CloudGuard Cluster with Gaia Cloning Group

Egenity — Thu, 18 Dec 2025 15:23:05 GMT

One of my clients has a CloudGuard HA cluster (R81.20) operating in Azure.

I have integrated the cluster with internal route server via BGP, in order to facilitate VNet migrations from traditional network pathways to a central hub topology where all traffic can get examined by the firewalls. Works great and all is well.

As you all know, the BGP routemaps and associated static route triggers need to be identical between the nodes for configuration consistency. In a normal onprem environment, I would simply create a Gaia cloning group and the BGP configuration management issue is solved (among other configuration items).

Is there anything I should watch out for when enabling the cloning group between the CloudGuard gateways? Obviously, I will scope down the shared configuration to just what is needed. Just wondering if anyone has experienced a downside or problems related to this?

Re: CloudGuard Cluster with Gaia Cloning Group

Egenity — Tue, 06 Jan 2026 16:21:03 GMT

UPDATE: Two different client environments recently needed this feature. I successfully turned in on for the first client, and all is operating as expected. Will be deploying to second client very soon.

Re: CloudGuard Cluster with Gaia Cloning Group

PhoneBoy — Tue, 06 Jan 2026 19:27:40 GMT

Thanks for updating, good to hear it's working!

topic Re: CloudGuard Cluster with Gaia Cloning Group in Cloud Firewall

CloudGuard Cluster with Gaia Cloning Group

Re: CloudGuard Cluster with Gaia Cloning Group

Re: CloudGuard Cluster with Gaia Cloning Group