Check Point is introducing a version of its VPN-1 software that runs on VMware ESX or ESXi to protect virtual machines from one another when they are running on a single piece of hardware.

software runs on the same machine hosting the virtualization software, between the hypervisor and the virtual machine, Check Point says.

In addition to protecting virtual servers from each other the software can perform network address translation between the virtual servers and the external network, obscuring their actual IP addresses from the outside, the company says.

VPN-1 Virtual Edition contains all the features of the conventional VPN-1 including unified threat management so it can extend more than just VPN and firewalling to the virtual machines. (Compare UTM products.)

Check Point suggests that businesses might install VPN-1VE on a single hardware server along with e-mail and Web servers to create a device to support remote offices, rather than resort to multiple servers and security appliances.

The software can be managed centrally via Check Point’s SmartCenter platform.

The current version of VPN-1 Virtual Edition is focused on protecting virtual machines, but as more VMware APIs are made available, Check Point says it plans to write a version that will also protect the hypervisor itself.

Licenses for VPN-1 VE cost more than licenses for the traditional VPN-1. A package of licenses to protect five virtual machines costs $7,500. Customers with spare VPN-1 licenses can apply them to VPN-1 VE, the company says. A 25-user license for the traditional VPN-1 costs $2,000. The new software is available for download from Check Point’s Web site.