CloudGuard Azure - standalone, load balancer healthcheck

[Mke89]

Hello Mates,

I have the following question:

According to Check Point Reference Architecture for Azure there should be external Azure loadbalancer in front of the CP Node to leverage NAT and provide access from the Internet. Unfortunately there is no information regarding healthprobe. Does anyone know which TCP port should be set for the LB healthprobe? It is mandatory. I have already tried 8117 (which is the port for HA deployments) but this one seems to not work.

[Chris_Atkinson]

Did you already try the ports that align to your NATs?

443 against the GW itself may also work but seems not what the health probe should be checking given there is only a single GW anyway...

[Mke89]

Hello Chris,

thank you for your reply - that was also my first guess, but in this case I would need to create separate healthcheck for each load balancing rule (there are many of them) which seems not to be scalable.