topic Re: Is Anyone using vSEC (CloudGuard) for Azure in production in Cloud Firewall

Is Anyone using vSEC (CloudGuard) for Azure in production

Chandhrasekar_S — Mon, 05 Mar 2018 15:16:49 GMT

Hi,

Is there anyone deployed vSEC for Azure in production. The reason I am asking is I have deployed vSEC (CloudGuard) in Azure (R80.10) and I am having trouble getting basic features like RADIUS, Configuration backup for management server and gateways using backup/restore feature or setting up a second internal load balancers for user check working.

Just wanted to know from other users as well on their experiences on vSEC in Azure

Thanks,

Chandru

Re: Is Anyone using vSEC (CloudGuard) for Azure in production

John_Parnell — Tue, 13 Mar 2018 20:16:21 GMT

I have several gateways working in Azure. I utilize RADIUS, backups, and load balancers (both Azure load balancers and Netscalers) and I am not experiencing any problems. Do you have a specific question?

Re: Is Anyone using vSEC (CloudGuard) for Azure in production

Chandhrasekar_S — Tue, 13 Mar 2018 20:23:43 GMT

Hi John,

Thanks for the reply. Can you please let me know, how you are backing up the Secure Management Server and the vSEC gateways. I heard backup/restore option in GAIA doesn't work in Azure and also Azure VM backup is not supported.

Please let me know, how you are backing up

Chandru

Re: Is Anyone using vSEC (CloudGuard) for Azure in production

Calvin_Nguyen — Wed, 21 Mar 2018 15:44:16 GMT

Would like to know everyone's experiences as well.

Re: Is Anyone using vSEC (CloudGuard) for Azure in production

Chandhrasekar_S — Thu, 22 Mar 2018 02:18:39 GMT

The RADIUS issue is now resolved for vSEC (cloudguard). Support had to work with developers and you need to modify the sshd file to get it work without issues

Still no good out of the box, backup solution for management server

Re: Is Anyone using vSEC (CloudGuard) for Azure in production

Martin_Valenta — Thu, 22 Mar 2018 03:35:24 GMT

In case of gateway, you should be able to perform backup either from Gateway or configuring backups frorm SmartConsole. Anyhow if you have issues with VM in cloud you usually redeploy VM again and apply "clish" config again.

Putting management server on vm in cloud i don't consider as a good idea, but probably you don't have ExpressRoute between your company and Azure.

Re: Is Anyone using vSEC (CloudGuard) for Azure in production

Chandhrasekar_S — Sun, 25 Mar 2018 01:54:22 GMT

We do have ExpressRoute connectivity to Azure

I have several Azure regions and placing the management center in Azure makes more sense, since it can go over via Azure back bone and gets better bandwidth and latency.

Yes we are following the same method you mentioned for Azure gateways. Just re-deploy the gateways and push the security policies and 'clish' configs.

The problem I am facing is good backup solution for Smart Management server. hopefully R&D finds a solution soon.