topic Re: Cloudguard Azure VMSS version management in Cloud Firewall

Cloudguard Azure VMSS version management

dehaasm — Thu, 26 Jan 2023 13:36:22 GMT

In Azure we have a VMSS scaleset with existing version R81.10 and take, what would be the best method to upgrade the firewalls and also to assure that the CME/SMS templates use the new image version for redeployment or scaleout events?

Can we upgrade the firewall normally via CPUSE and do we need to upgrade the CME config somewhere to update to the new image version?

Re: Cloudguard Azure VMSS version management

natanelm — Thu, 26 Jan 2023 16:53:18 GMT

Hi @dehaasm,

According to virtual-machine-scale-sets-upgrade-scale-set, some of the VMSS properties can only be set when you create the scale set, these properties include the Image reference offer, meaning that for scale-out events (new instances) you will get the old version, therefore, upgrading using CPUSE is not supported and not recommended.

Please follow Upgrading_the_CloudGuard_VMSS_Solution admin guide for this procedure.

Thanks,
Natanel

Re: Cloudguard Azure VMSS version management

dehaasm — Fri, 27 Jan 2023 13:51:37 GMT

Hi Natanel,

ok thanks good to know, is it also possible to automatically allow a bigger log directory or do you still need to replace the GRUB file to bootup in maintenance mode, increase disk size each time after you upgrade / deploy new VMSS? What about a Smartevent server Azure template is that coming soon?

Re: Cloudguard Azure VMSS version management

HeikoAnkenbrand — Fri, 27 Jan 2023 14:05:00 GMT

Here in the manual you will find information on how to perform the upgrade:

Upgrading the CloudGuard VMSS Solution

Re: Cloudguard Azure VMSS version management

dehaasm — Fri, 27 Jan 2023 15:08:36 GMT

Hi Thanks ok got it, do you have any advise on how to include smartevents in Azure please?