topic Azure Internal Load Balancer after checkpoint in Cloud Firewall

Azure Internal Load Balancer after checkpoint

a_security — Thu, 26 Nov 2020 11:38:15 GMT

Hello team ,

We have a customer where we will be using checkpoint HA in Azure for north-south traffic .

There is an Azure external LB before Checkpoint .

Now there is another Internet Juniper VSRX Standalone FW where all the VPN tunnels(from on prem) will be terminating.

Question is can we use a common Internal Load Balancer for both these Firewalls .?

We want all the outbound traffic to go via Checkpoint

and all the on-prem specific traffic go via vSRX

There is a plan to have a F5 WAF after the Internal Load Balancer.

So can we have a common Internal Load Balancer to serve as a backend for both Checkppoint and Juniper

a_security — Fri, 27 Nov 2020 20:21:49 GMT

Hello

Anyone please ?

PhoneBoy — Sat, 28 Nov 2020 02:54:44 GMT

As far as I know, load balancers don’t support IPSec traffic at all.

Matthias_Haas — Mon, 07 Dec 2020 07:47:09 GMT

Hi,

I would use UDRs (User defined Routes) to direct the OnPrem networks to the Juniper SRX

Could be both ways, depending on where (subnet) you deploy your UDRs:

1. OnPrem <-> SRX <-> CP <-> Azure

2. OnPrem <-> SRX <-> Azure

Matthias