topic CloudGuard Failure Issues in Azure in Cloud Firewall

CloudGuard Failure Issues in Azure

Liam_McElhinney — Mon, 09 Sep 2019 10:34:34 GMT

Hi,

We have recently upgraded our R80.10 HA CloudGuard cluster in Azure to R80.20. We used the latest Azure marketplace template and have successfully deployed the two gateways to form the cluster. We successfully got everything configured and it has been working well. However, on two occasions now I have returned to work on the Monday morning to find that no traffic is flowing through to our IaaS estate in Azure through the firewalls. Upon checking SmartConsole I see red crosses and 'connection is lost' for both cluster members. On looking at the logs i see one last log originating from the Azure cluster member and the description is "(ClusterXL) interface enP1p0s2 of member 1 (10.12.2.8) was removed."

A restart of the gateway VM's in Azure brings them back to life but this obviously isn't a viable solution.

Has anyone had this issue before and can shed any light on it for us?

Thanks

Liam

Re: CloudGuard Failure Issues in Azure

PhoneBoy — Fri, 13 Sep 2019 20:42:07 GMT

I hate to be the "an upgrade should fix it" guy but I know there were a number of issues with R80.20 in Public Cloud in general that we addressed as part of R80.30.
We are about to de-list R80.20 as described here: https://community.checkpoint.com/t5/CloudGuard-IaaS/Planned-Delisting-Announcement-for-CloudGuard-IaaS-in-Azure-and/m-p/62496#M1343

Re: CloudGuard Failure Issues in Azure

ITSecurity_CDIS — Thu, 19 Sep 2019 11:51:07 GMT

Hello Liam,

We have the same issue (VMSS in Azure) here since we moved to R80.20 !

Kind regards,
Louis