Check Point R80.20 - Configuring Mirror and Decrypt in VSX Mode

Mirror and Decrypt
Next Generation Security Gateway Guide R80.20 | 32
Configuring Mirror and Decrypt in VSX mode
Workflow for configuring Mirror and Decrypt in VSX mode:
Step
Description
1 Read and follow the Mirror and Decrypt Requirements (on page 24).
2 Prepare the VSX Gateway, or each VSX cluster member (on page 34).
3 Configure the Mirror and Decrypt in the Virtual System object in SmartConsole:
• For one Virtual System (on page 35)
• For several Virtual Systems (on page 40)
Example topology for one Virtual System:
Item Description
1 VSX Gateway.
2 Recorder, or Packet-Broker that works in a monitor (promiscuous) mode.
3 Virtual System, through which your networks send and receive their traffic.
4 Flow of the decrypted and mirrored traffic from the VSX Gateway (1) to the Recorder,
or Packet-Broker (2).
eth4 Designated physical interface on the VSX Gateway (1).
Virtual System (3) connects directly to this physical interface.
wrp128 One of the virtual interfaces on the Virtual System (3).