On Jul 4, 2012, at 11:13 AM, C. L. Martinez wrote: > On Wed, Jul 4, 2012 at 10:49 AM, Jiri B <[email protected]> wrote: >> On Wed, Jul 04, 2012 at 09:29:04AM +0200, C. L. Martinez wrote: >>> Hi all, >>> >>> I wonder if with OpenBSD is possible to create virtualized firewalled >>> implementations of conventional physical topologies and designs such >>> as central and remote DMZs (my question has nothing to do with >>> virtualization platforms like ESXi/vSphere or Xen or KVM), like for >>> example CheckPoint VSX does: >>> http://www.checkpoint.com/products/vpn-1-power-vsx/index.html. >> >> So what is that doing? The link is full of marketing shit words :) >> > > The great catch here is what VSX does: you can deploy virtual > firewalls within the same physical CheckPoint machine.
No, the great catch here is that VSX offers you tools to manage up to 250 of these virtual monsters in a centralized fashion. You can also give control of these firewalls to your customers. You can put lots of OpenBSD guests on a host, but there's no way you will be happy when you are seriously thinking about deploying a VSX. Franco

