Cloud Guard Edge VNF

[Marcos_Vieira]

Hi,

     If I have understood it correctly, the CloudGuard Edge is a solution on which you can enable a CheckPoint instance inside a SD-WAN Appliance.

      It is enabled through the VNF (Virtual Network Function).  I understand that this is a VM inside the SD-WAN Appliance.

      Is this VNF an static machine, with pre-defined Memory, CPU and Disk Space? Or I can reconfigure it as necessary? Of course within the limits of the SD-WAN appliance.

      In the presentation "sd-wan security.pdf" (https://community.checkpoint.com/t5/Member-Exclusive-Content/sd-wan-security-pdf/m-p/41503) it says that the "minimum" required (page 16) is 1GB RAM, 1 "core", 1GB disk space. The license is based in the number of cores. It means I can change the VNF to user more resources and so guarantee more performance?

      The datasheet https://www.checkpoint.com/downloads/products/cloudguard-edge-datasheet.pdf talks only about the 520v and 840 models. Are these the only ones supported?

Thanks,

[PhoneBoy]

Right now, I don't believe these elements are configurable (cores/ram/disk space).
It's also only for specific SD-WAN appliances, so it's not necessarily something you can install in, say, a generic VMware environment.

[Scott_Chambers]

Is there any plans for Checkpoint to support a VNF deployment on something like Cisco ENCS  platforms?   

Ref: https://www.cisco.com/c/en/us/products/routers/5000-series-enterprise-network-compute-system/index.h...

Silver Peak is one of the supported VNF providers (ReF: https://www.silver-peak.com/documentation/silverpeak-edgeconnect-cisco-encs)  and would allow for similar design has what VMWARE is doing with their SD-WAN product and Checkpoint integration.  

Palo Alto and Fortinet are also 2 other NGFW VNF providers for this platform and it would be awesome if Checkpoint support is in the near future 😉

[PhoneBoy]

I assume we are looking at integrating with other vendors as well.
If you have a specific requirement for this, I recommend engaging with your local Check Point office.

[Itay_Sharim · Accepted solution]

Hi,

CloudGuard Edge is a VM environment that is installed on top of an SD-WAN appliance such as the 520V and 840 that are currently supported. Regarding the minimum requirement - the VNF itself minimum requirements are 1 vCPU, 1GB Ram and 1GB Disk. However, the VNF on the 520V and 840 specifically is installed statically is non-configurable.