topic CloudGuard for NSX in Cloud Firewall

CloudGuard for NSX

Andreas_Ahrnby — Mon, 30 Sep 2019 14:26:28 GMT

Hi,

im running a few CloudGuard for nsx instances with the latest template (R80.10). Is it possible to update the gateways to get the latest “take” thru CPUSE?

Is there any knowledge when a new template with R80.20 or R80.30 will be available?

Re: CloudGuard for NSX

PhoneBoy — Mon, 30 Sep 2019 19:43:40 GMT

Unfortunately, the NSX-T releases are not maintrain and cannot take mainstream jumbo hotfixes.
It looks like there's an R80.30 version available here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139213

Re: CloudGuard for NSX

Andreas_Ahrnby — Mon, 30 Sep 2019 19:48:03 GMT

Forgot to mention, using NSX-V not NSX-T

Re: CloudGuard for NSX

PhoneBoy — Tue, 01 Oct 2019 00:17:20 GMT

Right now, the latest version to support NSX-V is indeed R80.10.

Re: CloudGuard for NSX

Andreas_Ahrnby — Tue, 01 Oct 2019 06:01:30 GMT

You know if it’s possible to update using CPUSE or will it just brake the gateway?

Re: CloudGuard for NSX

PhoneBoy — Tue, 01 Oct 2019 17:03:17 GMT

Pretty sure regular JHF cannot be applied to NSX-V release either as it is NOT maintrain.
That doesn't mean you can't use CPUSE to apply fixes, but they must be specific for the NSX-V release.
You can confirm the above with TAC.

Re: CloudGuard for NSX

Itay_Sharim — Wed, 02 Oct 2019 13:36:02 GMT

Latest version to support NSX-V is based on R80.10. Regular JHFs are not compatible with this version, but JHFs are released periodically specifically for this version. R80.20/R80.30 support is not planned for NSX-V.

NSX-T E/W inspection is supported on a version based on R80.30 with 3.10 Kernel.

Re: CloudGuard for NSX

Andreas_Ahrnby — Sun, 27 Oct 2019 11:22:40 GMT

Using my old thread here, is it possible to tag vms that trigger ips events? Or is it just bot/virus tags that work?

Re: CloudGuard for NSX

Kfir_Bachar — Thu, 28 Nov 2019 15:00:34 GMT

Hi,

Only antivirus/Antibot event can trigger tag on NSX-V.

Thanks