Azure Datacenter Object - VM, Subnet and VMSS only?

[Sam2]

Are there any plans to support importing application services? 

Reviewing: CloudGuard Controller for Microsoft Azure (checkpoint.com)

States that we can import VNETS, subnets, Virtual Machines, or VMSS. My org uses a ton of app services and i was hoping to use this datacenter import in place of updateable objects that include less specific ranges for azure services in a region. 

Thanks

[Jeff_Engel]

Hi @Sam2 ,

Can you please provide a specific example?  It may be possible to improve Updatable Objects to get to the level of specificity you require.  In the meantime, have you taken a look at External Network Feeds?  That might fit the bill here.

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_SecurityManagement_AdminGuid...

Best Regards!

Jeff

[Sam2]

I am looking to import addresses listed in the networking section under a web app/app service in azure, i cannot share screenshots as they would be specific to my organization. 

I can take a look at external network feeds.

[Dan_Morris]

Hi @Sam 

To import IPs from Azure web apps or app services, you can use the CloudGuard controller with tags applied to the app services. This will allow you to effectively populate the IP addresses.

Please note that we do not currently support importing app services alone natively, which is why the Tag functionality is necessary.

Best Regards,

Dan Morris

[Nir_Shamir]

As you mentioned , we can import dynamic objects from your Azure account like VMs, Subnets, vNets, tags etc.

you need to follow the admin guide in order to create a DC center object of your azure subscription and this will allow you to pull these objects and use them in the rules as source or destination.