Check Point in EVE-NG: gateway and management
Check Point's Security Gateway and Security Management Server are in the Add Node list of every CloudLabBox workspace. Build a distributed deployment and practise policy, NAT and VPN on Gaia.
Choose a planCheck it in the free demo
- Vendor
- Check Point
- In Add Node
- 8 images
- Templates
cpsg2cpsmscpsg- Newest
cpsg2-R81.20-Licensed
Installed versions
Every Security Gateway and Management name in the Add Node image list, exactly as you’ll pick it.
Started in our checksEach links to the tested tip below.
Template cpsg2
Security Gateway (cpsg2 template)
cpsg2-R81.20-LicensedStarted in our checks
Template cpsms
Security Management Server
cpsms-R81.20-Licensed
Template cpsg
Security Gateway VE (cpsg template)
cpsg-R81.20-Licensedcpsg-R81.10cpsg-R81cpsg-R80-40cpsg-R80-20M1_T14cpsg-R77-20 (checkpoint)
Add it to a lab
In Add Node, choose the template, then the image. The template fills in these settings; change them before you start the node.
| Image | Template | CPU | RAM | Interfaces | Console |
|---|---|---|---|---|---|
| Security Gateway (cpsg2 template) | cpsg2 | 2 | 4096 MB | 4 interfaces | telnet |
| Security Management Server | cpsms | 4 | 8192 MB | 4 interfaces | telnet |
| Security Gateway VE (cpsg template) | cpsg | 4 | 6144 MB | 4 interfaces: eth0 to eth3 | telnet |
EVE-NG admits a node by the CPU and RAM set on it, so a running node counts against your plan at these values. The largest of these templates starts nodes at 4 vCPU and 8,192 MB, which fits the free demo’s 6 vCPU and 8 GB, so you can start one there and open its console.
A gateway managed by its own server
Run a Security Gateway on the cpsg2 template and a Security Management Server on cpsms, with an IOSv router on each side of the gateway. You practise SIC trust, policy installs, NAT and logs.
- 1×Security Gateway (cpsg2 template)
cpsg22 vCPU, 4096 MB - 1×Security Management Server
cpsms4 vCPU, 8192 MB - 2×IOSv
vios1 vCPU, 1024 MB each
Added with these defaults, the lab uses 8 vCPU and 14 GB of RAM. The smallest plan that fits is Standard, with 12 vCPU and 16 GB: £5 a day, or £1.25 an hour On-Demand.
Licences are yours to bring
CloudLabBox doesn't provide Check Point licences, and “Licensed” in an image name isn't a current entitlement. Use your own licence or a Check Point evaluation for the software blades your lab needs.
The images run only inside your CloudLabBox workspace; they aren’t available to download.
Guided labs that use Security Gateway and Management
Ready-made labs in the Shared folder of every lab workspace, each with a scenario, tasks, checks and the full solution. Here are 8 of the 25 that use it, from 3 courses, counted on 2 November 2026.
Questions about Security Gateway and Management
What are Check Point Security Gateway and Management?
Check Point's virtual Security Gateway and Security Management Server run the Gaia operating system. The gateway enforces firewall, NAT and VPN policy; the management server holds the policy you edit in SmartConsole.
Should I use the cpsg or the cpsg2 template for a gateway?
For a new gateway, use cpsg2 with cpsg2-R81.20-Licensed, the image that reached its login prompt in testing. The older cpsg template holds the other gateway images, back to cpsg-R77-20 (checkpoint).
How does the gateway come to trust the management server?
Through SIC, Check Point's Secure Internal Communication. Set a one-time activation key in the gateway's first-time configuration, then enter the same key when you create the gateway object on the management server.
Check Point: how do the gateway and management profiles differ?
Use cpsg2 for the Security Gateway with 2 vCPUs and 4 GB RAM, or cpsms for Security Management with 4 vCPUs and 8 GB. cpsg2-R81.20-Licensed reached its serial login prompt; the filename does not supply a current entitlement. Use your own suitable licence or evaluation. The retained disks are smaller than the current 110 GB clean-install requirement, so do not assume they have enough capacity for a reinstall or upgrade.
Which Security Gateway and Management images are installed?
8 images (1 Security Gateway (cpsg2 template), 1 Security Management Server, 6 Security Gateway VE (cpsg template)), all listed on this page exactly as Add Node shows them. The newest is cpsg2-R81.20-Licensed.
How much CPU and RAM does a Security Gateway and Management node use?
When you add one, the cpsg2 template adds 2 vCPU and 4096 MB of RAM; the cpsms template adds 4 vCPU and 8192 MB of RAM; the cpsg template adds 4 vCPU and 6144 MB of RAM. You can change both in Add Node, and your plan counts what each running node is set to.
More images
CloudLabBox is independent of the vendors named on this page. Their names identify the images in the workspace’s Add Node list.