systems, allowing them to share a
single secure physical interface leading to external networks and the Internet.
Figure 3-17 Source-based routing with Virtual Routers
In this scenario, VSX creates Warp interfaces between the Virtual Systems and both Virtual Routers. Note
that the external Virtual System interfaces are defined as unnumbered interfaces.
An internal Virtual Router typically connects with one interface leading to internal networks through a switch
with additional Warp Links leading to other Virtual Systems located in the VSX gateway.
The following sections describe how to create and configure Virtual Routers. The example screen shots
refer to the topology illustrated above. After creating a new Virtual Router, you then add new interfaces to
the Virtual Systems that connect to the newly created Virtual Router.