topic AWS encrypted EBS volumes in Cloud Firewall

AWS encrypted EBS volumes

Colin_Campbell1 — Wed, 20 Jan 2021 01:19:13 GMT

Hi,

Can I install a marketplace image (R80.40 security gateway) on an EBS encrypted volume?

Colin

Re: AWS encrypted EBS volumes

PhoneBoy — Wed, 20 Jan 2021 01:43:33 GMT

Looks like the most current images support this.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk125252&partition=Basic&product=CloudGuard

Re: AWS encrypted EBS volumes

Jeff_Kopko — Wed, 20 Jan 2021 21:20:37 GMT

Yes, as @PhoneBoy indicated, EBS is supported in 80.40. In our CloudFormation for Deploying a GW, the "Volume encryption KMS key identifier" is used to identify the encryption key. KMS or CMK key Identifier - Use key ID, alias or ARN. Key alias should be prefixed with 'alias/' (e.g. for KMS default alias 'aws/ebs' - insert 'alias/aws/ebs')