topic Re: Change from PAYG to BYOL in Azure in Cloud Firewall

Change from PAYG to BYOL in Azure

Alan_Long — Thu, 05 Jan 2023 21:21:48 GMT

We are looking to move from PAYG to BYOL in Azure, Has anyone done this and can share some details of what was done to make the move? We will be also going from R80.30 to R81.10. Need to limit downtime as much as possible during this process. Thanks.

Re: Change from PAYG to BYOL in Azure

Chris_Atkinson — Thu, 05 Jan 2023 22:24:20 GMT

Unfortunately this cannot be achieved in-place and the CG instances will need to be redeployed.

Namely a parallel build and migration of traffic by updating UDRs and similar I expect.

Specifics will depend on your topology and current deployment e.g. VMSS vs HA etc

Re: Change from PAYG to BYOL in Azure

along5664 — Wed, 01 Feb 2023 17:19:58 GMT

Thanks Chris,

Let me ask this. We built the clusters as payg, they are ha clusters. Can we take down one member of the cluster, rebuild it as byol, put it back in the cluster, then fail to it, and do same with other member? Or do we have to drop the whole cluster, and start from scratch?

Re: Change from PAYG to BYOL in Azure

PhoneBoy — Wed, 01 Feb 2023 18:13:19 GMT

PAYG and BYOL licenses are different and different licenses on different cluster members is not supported.
You will need to rebuild the cluster.

Re: Change from PAYG to BYOL in Azure

ishuyell — Tue, 30 May 2023 10:13:02 GMT

Will redeploying a member in a cluster cause any issues? Redeploying is required as communication has stopped from this member in Azure.

Re: Change from PAYG to BYOL in Azure

Nir_Shamir — Tue, 30 May 2023 12:18:29 GMT

usually to fix a Cluster with a faulty member we will need to redeploy an whole new Cluster and replace them.

there is an SK on how to replace specific member in specific deployments:

AWS Geo Cluster - https://support.checkpoint.com/results/sk/sk178110

But I don't see others because there is a lot of configuration done in all sorts of files to make that work.

Re: Change from PAYG to BYOL in Azure

ishuyell — Tue, 30 May 2023 13:40:36 GMT

Hi Nir,

We are planning to start and stop the VM for this member . Will this cause any issues?

Regards,

Ismail