Azure Linux VM agent version

[Scott_Paisley]

We have some Clouguard gateways in Azure deployed from the marketplace

They have linux VM agent 2.2.45 installed, which Checkpoint say is the latest version they support.

Microsoft are now telling us 2.2.53.1 is the lowest version they support.

Anybody else run into this?

[the_rock]

I will double check later, bit odd latest version would be from 2020

Andy

https://support.checkpoint.com/results/sk/sk164880

[the_rock]

I found this online. To me, logically, it would indicate even lower version would still work.

Andy

https://learn.microsoft.com/en-us/troubleshoot/azure/virtual-machines/windows/support-extensions-age...

Minimum supported version of Linux VM Agent

To get support for Linux Agent and extensions in Azure, the Linux Agent version on the Linux virtual machine (VM) must be later than or equal to version 2.2.53.1.

Starting in July 2022, the minimum supported version will be version 2.2.53.1 for the Linux Agent.

• If the Linux Agent version is earlier than version 2.2.53.1, you must update the VM by using the distribution package manager and by enabling auto-update.
• If the distribution vendor doesn't have the minimum Linux Agent version in the package repositories, the system is still in support. If the Linux Agent version is later than version 2.1.7, you must enable the Agent auto-update feature. It will retrieve the latest version of code for extension handling.
• If the Linux Agent version is earlier than version 2.2.53.1, or if the Linux system is out-of-support, we may require you to update the agent before getting support.
• If the Linux Agent version is customized by a publisher, Microsoft may direct you to the publisher for support agent or extension-specific support because of the customization. To upgrade the Linux Agent, see How to update the Azure Linux Agent on a VM.

[Scott_Paisley]

I have an update on this. We had a joint call with Microsoft support and Checkpoint TAC.

According to Checkpoint, although the Linux agent is installed as part of the build and is used in the process, it is not required by Microsoft, and therefore the version is not relevant to support.

The problem we were having was 'fixed' by migrating the gateway VM to a different Azure host.

[Edan_Leventhal]

FYI, we have made a new SK with Check Point's official statement on the matter  sk182408 

The sk states:

Later versions of WALinuxAgent are not certified for CloudGuard Network Security for Azure.

While version 2.2.45 is not the latest recommended version from Microsoft Azure, using this version has no impact on the functionality or behavior of the CloudGuard Network Security for Azure.