- CheckMates
- :
- Products
- :
- CloudMates Products
- :
- Cloud Network Security
- :
- Discussion
- :
- Re: azure terraform standalone deployment
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
azure terraform standalone deployment
Hello,
I would like to deploy standalone Check Point cloud guard iaas standalone firewall with terraform.
In the official github of check point I just found vmss and ha deployments:
CloudGuardIaaS/terraform/azure at master · CheckPointSW/CloudGuardIaaS (github.com)
Has anyone a stanalone terraform script and can share it?
Or can someone of Check Point maybe upload a stanalone terraform file ?
Some help here would be very nice.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@Shay_Levin anything you can think of?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
We don't have one yet, but i will work on it.
Can't commit to a delivery date, I will publish it by the end of the month.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Great thank you very much @Shay_Levin . I will try it and let you know how it worked.
THX alot
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I added the following lines, to accept the Marketplace agreement, without the deployment failed:
resource "azurerm_marketplace_agreement" "checkpoint" {
publisher = "checkpoint"
offer = "check-point-cg-r8040"
plan = "sg-byol"
}
resource "azurerm_virtual_machine" "sg-vm-instance" {
depends_on = [
azurerm_marketplace_agreement.checkpoint,
azurerm_network_interface.nic1,
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
also
enable_ip_forwarding = true
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I am not able to get this deployment of a singel gateway to work.
Error: Unsupported attribute
on modules/vnet/main.tf line 48, in resource "azurerm_route_table" "frontend":
48: address_prefix = azurerm_subnet.subnet[0].address_prefix
This object has no argument, nested block, or exported attribute named "address_prefix". Did you mean "address_prefixes"?
And there is no new update in the official github of check point
Is there planed to add a update that will work on R81.10 deployment ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @Brede_Jensen ,
I managed to get the attached template working by the versions.tf that we support currently (Can be obtained from GitHub as well):
terraform {
required_version = ">= 0.14.3"
required_providers {
azurerm = {
source = "hashicorp/azurerm"
version = "~> 2.92.0"
}
random = {
version = "~> 2.2.1"
}
}
}
After changing the file as above, run the terraform init -upgrade command.
We plan to release in the near future a single gateway template, and the supported versions will be the same as the rest of the templates.
Best regards,
Dima.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks, I was under the impression you couldn't have a consolidated standalone (manager & gw) on the cloud.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Its is definitely supported. I would not recommend it personally.
![](/skins/images/A53DAF99EDBAFE11A1FC6E62F510C235/responsive_peak/images/icon_anonymous_message.png)