topic Re: Azure Cloud Guard IaaS licensing & Smart-1 Cloud in Cloud Firewall

Azure Cloud Guard IaaS licensing & Smart-1 Cloud

Alex- — Sun, 13 Nov 2022 19:27:26 GMT

I may have missed this in the relevant admin guides but I don't seem to find clear guidelines to license additional virtual cores on Azure CG managed by Smart-1 Cloud.

I will add cores to an existing instance and I wondered how it needs to be licensed exactly. The current active Azure CG IaaS seems to be locally licensed with 100.64.0.y as management and 100.64.0.x where y is the virtual IP of the Smart-1 Cloud and x is the virtual IP of the firewall, as they appear in the R81.10 Smart Console.

Should I do the same for the additional core and it via the license tab or SmartUpdate?

Any advice on how to do this properly is appreciated.

Re: Azure Cloud Guard IaaS licensing & Smart-1 Cloud

Chris_Atkinson — Sun, 13 Nov 2022 23:30:06 GMT

Note the Smart-1 Cloud admin guide limitations section states:

To use the "vsec_lic_cli" tool to apply CloudGuard IaaS licenses, contact Check Point Support.

Refer: https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Check-Point-SmartCloud-Admin-Guide/Topics-Smart-1-Cloud/Expected-Behavior-and-Known-Limitations.htm?Highlight=Iaas

Re: Azure Cloud Guard IaaS licensing & Smart-1 Cloud

Alex- — Tue, 15 Nov 2022 14:08:56 GMT

Thanks Chris, I took it with TAC.

I hope a self-service is in the plans as it requires back and forth with Support to activate Cloud instances and customers don't like to wait. 😄

Re: Azure Cloud Guard IaaS licensing & Smart-1 Cloud

Alex- — Tue, 22 Nov 2022 20:46:45 GMT

In the end, it was even simpler than that. Licensed centrally in the UC to the virtual IP of the Smart-1 Cloud 100.64.0.52 and applied via the Licenses tab of the Cloud Guard IaaS in the R81.10 Smart Console.