topic How to add a Cloudguard MiG in GCP on an Identity Collector ? in Cloud Firewall

How to add a Cloudguard MiG in GCP on an Identity Collector ?

Chris_Van_Kriek — Mon, 31 Jul 2023 07:41:51 GMT

I suppose I cannot go about adding every instance separately in the gateways section of the Identity Collector, since,if the MiG scales out, the added gateway will not be configured on the IDC.

A certificate is also needed to be installed on the platform portal. Same question for that.

Thanks,

Chris.

Re: How to add a Cloudguard MiG in GCP on an Identity Collector ?

Nir_Shamir — Mon, 31 Jul 2023 07:45:33 GMT

Hi,

this is not doable because , as you said , you need to add the GW's in the IDC agent configuration etc.

best way is to have some other single GW / Cluster as PDP and activate Identity sharing on the MIG (can be done with a script on the CME).

This way a new GW will have access to Identity DB via a different PDP.

Re: How to add a Cloudguard MiG in GCP on an Identity Collector ?

Chris_Van_Kriek — Mon, 31 Jul 2023 11:26:17 GMT

Thanks for the prompt reply ! autoprov_cfg enables the IA blade, but no options to configure it. Any more docs I can find around this ?

Re: How to add a Cloudguard MiG in GCP on an Identity Collector ?

Nir_Shamir — Mon, 31 Jul 2023 12:49:20 GMT

no docs for that.

you need to write a script using Mgmt API to activate it.

Re: How to add a Cloudguard MiG in GCP on an Identity Collector ?

Chris_Van_Kriek — Mon, 31 Jul 2023 18:58:07 GMT

I see. Can it be done with Terraform and CME API too ?

Re: How to add a Cloudguard MiG in GCP on an Identity Collector ?

Nir_Shamir — Tue, 01 Aug 2023 12:15:22 GMT

I am not sure. I don't see it in CME API and terraform is just used to deploy the instances.