Check Point Security Gateway vSEC for ESXi 6.0, 6.5,6.7 With NSX 6.3.0, 6.4.0, 6.4.1
Article ID: 321415
Updated On: 02-03-2025
Products
Issue/Introduction
Disclaimer: The partner product referenced in this article is a software module that is developed and supported by a partner. Use of this product is governed by the end user license agreement of the partner. You must obtain from the partner the application, support, and licensing for using this product. For more information, see www.checkpoint.com.
Environment
VMware vSphere ESXi 6.0
VMware NSX for vSphere 6.4.x
VMware NSX for vSphere 6.3.x
VMware vSphere ESXi 6.7
Resolution
Supported Software
Check Point Security Gateway vSEC protects virtualized environments in private and public clouds from internal and external threats by securing virtual machines and applications with the full range of Check Point Software Blades and central management. Check Point Security Gateway vSEC product is integrated with VMware NSX Manager ecosystem, using NetX API.
For more information on the additional supported software, see the VMware Compatibility Guide.
Supported Builds and Platforms
VMware Components
| ESXi host | 6.0, 6.5, 6.7 |
| vCenter Server | 6.0 GA (build 3018523) Or later |
| NSX Manager | 6.3.0 GA (build 5007069) 6.4.0 GA (build 7564187) 6.4.1 GA (build 8408468) |
Used VMware Libs:
VMware Netx SDK 6.3.2 build number 5519000
Support information:
Product Information: https://www.checkpoint.com/products/cloud-security/.
Download Site:
https://support.checkpoint.com/results/sk/sk114518.
Upgrading the vSEC Service Registration Hotfix
How to upgrade from the previous vSEC Gateway for NSX R77.30VSEC
(vSEC Controller R77.30 and vSEC Gateway for NSX R77.30VSEC v4 Administration Guide download link : https://downloads.checkpoint.com/dc/download.htm?ID=55792 (requires login to download)).
If your vSEC Gateway for NSX R77.30VSEC is currently running the previous version of R77.30vSEC for NSX, then follow these steps to upgrade the vSEC Gateway R77.30VSEC:
Either replace the current OVF files (Zero Downtime):
- Install the new OVF files.
(refer to the vSEC Controller R77.30 and vSEC Gateway for NSX R77.30VSEC v4 Administration Guide - section "Installing the vSEC Gateway OVF Files").
- Register a new vSEC Gateway service (refer to the vSEC Controller R77.30 and vSEC Gateway for NSX R77.30VSEC v4 Administration Guide - section "Registering a vSEC Gateway Service").
- Deploy the new vSEC Gateway service (refer to the vSEC Controller R77.30 and vSEC Gateway for NSX R77.30VSEC v4 Administration Guide - section "Deploying vSEC Gateway").
- In SmartDashboard, install the policy on the Check Point vSEC Gateway.
- In the vSphere client, change the redirection policy from the previous vSEC Gateway service to the new vSEC Gateway service.
- Uninstall the previous vSEC Gateway service.
Or install the required hotfix:
- Install the latest build of the CPUSE Agent from sk92449: CPUSE - Gaia Software Updates (including Gaia Software Updates Agent) on vSEC Gateway for NSX R77.30VSEC.
- Install the vSEC Gateway for NSX R77.30VSEC v4 Hotfix package using the CPUSE - refer to the section "Downloads" - subsection "2. vSEC Gateway for NSX R77.30VSEC v4” (Note: When you install this Hotfix, you are prompted to reboot. You can decrease the down-time during this upgrade, if you migrate all the VMs to another ESXi host before you install the required hotfix.
Netx log files Locations:
- In an MDS ( Multi Domain Server ) management : $MDS_TEMPLATE/log/netx_server.elg
- Otherwise: $FWDIR/log/netx_server.elg
For Troubleshooting Information (logs, procedures and techniques), please refer to Check Point vSEC Gateways on NSX Platforms Administration Guide R80.10 (“Troubleshooting and Best Practices”, pg 31).
For additional support, please refer to the Check Point support center: https://supportcenter.checkpoint.com.
Support Contact:
Support Contact Information:
https://www.checkpoint.com/about-us/contact-us/
Feedback
