topic CloudGuard IaaS ESXi installation in Cloud Firewall

CloudGuard IaaS ESXi installation

BKYDCPSC — Mon, 25 Nov 2019 10:37:02 GMT

Hi,

Simple question really.

Can anyone point me to a guide on how you install CloudGuard (private) for ESX?

I am lost in how to start this:

Where to get the OS from

How its actually installed

I am relatively new to the Check Point Cloud suite - despite playing around with CG in Azure/AWS Market Place.

With ESX, obviously there is no marketplace so how does one proceed?

Thanks all in advance.

Re: CloudGuard IaaS ESXi installation

mdjmcnally — Mon, 25 Nov 2019 10:54:42 GMT

For non-Marketplace installations, ie OpenServer, Appliance, ESXi, Hyper-V etc then can use the wizard

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowupgradewizard

You select that is a New Installation and follow through the wizard's questions.

At the end then provides a link to the appropriate ISO to download to use for the Installation.

In ESXi then

vmware 5.1 hardware compatibility to ensure see full correct process on startup.

RHEL Enterprise 5 64 bit

Are the main settings want to use with esxi to ensure that if neccessary can get into Maintenance Mode etc.

Re: CloudGuard IaaS ESXi installation

BKYDCPSC — Mon, 25 Nov 2019 11:35:28 GMT

Hi,

Thanks for this.

I used the wizard and it told me to use a standard .iso image for R80.30 - but this wouldnt installed CloudGuard right?

Since - I have discovered this with .ovf files... https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk158292

What should I use? And, is there any installation guides about?

I come from a very on-prem gateway background so I am confused on how to deploy this and configuring interface etc.

Re: CloudGuard IaaS ESXi installation

mdjmcnally — Mon, 25 Nov 2019 12:20:38 GMT

I will be honest only ever used the ISO files.

Installation is the same as any other virtual machine.

ie create the vm, attach the ISO

Boot the vm off the ISO and will install

Will ask you to configue an Interface with an IP during the installation.

You should be able to connect to that IP with the WebUI that allows you to complete the initial config wizard.

Haven't used the OVF files personally since R77.10 however installation will be for a pre-prepped Hardware with

Only guide I could find was for an R77 installation however I figure will be pretty similar and should be able to adapt.

https://dl3.checkpoint.com/paid/2d/2d125be1fdc516aeec2f819e3e56d55c/CP_R77_SecurityGatewayVE_NM_AdminGuide.pdf?HashKey=1574690987_ebd86fa705af9b7e30843962eea11f94&xtn=.pdf

Your ESXi admin should be familar with how to manipulate within ESXi.

The Cloudguard Docs https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk132552&partition=General&product=CloudGuard don't cover Onpremise ESXi that could find.

Don't know if anyone else here done more with OVF installation that has more detailed information about the OVF and if they differ from the ISO installation on vmware in ESXi

Re: CloudGuard IaaS ESXi installation

BKYDCPSC — Mon, 25 Nov 2019 14:52:29 GMT

Hi,

Thanks for this.

Only other slight bit of information to add is that the customer has purchased a CloudGuard for Private Cloud license...

Not sure how this would be accepted if its built as a normal gateway?

Re: CloudGuard IaaS ESXi installation

PhoneBoy — Tue, 26 Nov 2019 04:19:27 GMT

It will be fine.