topic Re: azure terraform standalone deployment in Cloud Firewall

azure terraform standalone deployment

Marcel_M — Fri, 30 Apr 2021 08:27:13 GMT

Hello,

I would like to deploy standalone Check Point cloud guard iaas standalone firewall with terraform.

In the official github of check point I just found vmss and ha deployments:

CloudGuardIaaS/terraform/azure at master · CheckPointSW/CloudGuardIaaS (github.com)

Has anyone a stanalone terraform script and can share it?

Or can someone of Check Point maybe upload a stanalone terraform file ?

Some help here would be very nice.

Re: azure terraform standalone deployment

_Val_ — Fri, 30 Apr 2021 14:43:40 GMT

@Shay_Levin anything you can think of?

Re: azure terraform standalone deployment

Shay_Levin — Sun, 02 May 2021 11:40:49 GMT

Hi,

We don't have one yet, but i will work on it.

Can't commit to a delivery date, I will publish it by the end of the month.

Re: azure terraform standalone deployment

Shay_Levin — Mon, 10 May 2021 12:22:35 GMT

Hi Marcel,

As I promised, the terraform for standalone/gateway is ready and attached to this reply.

It will be added to the official GitHub once it would be verified by R&D.

Just change the credentials in the terraform.tfstate file and give it a try.

Re: azure terraform standalone deployment

Marcel_M — Mon, 10 May 2021 12:25:05 GMT

Great thank you very much @Shay_Levin . I will try it and let you know how it worked.

THX alot

Re: azure terraform standalone deployment

Marcel_M — Sun, 16 May 2021 19:50:05 GMT

Hi,

I added the following lines, to accept the Marketplace agreement, without the deployment failed:

resource "azurerm_marketplace_agreement" "checkpoint" { publisher = "checkpoint" offer = "check-point-cg-r8040" plan = "sg-byol" } resource "azurerm_virtual_machine" "sg-vm-instance" { depends_on = [ azurerm_marketplace_agreement.checkpoint, azurerm_network_interface.nic1,

Re: azure terraform standalone deployment

Marcel_M — Tue, 25 May 2021 18:03:24 GMT

also

enable_ip_forwarding = true

Re: azure terraform standalone deployment

Brede_Jensen — Wed, 01 Mar 2023 20:11:11 GMT

I am not able to get this deployment of a singel gateway to work.

Error: Unsupported attribute

on modules/vnet/main.tf line 48, in resource "azurerm_route_table" "frontend":

48: address_prefix = azurerm_subnet.subnet[0].address_prefix

This object has no argument, nested block, or exported attribute named "address_prefix". Did you mean "address_prefixes"?

And there is no new update in the official github of check point

Is there planed to add a update that will work on R81.10 deployment ?

Re: azure terraform standalone deployment

Dmitrytc — Mon, 06 Mar 2023 08:32:07 GMT

Hi @Brede_Jensen ,

I managed to get the attached template working by the versions.tf that we support currently (Can be obtained from GitHub as well):

terraform { required_version = ">= 0.14.3" required_providers { azurerm = { source = "hashicorp/azurerm" version = "~> 2.92.0" } random = { version = "~> 2.2.1" } } }

After changing the file as above, run the terraform init -upgrade command.

We plan to release in the near future a single gateway template, and the supported versions will be the same as the rest of the templates.

Best regards,

Dima.

Re: azure terraform standalone deployment

Daniel_Kavan — Wed, 12 Jun 2024 15:17:00 GMT

Thanks, I was under the impression you couldn't have a consolidated standalone (manager & gw) on the cloud.

Re: azure terraform standalone deployment

the_rock — Wed, 12 Jun 2024 17:18:13 GMT

Its is definitely supported. I would not recommend it personally.