RSP & Packages

[danieltt]

additonal responses fromjcr at RB from the other support forum

1) Do you have a chart or guide on the recommendations for deployment for checkpoint SG R70 on RSP?

The following integration guide walks through the only possible initial configuration. Additional guides for configuring and managing the security gateway are also available from the links in this solution.


2) Can all Steelhead models supporting RSPv2 run checkpoint R70?

Yes, but on the low end 250, you will see a higher percent of CPU utilization.


3) Can you run other packages alongside checkpoint R70 and if so how many Low, Medium, High and on which Steelhead models?

At most 5 instance can be run at a time on the RSP. The number is dependent on type of package and the resources it consumes. The Check Point SG R70 module package is considered a "V". Sizing guidelines are available in this knowledgebase article.


4) How is Checkpoint R70 sized and what should we consider when running it on RSP?

There is recommended sizing information on Check Point's website. Which basically breaks down to:

1 core up to 50 users
2 cores up to 500 users
4 cores unlimited number of users
8 cores large campus and data center

For further sizing of the Check Point package, your Check Point reseller can assist.

5) Can R70 on RSP be managed by the Checkpoint central management server?

Yes. This is Check Point's recommended configuration.

[danieltt]

-          The performance overhead we associate to the CP package e.g. L, M, H, etc? or any guidance on performance overhead?

Check Point package would be a “H” on most platforms except for the 250 in which case it’s a “V” (probably should be the only package running in this case)

4) How is Checkpoint R70 sized and what should we consider when running it on RSP?

Steelhead RSP in this context is just a VM platform to run an application in. As such the performance of the application will depend on its inherent capabilities and the resources available (CPU, Memory, etc) of the host platform – refer to the table above for guidance on SH platforms. I would recommend talking to Checkpoint for guidance on the R70 package. I will also speak to our PM to see what we have available as guidance.

-          Apart from the solution brief on SFDC to we have any guidance on deployment scenarios and/or considerations from CP?

It’s best to get involved with the local Check Point SE in terms of deployment scenarios

-          Any details on the management integration with CP CMS?

Is CMS their Central Management Server? In which case the answer is yes, it can be integrated.

[danieltt]

Hi Forum,
Im going to see a customer next week and wondered of anyone has had any experience as yet with R70 installations on RSP?

This particualr customer is a checkpoint house and very interested in the ability to run Checkpoint SG R70 on RSP.


1) Do you have a chart or guide on the recommendations for deployment for checkpoint SG R70 on RSP

2) Can all Steelhead models supporting RSPv2 run checkpoint R70?

3) Can you run other packages alongside checkpoint R70 and if so how many Low, Medium, High and on which Steelhead models?

4) How is Checkpoint R70 sized and what should we consider when running it on RSP?

5) Can R70 on RSP be managed by the Checkpoint central management server?

Thanks