In a VSX Gateway cluster, which of the following objects are available by default as installation targets for the Management Virtual System?

Question

Options

• AVirtual System cluster of each customer
• BExternal Virtual Switch cluster object
• CIndividual Virtual Systems for each Customer's cluster member
• DInternal Virtual Switch cluster object
• EExternal Virtual Router cluster object

• A
  10% (3)
• B
  3% (1)
• D
  6% (2)
• E
  81% (25)

Explanation

In a VSX Gateway cluster, the External Virtual Router (EVR) cluster object is the default installation target for the Management Virtual System (VS0) because VS0 relies on the EVR for external routing connectivity - specifically, to reach the Security Management Server over the network. The EVR is automatically created during VSX configuration and serves as the routing entity for traffic leaving the VSX system, making it the natural default anchor for management-plane policy installation.

Why the distractors are wrong:

• A (Virtual System cluster per customer): Customer VS objects represent tenant firewalls, not management infrastructure - VS0 doesn't install onto customer domains by default.
• B & D (External/Internal Virtual Switch cluster): Virtual Switches operate at Layer 2 and have no routing capability; they cannot serve as policy installation targets for a management system that needs IP reachability.
• C (Individual VS members): These are per-node, non-cluster objects. Default targets in a cluster context are always cluster-level objects, not individual members.

Memory tip: Think "Management needs a route out" - of all the VSX objects, only the Virtual Router provides Layer 3 routing, and it's the External one because management traffic must reach servers outside the VSX system. EVR = the exit ramp for VS0.

No community discussion yet for this question.