You can deploy multiple instances of the VM-Series firewall
on the Citrix SDX server. Because each instance of the firewall
requires a minimum resource allocation—number of CPUs, memory and
disk space—on the SDX server, make sure to conform to the specifications
below to ensure optimal performance.
11500, 11515, 11520, 11530, 11540,
13500, 14500, 16500, 18500, 20500
22040, 22060, 22080, 22100, 22120
17550, 19550, 20550, 21550
10.1 is not supported; a software
version higher than 10.1. is required.
Citrix XenServer version
6.0.2 or later
Minimum System Resources
and allocate the total number of data interfaces that you might
require on the VM-Series firewall. This task is essential during
initial deployment, because adding or removing interfaces to the
VM-Series firewall after initial deployment will cause the data
interfaces (Eth 1/1 and Eth 1/2) on the VM-Series firewall to re-map
to the adapters on the SDX server. Each data interface sequentially
maps to the adapter with the lowest numerical value, and this remapping
can cause a configuration mismatch on the firewall.
The host CPU must be a x86-based
Intel or AMD CPU with virtualization extension.
Two network interfaces: one dedicated for management traffic
and one for data traffic. For management traffic, you can use the
0/x interfaces on the management plane or the 10/x interfaces on
the dataplane. Assign additional network interfaces for data traffic,
as required for your network topology.