Azure CloudGuard laaS Cluster and BGP question!

HeikoAnkenbrand · ‎2020-02-16

Hi Check Point guys,

I have an R80.30 Azure Cluster installation. So far everything works 🙂

Now the question appeared whether the firewall cluster can be connected via BGP (not via VPN) using VeloCloud. Because there is always a frontend or backend load balancer for a cluster instance, I am not sure how to implement this. In the manuals and in the knowledge base I didn't find anything about this topic.

Now my question:

- Is BGP supported (without VPN) on a CloudGuard laaS cluster?
- Where can I find more information for Azure cluster and BGP via VeloCloud integration?
- Do you have an example integration paper.

PhoneBoy · ‎2020-02-16

I guess I'm not clear what benefit BGP would bring in this case if there's no VPN involved.

HeikoAnkenbrand · ‎2020-02-16

VeloCloud is to be connected via two gateways in two zones to connect the azure with the customer network. If one check point gateway fails, the other one shall be used. Routing shall be ensured by BGP.

HeikoAnkenbrand · ‎2020-02-17

Hi @PhoneBoy,

do you have any idea who from Check Point can help in this case?

Regards

Heiko

PhoneBoy · ‎2020-02-18

I did a little bit of looking around internally and it seems someone has done exactly this.
I've found a doc for the Check Point side of this, at least, which I'll see if we can share.

Networks_Team_B · ‎2020-06-01

We are looking to do the same thing integrating VeloCloud in Azure with a Checkpoint.

Is it possible for us to also see the documentation for this?

Thanks for your help

nullform · ‎2020-06-24

Hi,

I'm doing something similar with other vendors as well. Its quite fun setup, maybe we can setup a knowledge exchange on this topic. It's still in PoC but its working quite stable.