topic Re: Cloudguard: vwan vs ha vs vmss in Cloud Firewall

Cloudguard: vwan vs ha vs vmss

Machine_Head — Fri, 17 May 2024 16:23:44 GMT

Hi CloudMates,

Apologies if it's a noob question but could you illuminate me on how to choose the right product for a new Azure landing zone project?

Is this VWan "the new thing" an evolution of the classic HA and VMSS?

For what i read VWan can work in all the scenarios you use others, EW, NS, ExpressRoute, etc, plus its natively integrated and seems to play very well with Azure Routing, simple to deploy and loads of benefits.

So are they reasons why you would choose HA or VMSS over VWan?

Looking forward to hear your input. Many thanks!

Re: Cloudguard: vwan vs ha vs vmss

_Val_ — Mon, 20 May 2024 08:06:09 GMT

@Shay_Levin can you please assist?

Re: Cloudguard: vwan vs ha vs vmss

Lior_Mach — Mon, 20 May 2024 12:34:08 GMT

Hi @Machine_Head,

It depends on your needs which solution is best for you.

HA provides you with high availability redundancy in the event of a failure.

With VMSS, you can create unlimited instances seamlessly based on preconfigured policies.

*In VMSS there are some blade limitations, such as VPN.

By leveraging vWAN, you can benefit from all the features Microsoft offers along with Checkpoint's protection in the center to protect all the connected environment and sites across different regions.

Re: Cloudguard: vwan vs ha vs vmss

Shay_Levin — Mon, 20 May 2024 13:59:08 GMT

In addition to Lior's comments, please note that vWAN involves additional costs, which you can review here: Azure vWAN Pricing. The vWAN solution is more suitable for organizations with tens or hundreds of vNets.