topic Re: Cloudguard Hide NAT in Azure in Cloud Firewall

Cloudguard Hide NAT in Azure

TOM_MORAN — Fri, 10 Apr 2020 07:58:23 GMT

Hi want to use 3 x different public ip address for hide nat in Azure.

The traffic is initiated from the server in Azure to external .

The servers so not provide external services so the static nat is not sutable .

Can i do sub interfaces of the external interface of the firewall & Assign the additional public ips's?

Any help here is appreciated

Rule

source destination services

server 1 any any

server 2 any any

server 3 any any

Nat Rule

original source translated source (hide)

server 1 public 1

server 2 public 2

server 3 public 3

Re: Cloudguard Hide NAT in Azure

TOM_MORAN — Fri, 10 Apr 2020 08:27:25 GMT

R80.20 is the version

Re: Cloudguard Hide NAT in Azure

PhoneBoy — Sat, 11 Apr 2020 04:17:26 GMT

If you don't want the servers to be publicly accessible but need outbound access for them, you can configure the NAT (and access policy) in one direction…or use hide NAT.

Re: Cloudguard Hide NAT in Azure

TOM_MORAN — Tue, 14 Apr 2020 07:13:32 GMT

Hi thanks for the reply,

it still does answer my question, how do i apply 3 separate hide nat's using three different public ip addresses.

I cannot use public addresses in policy as external & internal interfaces are private.

I need to know if this is possible please.

Best Regards,

Tom

Re: Cloudguard Hide NAT in Azure

PhoneBoy — Tue, 14 Apr 2020 22:51:45 GMT

From our perspective, this is possible--it would work just as you describe.
However, in this case, the final NAT to public IPs is done via Azure, not by the Check Point gateway.
If I understand how Azure works, you have to assign the VM a private IP for each Public IP you want.
Your HIDE NAT rules would, therefore, be in terms of these private IPs.

Re: Cloudguard Hide NAT in Azure

Matthias_Haas — Wed, 15 Apr 2020 04:48:17 GMT

for a single Gateway, this should work:

https://community.checkpoint.com/t5/CloudGuard-IaaS/STATIC-NAT-in-Azure-Checkpoint/m-p/75802#M1635

Re: Cloudguard Hide NAT in Azure

TOM_MORAN — Wed, 15 Apr 2020 09:36:03 GMT

Hi I will test this asap & get back to you

very appreciated

Tom

Re: Cloudguard Hide NAT in Azure

bmomartins — Wed, 13 May 2020 16:55:52 GMT

Are you using a cluster? Does that work in that scenario?

Re: Cloudguard Hide NAT in Azure

TOM_MORAN — Wed, 07 Oct 2020 08:00:12 GMT

apologies on the long delay, this solution worked perfectly.

This was on a single gateway

Many thanks