search cancel

The container and the virtual FWs (vsx) are not created when modelling Checkpoint devices.

book

Article ID: 254672

calendar_today

Updated On:

Products

CA Spectrum

Issue/Introduction

When modeling certain checkpoint FWs, neither the container nor the virtual FWs (vsx) are created below the physical device. 
They are Checkpoint R80.30.

Environment

Spectrum 21.X, 22.X

Cause

vsx did not detect the create fanout

Resolution

1. Confirm that R80.30 is added to the Firmware_Version_List so that CheckPointApp is created.
Below techdoc have steps to do:

https://knowledge.broadcom.com/external/article/222797/checkpoint-firewall-vsx-container-is-not.html

2. Confirm that device is Certified.

3. From OC, Delete the modeled device, for which the container and Virtual FW's are not discoverd.
And rediscover it with the Discovery console, marking the option "Create 802.3 (Fanout)" in the Discovery options.
Below screenshot is FYR:


Now when modelled, Checkpoint device is created with the container and it's virtual FWs (vsx).

Additional Information

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/spectrum/21-2/managing-network/certifying-and-supporting-virtual-systems-within-check-point-firewall.html

Attachments