Checkpoint vSEC Virtual Edition
Protects dynamic virtualized environments from internal and external threats

The Check Point vSEC Virtual Edition gateway protects dynamic virtualized environments from internal and external threats by securing virtual machines (VMs) and applications with the full range of protections of the Check Point Software Blade architecture. Check Point’s virtualization security supports multiple hypervisors including VMware ESX, Microsoft Hyper-V and KVM.

Secure virtual environments

• Multi-layered security protections for virtual environments including next-generation firewall and advanced threat prevention
• Inspect all traffic—from inter-VM to perimeter—in the virtual network
• Permit secure access to remote systems and networks

Unified management of virtual and physical environments

• Consistent security policy and uniform security management across both physical and virtual infrastructures
• Visibility into virtualization configuration and security changes
• Separation of duties between virtualization and security teams
• Licensing is based on virtual cores used and supports dynamic allocation ideal for elastic workloads

Features

Full protections with Check Point Software Blades

Check Point vSEC Virtual Edition provides the full protections of the Check Point Software Blade architecture.

• Firewall, IPS, Antivirus, Anti-Bot Software Blades protect services in the public cloud from unauthorized access and attacks.
• Application Control Software Blade helps prevent application layer denial of service attacks and protects your cloud services.
• IPsec VPN Software Blade allows secure communication into cloud resources.
• Mobile Access Software Blade allows mobile users to connect to the cloud using an SSL encrypted connection with two factor authentication and device pairing.
• Data Loss Prevention Software Blade protects sensitive data from theft or unintentional loss.
• SandBlast Zero-Day Protection Blades provide the most comprehensive protection against malware and zero-day attacks.

Consolidated logs and reporting for hybrid cloud environments

Get visibility and enforcement across your virtual infrastructures using the Next Generation SmartEvent Software Blade. Simplify compliance and audits with unified logs and reporting.

Centralized management for virtual and physical infrastructures

Manage vSEC VE using your existing on-premise Check Point Unified Security Management Solution. Enforce a consistent security policy for corporate assets across both virtual and physical infrastructures from a single console.

Supported Hypervisors	Supported Hypervisor releases	Memory and system requirements
VMware ESXi	vSphere 5, vSphere 5.1, vSphere 5.5, vSphere 6	32GB HDD 2GB RAM
Microsoft Hyper-V	2012 R2 Windows Server	32GB HDD 2GB RAM
KVM	CentOS 7 RHEL 7	32GB HDD 2GB RAM
Note: For supported Check Point releases, refer to the support matrix in the HCL

Performance

Test case	2 Virtual Cores	4 Virtual Cores	6 Virtual Cores
Security Power	300	620	850
Firewall Only	2700 Mbps	4900 Mbps	5100 Mbps
Firewall + IPS	860 Mbps	1700 Mbps	2630 Mbps
Firewall + IPS + Application Control	820 Mbps	1300 Mbps	1900 Mbps
Firewall + Anti-Virus + IPS	690 Mbps	940 Mbps	1670 Mbps
Max concurrent connections	5.4 million (12GB RAM ) 1.1million ( 2GB RAM )	5.4 million (12GB RAM ) 1.1million ( 2GB RAM )	5.4 million (12GB RAM ) 1.1million ( 2GB RAM )
Test Environment	vSEC Virtual Edition Gateway R77.30 for VMWare ESXi 5.5 Using Check Point real world traffic blend, an optimized environment, dedicated virtual cores on Intel E5-2637 v3 and vmxnet3 NIC
Note : VE gateway performance is dependent on the number of virtual CPU cores allocated, CPU type, RAM, traffic blend as well hypervisor release and configuration

Pricing Notes:

• Pricing and product availability subject to change without notice.
• vSEC VE Gateway is licensed by the number of virtual cores (vcores) assigned to the virtual machine running it
• This license supports vSEC VE Gateways running on VMware´s ESX/ESXi/vCloud Air, Microsoft Azure/Hyper-V, Amazon´s AWS and KVM
• Check Point vSEC VE Gateway license is pool based :
  • You can add additional licenses to the pool
  • The license pool is deployed on Check Point management server and will be automatically assigned to vSEC VE gateways
• Renewal:
  • The license is composed of a perpetual software license and services renewal license
  • The renewal subscription license should match the number of cores in the perpetual license
• Software Blades :
  • Regardless of the numbers of vcores allocated, every VE Gateway provides – local management license for up to 2 gateways – 5 mobile access users – Customer can purchase addition software blades and deploy them on specific vSEC VE Gateways
  • For NGTX license: NGTX cloud inspection quota is 10k files/vcore/month