## VSEC - Deployment guide

Hi All, I have a lot of experience deploying Checkpoint HA Clusters in traditional DC's but have recently been tasked with setting up Checkpoint VPN and Checkpoint Firewalls in an Azure environment. Is it similar to running cpconfig - setup SIC - attach license - download policy etc? if not is there a guide on how to do this using a provider-1 environment then setting up SIC with the Gateways?

Apologies but I'm totally new to VSEC and wanted a brief explanation on how you do this, from what I see you manage the cluster objects in exactly the same way, can anyone help?

Many Thanks in advance

Alan

- Tags:
- [vsec - azure deployment](https://community.checkpoint.com/t5/tag/vsec%20-%20azure%20deployment/tg-p/board-id/CloudNetworkSecurityforum-board)

[6\\
\\
\\
Kudos](https://community.checkpoint.com/t5/kudos/messagepage/board-id/CloudNetworkSecurityforum-board/message-id/3936/tab/all-users "Click here to see who gave kudos to this post.")

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/24821?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/3936/thread-id/3936&t:cp=kudos/contributions/tapletcontributionspage&ticket=AwrD7RJqy1nh_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821)

- [All forum topics](https://community.checkpoint.com/t5/Cloud-Firewall/bd-p/CloudNetworkSecurityforum-board/page/34 "Cloud Firewall")
- [Previous Topic](https://community.checkpoint.com/t5/Cloud-Firewall/vSEC-license-confused/td-p/26490 "vSEC license confused")
- [Next Topic](https://community.checkpoint.com/t5/Cloud-Firewall/R77-30-VPN-to-AWS-Manually-defined-encryption-domain-subnet/td-p/24246 "R77.30 VPN to AWS - Manually defined encryption domain (subnet clash)")

10 Replies

[Vladimir](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11879)

Champion

‎2018-01-2410:00 AM

[Show option menu](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=3937)
- [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24822/highlight/true#M3937)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/3937/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/24822)

Alan,

Please check the [Deploying a Check Point Cluster in Microsoft Azure](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110194 "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110194") for details. I've done quite a few AWS vSEC deployments, but didn't get my hands on Azure yet.

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/24822?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/3936/thread-id/3936&t:cp=kudos/contributions/tapletcontributionspage&ticket=AwrD7RJqy1nh_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821)

[John\_Parnell](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10710)

Participant

‎2018-01-2410:08 AM

[Show option menu](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=3938)
- [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24823/highlight/true#M3938)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/3938/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/24823)

Alan,

You can follow sk110194 to deploy a cluster in Azure.

The short short description.

Define a vNet

Define a Frontend Subnet within the vNet

Define a Backend Subnet within the vNet

Deploy CheckPoint vSec Cluster from the marketplace

Follow the steps to deploy. This will take about 10 minutes once you complete all the steps.

Enable vSec on the management server via CLI. Command is vsec on

Create a new cluster object in your domain. Use the public IP created for the cluster as the cluster IP

Add each object to the cluster

Set both interfaces as sync only

You will need to create a service principal that has contributor rights

Run the command azure-ha-conf --client-id (with client-id from the service principal here) --client-secret (with the key created when you created the service principal here) This needs to be done on each firewall in the cluster.

Run the command $FWDIR/scripts/azure-ha-cli.py reconf This also needs to be done on each firewall in the cluster

Install your vsec license in the domain where you are deploying vSec.

Attach the license to the CMA.

Go to CLI of the management server and change to the domain environment mdsenv domain-name-here

Run the command vsec-central-license

That is the very short version.

Hope that helps.

[1\\
\\
\\
Kudo](https://community.checkpoint.com/t5/kudos/messagepage/board-id/CloudNetworkSecurityforum-board/message-id/3938/tab/all-users "Click here to see who gave kudos to this post.")

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/24823?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/3936/thread-id/3936&t:cp=kudos/contributions/tapletcontributionspage&ticket=AwrD7RJqy1nh_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821)

[Vladimir](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11879)

Champion

‎2018-01-2411:41 AM

[Show option menu](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=3939)
- [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24824/highlight/true#M3939)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/3939/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/24824)

[In response to John\_Parnell](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24823/highlight/true#M3938)

John,

can you expand on "Set both interfaces as sync only"?

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/24824?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/3936/thread-id/3936&t:cp=kudos/contributions/tapletcontributionspage&ticket=AwrD7RJqy1nh_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821)

[John\_Parnell](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10710)

Participant

‎2018-01-2811:33 AM

[Show option menu](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=3941)
- [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24826/highlight/true#M3941)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/3941/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/24826)

[In response to Vladimir](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24824/highlight/true#M3939)

Vladimir,

This is done under network management in the cluster object with SmartConsole. So the cluster for the most part is created just like any other cluster. Except with the interfaces. You have options like private, cluster, sync, and cluster + sync. Here we choose sync then use Azure route tables to direct traffic to the active firewalls interface. If the firewalls fail over they will use the python script to change the route table to point to the active firewalls interface. This used to take up to 3 minutes to complete, however now I generally see times as quick as less than 1 second.

I hope that better explains.

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/24826?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/3936/thread-id/3936&t:cp=kudos/contributions/tapletcontributionspage&ticket=AwrD7RJqy1nh_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821)

[Vladimir](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/11879)

Champion

‎2018-01-2812:44 PM

[Show option menu](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=3943)
- [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24828/highlight/true#M3943)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/3943/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/24828)

[In response to John\_Parnell](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24826/highlight/true#M3941)

Thanks.

Still hard to visualize: I am not getting which "both" interfaces you are referring to.

Since you've described FrontEnd and BackEnd vNets, I'd imagine each cluster member should have at least three interfaces, unless you are using Cluster + Sync, in which case it may be two.

I'll probably have to go through deployment myself in order to get a better feel for it.

Regards,

Vladimir

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/24828?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/3936/thread-id/3936&t:cp=kudos/contributions/tapletcontributionspage&ticket=AwrD7RJqy1nh_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821)

[John\_Parnell](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10710)

Participant

‎2018-01-3006:42 AM

[Show option menu](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=3944)
- [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24829/highlight/true#M3944)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/3944/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/24829)

[In response to Vladimir](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24828/highlight/true#M3943)

No each cluster will have two interfaces by default. You will have eth0 and eth1. eth0 will be your frontend interface, which is just what Azure calls it, but it will set your default route to go out this interface. eth1 will be your backend interface. There is not VIP to define. So if your frontend subnet is 10.10.10.0/24 eth0 will get assigned 10.10.10.4 for firewall1 in the cluster and firewall2 will get 10.10.10.5. Your backend subnet must be different from your frontend subnet so lets give it 10.10.20.0/24. eth1 will get 10.10.20.4 for firewall1 and firewall2 will get 10.10.20.5. There will also be a public IP set as an alias to firewall1 on eth0. You will set a route table to direct traffic from your other subnets to point to the active cluster members eth1, so lets say 10.10.20.4. If you failover the firewalls the python script on the other firewall will reach out to Azure and change the route table to point 10.10.20.5. So as you can see there are no cluster interfaces in Azure. You just set both eth0 and eth1 to sync.

I hope this better describes how it works.

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/24829?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/3936/thread-id/3936&t:cp=kudos/contributions/tapletcontributionspage&ticket=AwrD7RJqy1nh_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821)

[Alan\_Camelo1](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/19462)

Contributor

‎2018-01-2602:54 AM

[Show option menu](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=3940)
- [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24825/highlight/true#M3940)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/3940/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/24825)

[In response to John\_Parnell](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24823/highlight/true#M3938)

Many Thanks,

I shall have a look and let you know how I get on.

I'm sure there may be a few more questions due to my lack of knowledge of Azure at the moment, some terminology things like "Define Frontend subnet within Vnet" ? is this done within Azure or on Vsec?

Thanks again in advance!

Alan

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/24825?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/3936/thread-id/3936&t:cp=kudos/contributions/tapletcontributionspage&ticket=AwrD7RJqy1nh_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821)

[John\_Parnell](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/10710)

Participant

‎2018-01-2811:37 AM

[Show option menu](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=3942)
- [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24827/highlight/true#M3942)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/3942/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/24827)

[In response to Alan\_Camelo1](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24825/highlight/true#M3940)

Alan,

Both are done in Azure. During the deployment of the firewall cluster you can create both a new vNet(Virtual Network) and the front end and back end subnet.

I hope that helps.

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/24827?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/3936/thread-id/3936&t:cp=kudos/contributions/tapletcontributionspage&ticket=AwrD7RJqy1nh_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821)

[Fabricio\_Lima](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/8734)

Explorer

‎2018-09-1205:01 PM

[Show option menu](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=3945)
- [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24830/highlight/true#M3945)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/3945/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/24830)

Deploying vSEC fw in Azure

[https://community.checkpoint.com/docs/DOC-2650-day-1-03-vsec-training-azure-lab-ptkpdf](https://community.checkpoint.com/docs/DOC-2650-day-1-03-vsec-training-azure-lab-ptkpdf)

[https://www.youtube.com/watch?v=nUyTWayUGHk](https://www.youtube.com/watch?v=nUyTWayUGHk)

Deploying vSEC on AWS

[https://community.checkpoint.com/docs/DOC-2661-day-2-04-vsec-training-aws-lab-ptkpdf](https://community.checkpoint.com/docs/DOC-2661-day-2-04-vsec-training-aws-lab-ptkpdf)

[https://www.youtube.com/watch?v=1h2X\_PwVXw0](https://www.youtube.com/watch?v=1h2X_PwVXw0)

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/24830?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/3936/thread-id/3936&t:cp=kudos/contributions/tapletcontributionspage&ticket=AwrD7RJqy1nh_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821)

[Nikhil\_Deshmukh](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/23300)

Contributor

‎2018-09-1312:45 AM

[Show option menu](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821# "Show option menu")

- Mark as New
- Bookmark
- Subscribe
- Mute
- [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=3946)
- [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24831/highlight/true#M3946)
- [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/3946/print-single-message/true/page/1)
- [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/24831)

Hi [Alan Camelo](https://community.checkpoint.com/migrated-users/52997) ‌,

For Starter's you can visit,

[Microsoft Azure Documentation \| Microsoft Docs](https://docs.microsoft.com/en-in/azure/ "https://docs.microsoft.com/en-in/azure/") and then move on to [Check Point Reference Architecture for Azure](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk109360 "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk109360") (Single Gateway), then move to cluster [Deploying a Check Point Cluster in Microsoft Azure](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110194 "https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk110194").

As you move ahead you can refer to many other Related Solutions when you are stuck or can come back to CheckMates.

0

Kudos

[Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/24831?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/3936/thread-id/3936&t:cp=kudos/contributions/tapletcontributionspage&ticket=AwrD7RJqy1nh_-1 "Click here to give kudos to this post.")

1

2

3

4

5

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

4.5

5.0

[Reply](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821)

Post Reply

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

| User | Count |
| --- | --- |
| <br>[WiliRGasparetto](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/96099) | 13 |
| <br>[Jeff\_Engel](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/1390) | 1 |
| <br>[jorgeluiznim](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/85528) | 1 |

[View All ≫](https://community.checkpoint.com/t5/forums/kudosleaderboardpage/board-id/CloudNetworkSecurityforum-board/timerange/one_month/page/1/tab/authors)

Trending Discussions

[Part 1 How CloudGuard Controller R82.10 Builds Dynamic Security Context](https://community.checkpoint.com/t5/Cloud-Firewall/Part-1-How-CloudGuard-Controller-R82-10-Builds-Dynamic-Security/td-p/279800)

[Identity Distribution, TTL, Monitoring, and Operations in CloudGuard Controller R82.10](https://community.checkpoint.com/t5/Cloud-Firewall/Identity-Distribution-TTL-Monitoring-and-Operations-in/td-p/279918)

[Known R82.10 Limitations That Affect Architecture The current R82.10 documentation lists limitati](https://community.checkpoint.com/t5/Cloud-Firewall/Known-R82-10-Limitations-That-Affect-Architecture-The-current/td-p/279934)

Upcoming Events

Sort by:

- [All](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821#)
- [Virtual](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821#)
- [In-Person](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821#)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Tue 28 Jul 2026 @ 11:00 AM (EDT)

[Under the Hood - Check Point and Illumio – Modern Network Defense Against AI-Based Threats](https://community.checkpoint.com/t5/CheckMates-Events/Under-the-Hood-Check-Point-and-Illumio-Modern-Network-Defense/ev-p/279701)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 12:00 PM (SGT)

[The AI Security Report 2026: A Turning Point for Enterprise Defense - SGT](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280019)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 02:00 PM (IDT)

[The AI Security Report 2026: A Turning Point for Enterprise Defense - AMER](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280021)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 03:00 PM (CEST)

[The AI Security Report 2026: A Turning Point for Enterprise Defense EMEA](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280020)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 11:00 AM (EDT)

[TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370)

Thu 30 Jul 2026 @ 11:30 AM (CDT)

[CheckMates Live DFW: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/CheckMates-Live-DFW-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279920)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Tue 28 Jul 2026 @ 11:00 AM (EDT)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 12:00 PM (SGT)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 02:00 PM (IDT)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 03:00 PM (CEST)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Wed 29 Jul 2026 @ 11:00 AM (EDT)

[TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370)

[Virtual](https://community.checkpoint.com/labels/Virtual)

Thu 30 Jul 2026 @ 10:00 AM (PDT)

[AI Security Masters E12: READY OR NOT: Securing the AI Enterprise 4/5 - AI Gateway](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Masters-E12-READY-OR-NOT-Securing-the-AI-Enterprise/ev-p/277411)

[In-Person](https://community.checkpoint.com/labels/In-Person)

Tue 11 Aug 2026 @ 11:30 AM (EDT)

[New York City: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/New-York-City-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279476)

[In-Person](https://community.checkpoint.com/labels/In-Person)

Thu 13 Aug 2026 @ 11:30 AM (EDT)

[Waltham, MA: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/Waltham-MA-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279475)

[In-Person](https://community.checkpoint.com/labels/In-Person)

Thu 20 Aug 2026 @ 08:30 AM (COT)

[Medellin: Workspace Evolution: Hybrid Mesh Management - Visibilidad, Automatización e IA](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Evolution-Hybrid-Mesh-Management-Visibilidad/ev-p/280003)

[In-Person](https://community.checkpoint.com/labels/In-Person)

Thu 20 Aug 2026 @ 06:00 PM (COT)

[Medellin: Workspace Intelligence: IA Generativa en Acción para Equipos de Seguridad](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Intelligence-IA-Generativa-en-Acci%C3%B3n-para/ev-p/280004)

[In-Person](https://community.checkpoint.com/labels/In-Person)

Thu 27 Aug 2026 @ 09:00 AM (CEST)

[Check Point Hands-On SASE and Cloud Workshop - Zurich](https://community.checkpoint.com/t5/CheckMates-Events/Check-Point-Hands-On-SASE-and-Cloud-Workshop-Zurich/ev-p/279914)

[In-Person](https://community.checkpoint.com/labels/In-Person)

Wed 21 Oct 2026 @ 09:00 AM (BST)

[AI Security Workshop - Glasgow](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Workshop-Glasgow/ev-p/278505)

[CheckMates Events](https://community.checkpoint.com/t5/CheckMates-Events/eb-p/events)

[Top](https://community.checkpoint.com/t5/Cloud-Firewall/VSEC-Deployment-guide/m-p/24821)

About CheckMates

- [Getting Started & FAQ](https://community.checkpoint.com/t5/help/faqpage)
- [Community Guidelines](https://community.checkpoint.com/t5/user/TermsOfServicePage)

Learn Check Point

- [Check Point for Beginners](https://community.checkpoint.com/t5/Check-Point-for-Beginners-2-0/bg-p/check-point-for-beginners-2-0)
- [Check Point Trivia](https://community.checkpoint.com/t5/Check-Point-Trivia/bg-p/trivia)
- [CheckFlix Videos](https://community.checkpoint.com/t5/CheckFlix/ct-p/checkflix)

Advanced Learning

- [Check Point Security Masters](https://community.checkpoint.com/t5/Check-Point-Security-Masters/gp-p/ccsm)
- [Tip of the Week](https://community.checkpoint.com/t5/SecureKnowledge-Tip-of-the-Week/bg-p/secureknowledge)
- [TechTalks](https://community.checkpoint.com/t5/TechTalks/ct-p/techtalks%20role=)
- [Training and Certification](https://community.checkpoint.com/t5/Training-and-Certification/bd-p/training-and-certification)

Resources

- [CheckMates Toolbox](https://community.checkpoint.com/t5/CheckMates-Toolbox/ct-p/CheckMatesToolbox)
- [Developers (Code Hub)](https://community.checkpoint.com/t5/Developers-API-CLI/bd-p/codehub)
- [Product Announcements](https://community.checkpoint.com/t5/Product-Announcements/bg-p/products-blog)
- [Upcoming Events](https://community.checkpoint.com/t5/Upcoming-Events/bg-p/checkmates-live)

Non-English Discussions

- [Español](https://community.checkpoint.com/t5/Espa%C3%B1ol/bd-p/spanish)
- [French](https://community.checkpoint.com/t5/Fran%C3%A7ais/bd-p/francais)
- [Japanese](https://community.checkpoint.com/t5/Japanese-%E6%97%A5%E6%9C%AC%E8%AA%9E/bd-p/Japanese)
- [Português](https://community.checkpoint.com/t5/Portugu%C3%AAs/bd-p/portuguese)
- [Russian](https://community.checkpoint.com/t5/Russian/bd-p/russian)
- [Chinese](https://community.checkpoint.com/t5/Chinese/bd-p/taiwan)

YOU DESERVE THE BEST SECURITY

We’re Social. Follow Us [CheckMates on LinkedIn](http://linkedin.com/company/cpcheckmates)  [Check Point on YouTube](https://www.youtube.com/user/CPGlobal) [CheckMates on Facebook](https://www.facebook.com/cpcheckmates/) [CheckMates on Instagram](https://www.instagram.com/cpcheckmates/)

©1994-2026 Check Point Software Technologies Ltd. All rights reserved. [Copyright](https://www.checkpoint.com/copyright/) [Privacy Policy](https://www.checkpoint.com/privacy/) [About Us](https://www.checkpoint.com/about-us/) [UserCenter](https://usercenter.checkpoint.com/)

Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.

Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.