topic Re: Public IP Prefix support for Azure in Cloud Firewall

Public IP Prefix support for Azure

PredragPetrovic — Sat, 05 Sep 2020 16:55:57 GMT

Hi,

I'd like to see if anyone else is using or wanting to use Public IP prefixes in Azure as they solve a lot of problems that come with upgrades and changes in infrastructure. This is a highly needed functionality at least for me as this simplifies management and upgrade tasks. Its extremely weird to have three IP addresses in three different ranges (for the same cluster).

Cheers,

Predrag

Re: Public IP Prefix support for Azure

PhoneBoy — Mon, 07 Sep 2020 06:11:18 GMT

Does Azure even support that?
It doesn't impact the functionality of clustering that I'm aware of, though I can see how it would be...odd compared to physical appliances.

Re: Public IP Prefix support for Azure

PredragPetrovic — Mon, 07 Sep 2020 06:17:56 GMT

Azure supports public IP prefixes to be allocated (a /28 for example). This simplifies the management significantly. Its not odd, but in some scenarios its a nightmare to manage (especially when you have Management over Internet). When you have a lot of Azure locations this is not ideal to have it in this way.

https://docs.microsoft.com/en-us/azure/virtual-network/public-ip-address-prefix

I have actually modified the python scripts (azure_ha_test and azure_had) and arm template long time ago to support it but it was not "supported by check point". So we reverted back to Public IP address and now I have a cabbage to manage (IP addresses are all over the Azure address space).

Cheers,

Re: Public IP Prefix support for Azure

Dmitry_Gorn — Thu, 10 Sep 2020 08:58:34 GMT

Hi,

Currently public IP prefixes are not supported by CloudGuard Network Security solutions in Azure.

This item is on our roadmap and will be implemented in phases starting from Q4 this year.

Once available, we will update the Azure Latest Updates SK with the relevant information.

Thanks,

Dmitry

Re: Public IP Prefix support for Azure

Marcel_M — Mon, 14 Sep 2020 14:08:33 GMT

Hi, can you please implement this for the Cloud Guard HA Template, and VMSS too.

We really need this urgent.

BR
Marcel