topic Re: Internet Inbound/Ingress for Azure Virtual WAN - Deep Dive Recording in Cloud Firewall

Internet Inbound/Ingress for Azure Virtual WAN - Deep Dive Recording

Shay_Levin — Fri, 01 Mar 2024 10:14:28 GMT

We are excited to announce that Check Point is the first vendor to support ingress traffic on Azure Virtual WAN, making exposing your applications to the Internet easier than ever!

Admin guide link

Re: Internet Inbound/Ingress for Azure Virtual WAN - Deep Dive Recording

jmaresky — Sun, 03 Mar 2024 07:34:59 GMT

Great work Shay!

Re: Internet Inbound/Ingress for Azure Virtual WAN - Deep Dive Recording

Simon_Macpherso — Thu, 07 Mar 2024 02:01:13 GMT

hello, what is the mgmt_cli command to configure the controller for CME?

Re: Internet Inbound/Ingress for Azure Virtual WAN - Deep Dive Recording

Nir_Shamir — Thu, 07 Mar 2024 09:55:02 GMT

Hi,

What role does the service principal needs in order to create ingress rule , and on what resource ?

thanks.

Re: Internet Inbound/Ingress for Azure Virtual WAN - Deep Dive Recording

Simon_Macpherso — Thu, 14 Mar 2024 05:57:57 GMT

@Shay_Levin

Re: Internet Inbound/Ingress for Azure Virtual WAN - Deep Dive Recording

EnriqueGB — Thu, 14 Mar 2024 13:21:18 GMT

Regarding to the VMs provisioned, would be possible to use a VMSS to make this solution scalable?

Re: Internet Inbound/Ingress for Azure Virtual WAN - Deep Dive Recording

Shay_Levin — Fri, 15 Mar 2024 12:26:35 GMT

mgmt_cli cme-api/v1/accounts/azure name "azure_unique_name" subscription "xxxxx" application_id "xxxxxxxxxx" directory_id "xxxxxxxxx" client_secret "xxxxxx" --format json

Re: Internet Inbound/Ingress for Azure Virtual WAN - Deep Dive Recording

Shay_Levin — Fri, 15 Mar 2024 12:30:51 GMT

CME account (controller) with a service principle assigned to:
- NVA’s Managed resource group with Reader and Network Contributor roles.
- Relevant public IP addresses (or their resource group) with Reader role.

Re: Internet Inbound/Ingress for Azure Virtual WAN - Deep Dive Recording

Shay_Levin — Fri, 15 Mar 2024 12:31:43 GMT

Currently, VMSS is not supported

Re: Internet Inbound/Ingress for Azure Virtual WAN - Deep Dive Recording

Jeff_Engel — Mon, 18 Mar 2024 12:06:37 GMT

@EnriqueGB Also be aware that this is an Azure limitation, not Check Point.

Re: Internet Inbound/Ingress for Azure Virtual WAN - Deep Dive Recording

EnriqueGB — Mon, 18 Mar 2024 12:38:02 GMT

But limitation nevertheless. The traditional VMSS + CheckPoint works wonderfully and it's great to forget sizing the just big enough sku. Once you get use to scalability is very difficult to go back.