Feeds

Virtual firewalls get clustered

Virtual fail-over for virtual security on a virtual LAN

Internet Security Threat Report 2014

Check Point has added cluster support and more granular controls to its virtual firewall software, memorably named Check Point VPN-1 Power VSX NGX.

Virtual firewalls can now be distributed around a server cluster, with standby firewalls on alternative servers. System administrators can also shift processor power around, taking it from low priority systems and giving to to high priority ones.

"We are seeing a growing market within data centres to have clustered environments so there is no single point of failure," said Check Point security engineer Caroline Ikomi.

"Within the VSX scalability pack, you can allocate virtual systems to specific cluster members based on their performance requirement, and have alternative virtual systems backed up to the same blade as a standby, so making maximum use of resources."

Check Point claimed that the new clustering capability in VSX enables linear growth in performance, plus real-time monitoring of traffic load distribution, and reduced synchronisation traffic.

The program, which costs from $24,000 for 10 virtual system licences, is a version of Check Point's firewall, VPN and anti-intrusion software that runs as a virtual application. The company said that it allows a single physical server to run up to 250 virtual security devices.

This capability is aimed at enterprises who need to protect multiple VLANs, and also at service providers who run individual firewalls for multiple clients, each with its own security policy, Ikomi said.

She added that the ability to prioritise firewalls, so higher priority systems get a greater share of the available CPU resource, is a key feature of the new release.

The firewall software is based on Check Point's own virtual implementation of the application, not on virtual server technology such as VMware or Xen, and is not intended to run on a virtual server, Ikomi said. ®

Internet Security Threat Report 2014

More from The Register

next story
Docker's app containers are coming to Windows Server, says Microsoft
MS chases app deployment speeds already enjoyed by Linux devs
IBM storage revenues sink: 'We are disappointed,' says CEO
Time to put the storage biz up for sale?
'Hmm, why CAN'T I run a water pipe through that rack of media servers?'
Leaving Las Vegas for Armenia kludging and Dubai dune bashing
Facebook slurps 'paste sites' for STOLEN passwords, sprinkles on hash and salt
Zuck's ad empire DOESN'T see details in plain text. Phew!
SDI wars: WTF is software defined infrastructure?
This time we play for ALL the marbles
Windows 10: Forget Cloudobile, put Security and Privacy First
But - dammit - It would be insane to say 'don't collect, because NSA'
Oracle hires former SAP exec for cloudy push
'We know Larry said cloud was gibberish, and insane, and idiotic, but...'
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Three 1TB solid state scorchers up for grabs
Big SSDs can be expensive but think big and think free because you could be the lucky winner of one of three 1TB Samsung SSD 840 EVO drives that we’re giving away worth over £300 apiece.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.