Checkpoint offers Firewall just for virtualized environments
On August 18, 2008, Checkpoint has announced that they will offer a “virtualized edition” (VE) of their very popular VPN-1 firewall. If you haven’t heard of the Checkpoint VPN-1 firewall, it is widely used to protect large enterprise corporations from malicious Internet attacks and also used on internal LANs to segment networks.
With the new virtualized edition, the same checkpoint firewall used in other parts of the network can be virtualized and then used to securely segment virtualized servers. The VPN-1 VE is tailored specifically for VMware ESX and ESXi environments and is preconfigured to secure them. Additionally, it has the same user interface and uses the same centralized management as other Checkpoint firewalls.
This is the first firewall that I have seen that is specifically tailored as a virtual appliance and designed to secure VMware ESX virtual networks. You can try the Checkpoint VPN VE-1 by downloading it directly from the VMware virtual appliance marketplace. The VPN-1 VE is a certified VMware appliance.
To learn more about this new virtual firewall, visit the Checkpoint VPN-1 Virtualized Edition product page.
riverbed wan optimization Says:
December 29th, 2008 at 4:12 am
riverbed wan optimization
It’ s very important to not buy or install any new network system before identifying existing delays.
Larry L. Says:
March 12th, 2010 at 12:04 am
David, I have esx 4 completely operational, and my question is: What do you think about have the checkpoint virtual firewall directly exposed to an internet connection? I have two NIC cards on my ESX Server and I would prefer that the Checkpoint have a virtual nic directly connected to one nic card that is directly connected to my internet access.
The other nic card would represent the inside of my network design.
My fear is that the VMWare kernel could be exposed to hackers, etc.
I want to put in a two layer firewall design with a pix 5505 on the inside of my network as opposed the outside - primarily because cisco wants another 500 bills for the dmz IOS on the 5505.
Your thoughts would be greatly appreciated.