Question 488 - 156-315.81 discussion

The mechanism that can ensure that the Security Gateway can communicate with the Management Server with ease in situations with overwhelmed network resources is calledManagement Data Plane Separation (MDPS)1. MDPS is a feature that allows a Security Gateway to have isolated Management and Data networks. The network system of each domain (plane) is independent and includes interfaces, routes, sockets, and processes. The Management Plane is a domain that accesses, provisions, and monitors the Security Gateway.The Data Plane is a domain that handles all other traffic1.MDPS has the following benefits2:

It improves the performance and stability of the Security Gateway by separating the management traffic from the data traffic.

It enhances the security of the Security Gateway by preventing any packet from crossing between the planes.

It simplifies the network configuration and troubleshooting by having separate routing tables for each plane. MDPS is supported on Check Point Appliances with R80.40 and higher versions1.It is also supported on Quantum Maestro and Quantum Scalable Chassis with R81.20 and higher versions3.MDPS can be configured using Gaia Clish commands or Gaia Portal1.

Reference:Management Data Plane Separation (MDPS) - Check Point Software,Tip of the Week: Management Data Plane Separation - Check Point CheckMates,Management Data Plane Separation (MDPS) on Maestro R81.20 - Check Point Software