topic Re: AWS latest recommended version? in Cloud Firewall

AWS latest recommended version?

Danny — Mon, 18 Jul 2022 20:41:43 GMT

I'm about to deploy a Gateway Load Balancer Security VPC for Transit Gateway in AWS.

Deployment Guide for R80.40
AWS CloudFormation Templates - sk111013
Installing a Jumbo Hotfix Accumulator on CloudGuard for AWS - sk109141
CloudGuard Network Security for AWS Gateway Load Balancer Architecture Options - sk174447

What is the latest recommended major release + JHF for a new deployment?

The latest available AWS CloudFormation Templates are version R80.40 while sk111013 notes at the end that "Check Point Default version widely recommended for all deployment is R81.10 with the latest Jumbo Hotfix Accumulator GA Take."

Also the header of sk111013 notes R81 and R81.10.

Regarding sk109141 there are JHFs available & supported for AWS for version R81, R81.10.

Regarding sk174447 for GWLB (Security VPC + TGW) only R80.40 seems to be supported at the moment.

Re: AWS latest recommended version?

Nir_Shamir — Tue, 19 Jul 2022 05:25:51 GMT

GWLB gateways are still on R80.40 because they use specific configuration with the GENEVE encapsulation.

The next release will be on R81.20 so till then stick to R80.40 and don't install any new JHF on the gateways.

Re: AWS latest recommended version?

Martin_Valenta — Wed, 07 Jun 2023 13:53:08 GMT

when r81.20 will be on AWS support for GWLB?

Re: AWS latest recommended version?

Chris_Atkinson — Wed, 07 Jun 2023 14:01:58 GMT

For R81.20 and higher Check Point versions, Gateway Load Balancer (GWLB) and Gateway images are unified. They use the same Product AMI in the AWS Marketplace per sk174447.

Re: AWS latest recommended version?

Bryce_Myers — Thu, 08 Jun 2023 12:36:09 GMT

We have been using R81.20 for about 4 months without any issues.

Re: AWS latest recommended version?

abihsot__ — Mon, 12 Jun 2023 13:28:17 GMT

R81.20 was in the list for some time already. My impression is that it seems they just skipped R81.10 entirely.

Re: AWS latest recommended version?

iykeveline — Mon, 20 Nov 2023 03:53:04 GMT

Hi Chris. Do you know how I can get the latest (R81.20) GWLB AMI from marketplace?
I currently have the AMI in code for R80.40. I have to update my TF code by inserting the latest AMI. My current checkpoint image ID is ami-046f7eb1e7b7f6854

Re: AWS latest recommended version?

Chris_Atkinson — Mon, 20 Nov 2023 08:45:23 GMT

I believe the steps would be as below but possibly others can confirm:

In the AWS console, navigate to AMI section in the EC2 menu.
Search for the applicable Gaia version (R81.20 in this example) and look for the required image version (refer sk125252).
Copy the AMI ID of the required image