We are excited to announce the release of our new Terraform modules for deploying Check Point CloudGuard Network Security in Nutanix environments.
These modules provide a structured, automated, and community-supported approach to provisioning Security Gateways and Management servers, streamlining your security deployment on-premises.
New
Supported Topologies:
- Tenant VPC Topology (E-W & N-S): CloudGuard Network Security gateways are deployed in a High Availability (Active/Standby) cluster inside Tenant VPC with one data interface, one interface dedicated for Management and one interface for HA (sync). The VPC policy is configured to reroute the Forward and Reverse traffic through the CloudGuard Network Security cluster's interface.
- Transit VPC Topology (E-W & N-S): CloudGuard Network Security gateways are deployed in a High Availability (Active/Standby) cluster inside a Transit VPC with one data interface, one interface for Management and one interface for HA. An Overlay external subnet is created in a Transit VPC and used as External Connectivity for the CloudGuard Network Security cluster's data interface, The VPC policy is configured to reroute the Forward and Reverse traffic through the CloudGuard Network Security cluster's interface.
Key Features
- Automated Deployment: Quickly and reliably deploy Check Point Security Gateways and Management servers using Infrastructure as Code.
- Modular Design: Flexible modules for both Security Gateways and Management resources. Use only what you need for your environment.
- Community Supported: Open-source and maintained with input from the Check Point community for continuous improvement.
- Best Practices: Built-in support for Check Point-recommended configurations and security best practices.
- Isolation and Security: Keeps data and applications secure and separate from others.
- Customizable Networking: Allows to define your virtual network, including IP ranges and subnets.
- Scalability: Easily adjusts resources.
Getting Started
- Browse the Modules: Explore the available modules on the Terraform Registry page.
- Clone and Configure: Download the example configurations and adjust variables to match your Nutanix environment.
- Deploy with Terraform: Use terraform init, terraform plan, and terraform apply to launch your Check Point CloudGuard infrastructure.
Example Usage
module "transit_vpc" {
source = "CheckPointSW/cloudguard-network-security/nutanix//examples/transit-vpc"
version = "1.0.0"
## ... other required variables ..
}
Full example and variable documentation are available on the module and examples.
Resources
Feedback & Contributions
We welcome feedback and contributions! Please open issues or submit pull requests on our GitHub repository.
