ClusterXL Installation - OpenServer, Appliance, OpenStack, KVM, ESXi, NSX, AWS, ACI, Azure, Google

[HeikoAnkenbrand]

Many of our customers keep asking which ClusterXL or gateway version I have to install on different platforms. Here is a small list with the corresponding installation SKs and informations for R80.30 or R80.40:

Open Server and Appliance:

- sk144293 - Check Point R80.30 
- sk160736 - Check Point R80.40

CloudGuard Virtual Edition (VE) > OpenStack, KVM, ESXi

- sk158292 - CloudGuard for Private Cloud images

CloudGuard for VMware NSX 

- sk114518 - CloudGuard for NSX
- sk111575 - Best Practices - CloudGuard / vSEC Gateway for NSX

CloudGuard for Cisco ACI
- sk111969: CloudGuard for ACI

CloudGuard for Amazon Web Services (AWS)

- sk125252 - CloudGuard for AWS Latest Updates
- sk104418 - Deploying a Check Point Cluster in AWS (Amazon Web Services)

CloudGuard for Microsoft Azure

- sk132192 - CloudGuard for Azure Latest Updates
- Check Point CloudGuard IaaS High Availability for Microsoft Azure Deployment Guide
- sk110194 - Deploying a Check Point Cluster in Microsoft Azure
- sk122793 - Deploying a Check Point Cluster in Microsoft Azure - for templates older than 20180301
- sk110313 - Deploying a Check Point Security Gateway in Azure classic

CloudGuard for Google Cloud Platform

- sk147032 - CloudGuard for GCP (Google Cloud Platform) Latest Updates
- Check Point CloudGuard IaaS High Availability for GCP Administration Guide

More information about cloud installations can be found here:

sk132552: Check Point CloudGuard / vSEC solutions

[uror]

Do I need a normal version (sk144293 - Check Point R80.30 ) or the VE version (sk158292 - CloudGuard for Private Cloud images) on a ESXi 6.5?

We have installed R80.30 form sk144293 and not the private cloud version. What's the difference here?

[Chris_Hrachowy]

Yes, that is an interesting question.

We have not installed the cloud guard ESXi version either. Could that cause a problem?

[HeikoAnkenbrand · Accepted solution]

Hi @Chris_Hrachowy 

The CloudGuard cloud security solution delivers advanced threat protection to private or public cloud infrastructures. It controls and manages the security in both the physical and virtual environments with one unified management solution. With trusted APIs, the CloudGuard Controller connects to the Software-Defined Data Center (SDDC) and integrates the virtual cloud environment with Check Point Security Gateways. The CloudGuard Controller automatically updates the security policy on security logs. It updates GUI, API, and security logs with new and changed appliances, computers, devices, and addresses.

Check Point Security Gateways run on virtual machines. Deploy the gateway in the public and private cloud for perimeter and lateral protection, and industry-leading advanced threat prevention security. The CloudGuard Gateways integrate seamlessly with SDN solutions, such as VMware vCenter, VMware NSX, Cisco ACI and Cisco ISE.

The CloudGuard Controller integrates with these virtual cloud environments:

• Amazon Web Services (AWS) 
• Microsoft Azure 
• Cisco ACI 
• Cisco ISE 
• Google Cloud Platform (GCP) 
• Nuage Networks VSP 
• OpenStack 
• VMware vCenter 
• VMware NSX

[uror]

Hello @HeikoAnkenbrand 

Thank you for the answer.

Regards
Uror

[Henrik_Oersnes_]

When installing 80.40 on vmware should i define the cluster as Open Server or cloudguard for NSX.
The cluster is not a part of any automation.

Would that make any difference?

[_Val_]

The difference is CloudGuard service, which allows GWs to be part of the SDDC orchestration. If you do not need that, use regular GW. If you do, go CloudGuard.