Check Point QoS Overview
328
. . . . .
Check Point QoS Architecture
The architecture and flow of Check Point QoS is similar to VPN-1 NGX.
Check Point QoS has three components:
SmartConsole
— Configures and monitor Check Point QoS
SmartCenter Server
— Stores and distribute the Check Point QoS Policy
QoS Module
— Enforces Check Point QoS Policy
Like other NGX products, Check Point QoS components can be installed in
stand-alone or distributed deployments.
SMARTCONSOLE AND CHECK POINT QOS
The SmartConsole suite of tools allows a Security Administrator to configure,
verify, install, and monitor the Check Point QoS Policy. SmartDashboard is
used to configure the Policy. SmartView Tracker, SmartView Monitor, and
Eventia Reporter provide useful information that can be used to monitor and
tune the Policy.
The QoS information in SmartView Monitor is provided by
interface. When reviewing Traffic > Top QoS Rules, and
interface must be selected. If an interface is not selected,
SmartView Monitor will display an error message.
Check Point’s integrated architecture allows Administrators to reuse objects
created for Security Policies when defining QoS Policies in SmartDashboard. A
single SmartCenter Server can control and monitor multiple QoS modules.
SMARTCENTER SERVER AND CHECK POINT QOS
After the QoS Policy is defined in SmartDashboard, it is downloaded to the
SmartCenter Server. The SmartCenter Server verifies the Policy and distributes
it to QoS Modules. Policy distribution is handled by the Check Point Daemon
(CPD), which runs on both the SmartCenter Server and QoS Module. The
SmartCenter Server also manages the Check Point Log Repository, and acts as
a log server for SmartView Tracker.
