topic Cloudguard network Firewall in AWS in Cloud Firewall

Cloudguard network Firewall in AWS

Nj — Thu, 08 Jun 2023 07:59:08 GMT

1. I have one AWS account with multiple VPCs in it can I use ONE Cloudguard FW from marketplace to monitor all VPC traffic.

2. Is ONE Cloudguard FW from markeplace sufficient for all multiple accounts in same region

3. Is ONE Cloudguard FW from markeplace sufficient for all multiple accounts in multiple regions

Re: Cloudguard network Firewall in AWS

Bryce_Myers — Thu, 08 Jun 2023 12:28:35 GMT

We are using an autoscale group to create a hub/spoke architecture per region and it's working well. So, I wouldn't say "ONE Cloudguard FW", but one autoscale group, so you have some resiliency and the ability to support dynamic sized workloads without much work on your end.

Re: Cloudguard network Firewall in AWS

Jeff_Engel — Thu, 08 Jun 2023 16:18:18 GMT

Hi @Nj , couple of additional things to look at and consider...

Sending traffic across regions comes at a cost so staying within region if possible is typically advised
Take a look at the AWS Gateway Load Balancer architecture SK here > https://support.checkpoint.com/results/sk/sk174447
CGNS for AWS GWLB Deployment Guide HERE
CGNS for AWS GWLB Workshop with CloudFormation template to build out an entire PoC environment here > https://checkpoint.awsworkshop.io/
If you aren't already in contact with your local account team and overlays, please do so...they are happy to help as well

Best Regards!

Jeff