Cloudguard Implementation without a Public loadbalancer / public IP's

[RayP]

Hi all,

Where can i find information about a Cloud Guard Implementation without a public loadbalancer or without a loadbalancer without Public IP's.

Situation (See the screenshot)

-2x Check Point Applicance ClusterXL (On-Premise) with a connection to Azure by ExpressRoute

-1x Check Point Management (On-Premise)

-Microsoft Azure Environment with multiple VNET's.

The Azure environment is only accessible by the ExpressRoute connection.

I want to use the Check Point Cloud Guard between VNET's and the ExpressRoute within Azure without a Internet Connection or the use of Public IP's.

So traffic from On-Premise must go to the FrontEnd Loadbalancer -Check Point CloudGuard -> BackEnd Loadbalancers -> Different kind of azure virtual machines and vice versa.

When we create a CloudGuard Network Security environment within Azure, we choose not to use "Use Public IP Prefix", but it still does.

How can we achieve this, or is this even possible?