https://community.checkpoint.com/t5/Cloud-Firewall/Azure-CloudGuard-SMS-and-Log-Server-in-same-resource-group/m-p/176212#M524 <P>Hi,</P><P>In Azure, when deploying CloudGuard SMS, there's a requirement when deploying via the Marketplace that the SMS be deployed into an empty resource group. I'm not an Azure expert however I believe the requirement for an empty resource group means that the SMS needs to be deployed into a VNET (and subnet) that's created as part of the deployment (resource group is the parent of VNET and the grandparent of subnet).</P><P>When I go to deploy the log server, I use Marketplace to deploy a management server, then change to "configure manually" to run the first time configuration wizard, change type to log server, etc. This works, however the same requirement for an empty resource group (deploy into new VNET, subnet) exists.</P><P>The overall result is that the SMS and Log server are in different subnets, in different VNETs, and under different resource groups.</P><P>Question - if we wanted, in Azure, to have a CloudGuard SMS and a CloudGuard Log Server in the same subnet, VNET, and resource group, how could we do that using a supported deployment method that would result in a supportable installation? In other words, is there a supported/supportable method of deploying a management server that does not use the Marketplace template?</P><P>Cheers,</P><P>Andrew</P><P>&nbsp;</P><P>&nbsp;</P> Mon, 27 Mar 2023 01:08:51 GMT AK2 2023-03-27T01:08:51Z https://community.checkpoint.com/t5/Cloud-Firewall/Azure-CloudGuard-SMS-and-Log-Server-in-same-resource-group/m-p/176212#M524 <P>Hi,</P><P>In Azure, when deploying CloudGuard SMS, there's a requirement when deploying via the Marketplace that the SMS be deployed into an empty resource group. I'm not an Azure expert however I believe the requirement for an empty resource group means that the SMS needs to be deployed into a VNET (and subnet) that's created as part of the deployment (resource group is the parent of VNET and the grandparent of subnet).</P><P>When I go to deploy the log server, I use Marketplace to deploy a management server, then change to "configure manually" to run the first time configuration wizard, change type to log server, etc. This works, however the same requirement for an empty resource group (deploy into new VNET, subnet) exists.</P><P>The overall result is that the SMS and Log server are in different subnets, in different VNETs, and under different resource groups.</P><P>Question - if we wanted, in Azure, to have a CloudGuard SMS and a CloudGuard Log Server in the same subnet, VNET, and resource group, how could we do that using a supported deployment method that would result in a supportable installation? In other words, is there a supported/supportable method of deploying a management server that does not use the Marketplace template?</P><P>Cheers,</P><P>Andrew</P><P>&nbsp;</P><P>&nbsp;</P> Mon, 27 Mar 2023 01:08:51 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Azure-CloudGuard-SMS-and-Log-Server-in-same-resource-group/m-p/176212#M524 AK2 2023-03-27T01:08:51Z https://community.checkpoint.com/t5/Cloud-Firewall/Azure-CloudGuard-SMS-and-Log-Server-in-same-resource-group/m-p/176282#M525 <P>Hi&nbsp;<SPAN>Andrew,</SPAN></P> <P><SPAN>indeed, you need a empty&nbsp;resource group for each device, but you can use an existing VNET. The wizard is proposing a new VNET but you can change this and select an already existing VNET/subnet.</SPAN></P> <P>&nbsp;</P> <P><SPAN>Matthias</SPAN></P> Mon, 27 Mar 2023 12:12:18 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Azure-CloudGuard-SMS-and-Log-Server-in-same-resource-group/m-p/176282#M525 Matthias_Haas 2023-03-27T12:12:18Z https://community.checkpoint.com/t5/Cloud-Firewall/Azure-CloudGuard-SMS-and-Log-Server-in-same-resource-group/m-p/177746#M526 <P>Hi Matthias, thanks for pointing this out. Resource group for each has to be empty but can use existing VNETs and Subnets. Cheers, Andrew</P> Sun, 09 Apr 2023 22:08:55 GMT https://community.checkpoint.com/t5/Cloud-Firewall/Azure-CloudGuard-SMS-and-Log-Server-in-same-resource-group/m-p/177746#M526 AK2 2023-04-09T22:08:55Z