Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Egenity
Contributor

CloudGuard Cluster with Gaia Cloning Group

One of my clients has a CloudGuard HA cluster (R81.20) operating in Azure.

I have integrated the cluster with internal route server via BGP, in order to facilitate VNet migrations from traditional network pathways to a central hub topology where all traffic can get examined by the firewalls.  Works great and all is well.

As you all know, the BGP routemaps and associated static route triggers need to be identical between the nodes for configuration consistency.  In a normal onprem environment, I would simply create a Gaia cloning group and the BGP configuration management issue is solved (among other configuration items).

Is there anything I should watch out for when enabling the cloning group between the CloudGuard gateways?  Obviously, I will scope down the shared configuration to just what is needed.  Just wondering if anyone has experienced a downside or problems related to this?

 

 


→ CCSE, CCTE, CCME
0 Kudos
0 Replies

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.