CloudGuard SaaS with on-Prem Gateways

[H2-F1]

Hello Community,

Having been exposed to more traditional deployments such as physical and virtual SMS and gateways, I would like to know how the base installation and certain features get accomplished with CloudGuard in order to wrap my brain around its usefulness when evaluating and scoping projects.

Would it be correct to state that CloudGuard is primarily designed to manage and protect organisations' Cloud environments such as AWS and Azure, using virtual gateways? but that it can also manage on-Premise Gateways at the same time?

When setting up the CloudGuard SasS (I'll refer to it as C-SMS) with on-Premise Gateways in a ClusterXL or any other configuration, the only way I can imagine that the C-SMS can establishing SIC will be via the gateways public IP addresses? In the event that one of the gateways loses internet connectivity, this will no longer be manageable.

What about logs and all the telemetry that the gateways capture, does this constantly gets uploaded to the C-SMS? what is the bandwidth impact when most blades are active?

Finally integrating the firewalls with AD usually requires the creation of LDAP Account Unit and enabling the IA blade, Whereas this is trickier to accomplish with a C-SMS deployment. I came across the following article when researching LDAP integration C-SMS.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

Is this the best practice? Or can the traditional approach (LDAP account unit and IA blade) also work with some policies and NAT rules to allow the C-SMS to reach the on-Prem Domain Controllers?

Thanks

[Chris_Atkinson · Accepted solution]

CloudGuard IaaS = Azure,AWS,GCP etc

CloudGuard SaaS = O365, G-Suite etc 

Management can also be virtualised in Public cloud or Smart-1 Cloud (Management as a Service).

Hope this helps to distinguish the solutions.

[H2-F1]

Thanks for the clarification Chris, that in itself is clearer than all the literature out there.

Looking at the MaaS, I have seen the onboarding video at

https://community.checkpoint.com/t5/How-To-Videos/MaaS-Management-as-a-Service-Onboarding-Video/td-p...

Could you please explain how you would establish SIC and setup a clusterXL with physical Gateways on premise? are there any guides on how one would configure the MaaS 

Lastly, what about integration such as AD how is that accomplished since the Smart-1 is in the Cloud?

Thanks