topic Re: BGP with CloudGuard IaaS in AZure in Cloud Firewall

BGP with CloudGuard IaaS in AZure

Jeroen_Demets — Wed, 14 Apr 2021 08:37:49 GMT

Hi,

what is possible with BGP with a CG IaaS Gateway in Azure?

We have a scenario where a CG IaaS gateway is in a hub-spoke design and it is located in the hub. An on-premise CP firewall has a VPN towards this hub gateway.

The customer wants to be able to automatically go to a new spoke vnet when that is created. So we are wondering if a CP Gateway with BGP active can automatically learn of a new spoke vnet (that is connected using azure vnet peering).

Jeroen

Re: BGP with CloudGuard IaaS in AZure

PhoneBoy — Fri, 16 Apr 2021 17:52:22 GMT

I don't see why not, assuming the gateway finds out about this VNet somehow (with BGP or static routes).

Re: BGP with CloudGuard IaaS in AZure

Jeroen_Demets — Wed, 12 May 2021 14:19:39 GMT

sorry for my late reply but all the documents I find are BGP with an Azure VPN Gateway instead of a CP IaaS gateway. I don't see how you can configure BGP interaction with an IaaS gateway and azure networking.

For Azure VPN Gateway: https://docs.microsoft.com/en-us/azure/vpn-gateway/bgp-howto

all the BGP settings are done in there. I just don't find BGP in for example a vnet configuration