topic Re: Cloud Guard Edge VNF in SASE and Remote Access

Cloud Guard Edge VNF

Marcos_Vieira — Mon, 07 Oct 2019 14:32:43 GMT

Hi,

If I have understood it correctly, the CloudGuard Edge is a solution on which you can enable a CheckPoint instance inside a SD-WAN Appliance.

It is enabled through the VNF (Virtual Network Function). I understand that this is a VM inside the SD-WAN Appliance.

Is this VNF an static machine, with pre-defined Memory, CPU and Disk Space? Or I can reconfigure it as necessary? Of course within the limits of the SD-WAN appliance.

In the presentation "sd-wan security.pdf" (https://community.checkpoint.com/t5/Member-Exclusive-Content/sd-wan-security-pdf/m-p/41503) it says that the "minimum" required (page 16) is 1GB RAM, 1 "core", 1GB disk space. The license is based in the number of cores. It means I can change the VNF to user more resources and so guarantee more performance?

The datasheet https://www.checkpoint.com/downloads/products/cloudguard-edge-datasheet.pdf talks only about the 520v and 840 models. Are these the only ones supported?

Thanks,

Re: Cloud Guard Edge VNF

PhoneBoy — Wed, 09 Oct 2019 17:54:27 GMT

Right now, I don't believe these elements are configurable (cores/ram/disk space).
It's also only for specific SD-WAN appliances, so it's not necessarily something you can install in, say, a generic VMware environment.

Re: Cloud Guard Edge VNF

Itay_Sharim — Thu, 17 Oct 2019 07:52:02 GMT

Hi,

CloudGuard Edge is a VM environment that is installed on top of an SD-WAN appliance such as the 520V and 840 that are currently supported. Regarding the minimum requirement - the VNF itself minimum requirements are 1 vCPU, 1GB Ram and 1GB Disk. However, the VNF on the 520V and 840 specifically is installed statically is non-configurable.

Re: Cloud Guard Edge VNF

Scott_Chambers — Fri, 20 Dec 2019 19:07:42 GMT

Is there any plans for Checkpoint to support a VNF deployment on something like Cisco ENCS platforms?

Ref: https://www.cisco.com/c/en/us/products/routers/5000-series-enterprise-network-compute-system/index.html

Silver Peak is one of the supported VNF providers (ReF: https://www.silver-peak.com/documentation/silverpeak-edgeconnect-cisco-encs) and would allow for similar design has what VMWARE is doing with their SD-WAN product and Checkpoint integration.

Palo Alto and Fortinet are also 2 other NGFW VNF providers for this platform and it would be awesome if Checkpoint support is in the near future 😉

Re: Cloud Guard Edge VNF

PhoneBoy — Sat, 21 Dec 2019 03:42:54 GMT

I assume we are looking at integrating with other vendors as well.
If you have a specific requirement for this, I recommend engaging with your local Check Point office.