topic Re: CloudGuard for AWS- Enterprise Scale Deployment - Deep Dive (TechTalk) in Cloud Firewall

CloudGuard for AWS- Enterprise Scale Deployment - Deep Dive (TechTalk)

Shay_Levin — Sun, 19 Dec 2021 15:39:38 GMT

Hi All,

In this Deep Dive webinar, I will walk you through the process of building a secure enterprise scalable topology protected by CloudGuard IaaS. I will take you step-by-step through the deployment and configuration process on both AWS and Check Point platforms.

The webinar diagram is available via this link.
Webinar Q&A are available via this link.
CloudGuard AutoScaling for AWS deployment guide is accessible via this link.
Transit Gateway Cross Availability Zone Cluster deployment guide is available via this link.
TGW Cross Availability Zone Cluster – additional configuration required to read here.
Cloud Management Extension (CME) available via this link.

(** CME is relevant only for CloudGuard AutoScaling deployments)

CloudGuard Controller Admin Guide is available via this link.
CloudGuard Template list is available via this link.

Enjoy

-Shay Levin

Re: CloudGuard for AWS Deployment - Deep Dive - For Enterprise Organizations (TechTalk)

funkylicious — Fri, 25 Sep 2020 16:05:02 GMT

Hi,

Would there be a webinar for a deep dive in GCP also, any time soon ?

Re: CloudGuard for AWS Deployment - Deep Dive - For Enterprise Organizations (TechTalk)

Shay_Levin — Tue, 29 Sep 2020 08:00:51 GMT

https://community.checkpoint.com/t5/How-To-Videos/CloudGuard-for-GCP-Enterprise-Scale-Deployment-Deep-Dive/m-p/97768#M230

Re: CloudGuard for AWS- Enterprise Scale Deployment - Deep Dive (TechTalk)

AyGit — Tue, 23 Mar 2021 11:50:10 GMT

Hi @Shay_Levin

Thanks again for the great presentation.

Perhaps I'm wrong, but I don't see the routing configuration on the GAIA part of the GeoCluster members. So, did you kept the below original configuration from the deployment? The whole traffics (IN and OUT) are routed only from eth0?

Destination Address	Next Hop
Default	eth0 default GW IP Address
10.0.1.0/24	eth1 default GW IP Address

Regards

Re: CloudGuard for AWS- Enterprise Scale Deployment - Deep Dive (TechTalk)

Shay_Levin — Wed, 24 Mar 2021 08:21:21 GMT

Yes.

Eth1 is only used for Sync

Attached an example configuration from the admin guide