CloudGuard IaaS RnD

[Announcement] R80.20 Gateway with new Linux kernel is GA in Azure & AWS

Blog Post created by CloudGuard IaaS RnD Employee on Jan 3, 2019

Hi Everyone,

 

We are glad to announce that R80.20 Gateway with new Linux kernel is now generally available in Azure & AWS.

 

The new image offers significant improvements:

 

Important

  • R77.30 based solutions will be removed soon from the marketplace.
  • For specific exceptional cases where R77.30 is needed, please contact Check Point TAC.
  • Only standard deployment is supported for single R80.20 gateway. Standalone and custom configuration modes are not supported.
  • In order to manage R80.20 gateways using R80.10 Management Server JHF take 177 or later must be installed.
    See sk116380 for more information.

 

 

Performance

 

 

AWS

For R80.20 gateway:

 Maximum Throughput (Mbps)Maximum Throughput (Mbps)Maximum Throughput (Mbps)
AWS Instance Typec5.largec5.xlargec5.2xlarge
Number of cores248
CPEnt - NGFW260040554065
CPEnt - NGTP104018903400
  • Tested with Cloud-Certified leading testing equipment
  • Used AWS on-demand instances environment
  • Actual performance results may vary depending on cloud infrastructure resources availability, region, topology, and other factors
  • These results are based on actual performances measurements by Check Point performance lab using real-world traffic simulation with out-of-the-box configuration

 

Azure

For R80.20 gateways:

 Maximum ThroughputMaximum ThroughputMaximum Throughput
Azure VM sizeD2_v2 (2 core)D3_v2 (4 core)D4_v2 (8 core)
CPEnt - FW + IPS132025404890
CPEnt - NGFW132025354790
CPEnt - NGTP123525303985
  • Tested using default deployment and Check Point configurations.
  • Tested with Cloud-Certified leading testing equipment
  • Actual performance results may vary depending on cloud infrastructure resources availability, region, topology, and other factors
  • These results are based on actual performances measurements by Check Point performance lab using real-world traffic simulation with out-of-the-box configuration

 

Notes:

-          For different VM sizes see: https://azure.microsoft.com/en-us/documentation/articles/virtual-machines-linux-sizes/ 

-          Performance can be limited by the network bandwidth allocated by Azure to the VM

-          NGFW:  FW + IPS (Recommended - out of the box) + APCL

-          NGTP: NGTP : FW + IPS (Recommended - out of the box) + APCL + URLF + AV + AB

 

 

AWS Solution templates update

All deployment options (Single Gateway, Cluster, Auto Scaling Group and Transit VPC) are supported and can be deployed using our CloudFormation templates.

 

 

Azure Solution templates update

 

The following marketplace offers have been renamed:

  • Check Point CloudGuard IaaS R80.10 Scale Set à Check Point CloudGuard IaaS Scale Set (as it supports both R80.10 & R80.20).
  • Check Point CloudGuard IaaS R80.10 High Availability à Check Point CloudGuard IaaS High Availability (as it supports both R80.10 & R80.20).
  • Check Point CloudGuard IaaS Cluster à Check Point CloudGuard IaaS R77.30 & R80.10 Cluster (as it supports only R77.30 & R80.10).

 

 

The new image is supported by the following solutions:

  • Check Point CloudGuard IaaS Single Gateway
  • Check Point CloudGuard IaaS High Availability
  • Check Point CloudGuard IaaS Scale Set

 

This version will be available on OCI & GCP Marketplace, soon.

 

As always we are here for your comments and suggestions.

CloudGuard IaaS R&D 

Outcomes