topic Anyone has deployed Cloudguard Cluster with the integration with Route Server in Azure? in Cloud Firewall

Anyone has deployed Cloudguard Cluster with the integration with Route Server in Azure?

Gongya_Yu — Mon, 27 May 2024 01:55:51 GMT

I am looking for some insight for Cloudguard Cluster with the integration with Route Server in Azure?

Checkpoint has LB approach for Cloudguard Cluster.
Is it possible integrated with Route Server in Azure ?

thanks !!

Re: Anyone has deployed Cloudguard Cluster with the integration with Route Server in Azure?

Amir_Senn — Mon, 27 May 2024 12:07:15 GMT

Hi,

We have a solution called vWAN.

Check it in the following links:

https://www.checkpoint.com/cloudguard/microsoft-azure-security/wan/

https://community.checkpoint.com/t5/Cloud-Network-Security/Azure-vWan-amp-CloudGurad-NVA/m-p/157648

Re: Anyone has deployed Cloudguard Cluster with the integration with Route Server in Azure?

Gongya_Yu — Mon, 27 May 2024 15:25:10 GMT

thanks !!

Re: Anyone has deployed Cloudguard Cluster with the integration with Route Server in Azure?

LeonardHavekost — Thu, 30 May 2024 08:05:24 GMT

Hi,

if you want to use Cluster with Route Server, you can refer to this post: https://community.checkpoint.com/t5/Cloud-Network-Security/Deep-dive-CloudGuard-Azure-Route-Server/td-p/181268

where Gustavo Coronel showed some Use Cases and integrations for ARS and CG Network.

Best regards,

Leonard

Re: Anyone has deployed Cloudguard Cluster with the integration with Route Server in Azure?

Gongya_Yu — Thu, 30 May 2024 11:00:09 GMT

thanks a lot !!

Re: Anyone has deployed Cloudguard Cluster with the integration with Route Server in Azure?

Gongya_Yu — Thu, 13 Jun 2024 15:06:37 GMT

This is a very nice and informative video. The video mentioned VMSS in this deployment. Can we use HA cluster instead of VMSS ?

I also watched this

Enable Dynamic Routing using Azure Route Server

which mentions the following:
"When you deploy Azure Route Server to a virtual network, there's a period of time when the VMs in the virtual network will lose connectivity to the on-premises network"

like to hear Any comments on this ?

thanks !!

Re: Anyone has deployed Cloudguard Cluster with the integration with Route Server in Azure?

ChristianCastil — Fri, 28 Jun 2024 23:11:41 GMT

yes you can use the HA deployment, just take in mind two things, the Check Point's BGP peer interface needs to be a clustered one in ClusterXL deployments, so you will need to use the ETH0 of the Cluster to do the BGP peering, because that one has a floating IP and it's declared as Clustered in the object, now, since you're requiring to make the next hop the backend interface of the Check Point you will need to use Routemaps to advertise either, the per each ETH1 GW itself or the private IP of the Internal Load Balancer.

Hope this is clear, if not please let me know to clarify.

Re: Anyone has deployed Cloudguard Cluster with the integration with Route Server in Azure?

Gongya_Yu — Sat, 29 Jun 2024 02:30:04 GMT

thanks so much !!