Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 

Check Point Supports Google Cloud Network Security Integration

10 Comments
the_rock
MVP Diamond
MVP Diamond

Excellent!

the_rock
MVP Diamond
MVP Diamond

@Gil_Sudai 

Quick question...is there pdf document referencing the same?

Don_Paterson
MVP Gold
MVP Gold
the_rock
MVP Diamond
MVP Diamond

Thanks guys!

skiingmadman
Employee
Employee

@TheRock an mvp/platinum that is impressive!   

We also have a google cloud firewall specific solution brief that mentions NSI that is available to public: 
https://www.checkpoint.com/downloads/products/cloudguard-google-cloud-platform-solution-brief.pdf



 

 

the_rock
MVP Diamond
MVP Diamond

@skiingmadman 

Thank you! As I always say, accolades and titles are nice, but to me, whats way MORE important is the fact we all help others on here...thats what makes community such an amazing platform.

Thanks for the link too, appreciated.

the_rock
MVP Diamond
MVP Diamond

@skiingmadman ...Thank you very much for the pdf file, thats PERFECT!

israelg
Explorer

Hey all,

try to deployed the NSI in GCP with cp-management instance in the same VPC network and project and unable to install policy on the gateways.

 i'm getting error :

Failed to provision the gateway instance.
API call failed with command: install-policy
Payload: {'policy-package': 'Standard', 'targets': 'checkpoint-gateway--chkp-tf-nsi-ycix2-bkbr', 'allow-task-separation': True}
Error details: Operation ended with errors.
Error compiling IPv6 flavor.
"/opt/CPsuite-R82.10/fw1/tmp/install_policy/1118fc77-1452-40e6-a8b5-4dc62af8a97b/FW1/lib/user.def", line 22: ERROR: syntax error

i checked user.def.FW1 file and its looks like that every policy install it adds the list of google LB ip addresses but with error in the syntex.

 

14
15
16 #ifndef __user_def__
17 #define __user_def__
18
19 //
20 // User defined INSPECT code
21 //
22 ,
23 <35.191.0.1, 35.191.255.254>,
24 <209.85.152.1, 209.85.155.254>,
25 <209.85.204.1, 209.85.207.254>,
26 <130.211.0.1, 130.211.3.254>,

pls advice 

Jeff_Engel
Employee
Employee

@israelg We have not had any issues with Security Management being deployed inside the same VPC as the gateways.  If possible, could you try installing policy from a Security Management server outside of the VPC or even outside of GCP itself?