CloudGuard for NSX

[Andreas_Ahrnby]

Hi,

im running a few CloudGuard for nsx instances with the latest template (R80.10). Is it possible to update the gateways to get the latest “take” thru CPUSE?

Is there any knowledge when a new template with R80.20 or R80.30 will be available? 

[PhoneBoy]

Unfortunately, the NSX-T releases are not maintrain and cannot take mainstream jumbo hotfixes.
It looks like there's an R80.30 version available here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Andreas_Ahrnby]

Forgot to mention, using NSX-V not NSX-T

[PhoneBoy]

Right now, the latest version to support NSX-V is indeed R80.10.

[Andreas_Ahrnby]

You know if it’s possible to update using CPUSE or will it just brake the gateway?

[PhoneBoy]

Pretty sure regular JHF cannot be applied to NSX-V release either as it is NOT maintrain.
That doesn't mean you can't use CPUSE to apply fixes, but they must be specific for the NSX-V release.
You can confirm the above with TAC.

[Itay_Sharim]

Latest version to support NSX-V is based on R80.10. Regular JHFs are not compatible with this version, but JHFs are released periodically specifically for this version. R80.20/R80.30 support is not planned for NSX-V.

NSX-T E/W inspection is supported on a version based on R80.30 with 3.10 Kernel.

[Andreas_Ahrnby]

Using my old thread here, is it possible to tag vms that trigger ips events? Or is it just bot/virus tags that work?

[Kfir_Bachar]

Hi,

Only antivirus/Antibot event can trigger tag on NSX-V. 

Thanks