Public IP Prefix support for Azure

[PredragPetrovic]

Hi,

I'd like to see if anyone else is using or wanting to use Public IP prefixes in Azure as they solve a lot of problems that come with upgrades and changes in infrastructure. This is a highly needed functionality at least for me as this simplifies management and upgrade tasks. Its extremely weird to have three IP addresses in three different ranges (for the same cluster).

Cheers,

Predrag

[PhoneBoy]

Does Azure even support that?
It doesn't impact the functionality of clustering that I'm aware of, though I can see how it would be...odd compared to physical appliances.

[PredragPetrovic]

Azure supports public IP prefixes to be allocated (a /28 for example). This simplifies the management significantly. Its not odd, but in some scenarios its a nightmare to manage (especially when you have Management over Internet). When you have a lot of Azure locations this is not ideal to have it in this way.

https://docs.microsoft.com/en-us/azure/virtual-network/public-ip-address-prefix

I have actually modified the python scripts (azure_ha_test and azure_had) and arm template long time ago to support it but it was not "supported by check point". So we reverted back to Public IP address and now I have a cabbage to manage (IP addresses are all over the Azure address space).

Cheers,

P.

[Dmitry_Gorn · Accepted solution]

Hi,

Currently public IP prefixes are not supported by CloudGuard Network Security solutions in Azure.

This item is on our roadmap and will be implemented in phases starting from Q4 this year.

Once available, we will update the Azure Latest Updates SK with the relevant information.

Thanks,

Dmitry

[Marcel_M]

Hi, can you please implement this for the Cloud Guard HA Template, and VMSS too.

We really need this urgent.

BR
Marcel