topic Re: ClusterXL Installation - OpenServer, Appliance, OpenStack, KVM, ESXi, NSX, AWS, ACI, Azure, Goog in General Topics

ClusterXL Installation - OpenServer, Appliance, OpenStack, KVM, ESXi, NSX, AWS, ACI, Azure, Google

HeikoAnkenbrand — Sat, 29 Feb 2020 21:45:00 GMT

Many of our customers keep asking which ClusterXL or gateway version I have to install on different platforms. Here is a small list with the corresponding installation SKs and informations for R80.30 or R80.40:

Open Server and Appliance:

- sk144293 - Check Point R80.30
- sk160736 - Check Point R80.40

CloudGuard Virtual Edition (VE) > OpenStack, KVM, ESXi

- sk158292 - CloudGuard for Private Cloud images

CloudGuard for VMware NSX

- sk114518 - CloudGuard for NSX
- sk111575 - Best Practices - CloudGuard / vSEC Gateway for NSX

CloudGuard for Cisco ACI
- sk111969: CloudGuard for ACI

CloudGuard for Amazon Web Services (AWS)

- sk125252 - CloudGuard for AWS Latest Updates
- sk104418 - Deploying a Check Point Cluster in AWS (Amazon Web Services)

CloudGuard for Microsoft Azure

- sk132192 - CloudGuard for Azure Latest Updates
- Check Point CloudGuard IaaS High Availability for Microsoft Azure Deployment Guide
- sk110194 - Deploying a Check Point Cluster in Microsoft Azure
- sk122793 - Deploying a Check Point Cluster in Microsoft Azure - for templates older than 20180301
- sk110313 - Deploying a Check Point Security Gateway in Azure classic

CloudGuard for Google Cloud Platform

- sk147032 - CloudGuard for GCP (Google Cloud Platform) Latest Updates
- Check Point CloudGuard IaaS High Availability for GCP Administration Guide

More information about cloud installations can be found here:

sk132552: Check Point CloudGuard / vSEC solutions

Re: ClusterXL Installation - OpenServer, Appliance, OpenStack, KVM, ESXi, NSX, AWS, ACI, Azure, Goog

uror — Mon, 02 Mar 2020 19:44:52 GMT

Do I need a normal version (sk144293 - Check Point R80.30 ) or the VE version (sk158292 - CloudGuard for Private Cloud images) on a ESXi 6.5?

We have installed R80.30 form sk144293 and not the private cloud version. What's the difference here?

Re: ClusterXL Installation - OpenServer, Appliance, OpenStack, KVM, ESXi, NSX, AWS, ACI, Azure, Goog

Chris_Hrachowy — Mon, 02 Mar 2020 19:51:29 GMT

Yes, that is an interesting question.

We have not installed the cloud guard ESXi version either. Could that cause a problem?

Re: ClusterXL Installation - OpenServer, Appliance, OpenStack, KVM, ESXi, NSX, AWS, ACI, Azure, Goog

_Val_ — Tue, 03 Mar 2020 07:59:58 GMT

The difference is CloudGuard service, which allows GWs to be part of the SDDC orchestration. If you do not need that, use regular GW. If you do, go CloudGuard.

Re: ClusterXL Installation - OpenServer, Appliance, OpenStack, KVM, ESXi, NSX, AWS, ACI, Azure, Goog

HeikoAnkenbrand — Tue, 03 Mar 2020 15:28:34 GMT

Hi @Chris_Hrachowy

The CloudGuard cloud security solution delivers advanced threat protection to private or public cloud infrastructures. It controls and manages the security in both the physical and virtual environments with one unified management solution. With trusted APIs, the CloudGuard Controller connects to the Software-Defined Data Center (SDDC) and integrates the virtual cloud environment with Check Point Security Gateways. The CloudGuard Controller automatically updates the security policy on security logs. It updates GUI, API, and security logs with new and changed appliances, computers, devices, and addresses.

Check Point Security Gateways run on virtual machines. Deploy the gateway in the public and private cloud for perimeter and lateral protection, and industry-leading advanced threat prevention security. The CloudGuard Gateways integrate seamlessly with SDN solutions, such as VMware vCenter, VMware NSX, Cisco ACI and Cisco ISE.

The CloudGuard Controller integrates with these virtual cloud environments:

Amazon Web Services (AWS)
Microsoft Azure
Cisco ACI
Cisco ISE
Google Cloud Platform (GCP)
Nuage Networks VSP
OpenStack
VMware vCenter
VMware NSX

Re: ClusterXL Installation - OpenServer, Appliance, OpenStack, KVM, ESXi, NSX, AWS, ACI, Azure, Goog

uror — Tue, 03 Mar 2020 17:57:53 GMT

Hello @HeikoAnkenbrand

Thank you for the answer.

Regards
Uror

Re: ClusterXL Installation - OpenServer, Appliance, OpenStack, KVM, ESXi, NSX, AWS, ACI, Azure, Goog

Henrik_Oersnes_ — Sat, 19 Jun 2021 19:43:52 GMT

When installing 80.40 on vmware should i define the cluster as Open Server or cloudguard for NSX.
The cluster is not a part of any automation.

Would that make any difference?