Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Marcos_Vieira
Contributor
Jump to solution

Cloud Guard Edge VNF

Hi,

     If I have understood it correctly, the CloudGuard Edge is a solution on which you can enable a CheckPoint instance inside a SD-WAN Appliance.

      It is enabled through the VNF (Virtual Network Function).  I understand that this is a VM inside the SD-WAN Appliance.

      Is this VNF an static machine, with pre-defined Memory, CPU and Disk Space? Or I can reconfigure it as necessary? Of course within the limits of the SD-WAN appliance.

      In the presentation "sd-wan security.pdf" (https://community.checkpoint.com/t5/Member-Exclusive-Content/sd-wan-security-pdf/m-p/41503) it says that the "minimum" required (page 16) is 1GB RAM, 1 "core", 1GB disk space. The license is based in the number of cores. It means I can change the VNF to user more resources and so guarantee more performance?

      The datasheet https://www.checkpoint.com/downloads/products/cloudguard-edge-datasheet.pdf talks only about the 520v and 840 models. Are these the only ones supported?

Thanks,

0 Kudos
1 Solution

Accepted Solutions
Itay_Sharim
Employee
Employee

Hi,

 

CloudGuard Edge is a VM environment that is installed on top of an SD-WAN appliance such as the 520V and 840 that are currently supported. Regarding the minimum requirement - the VNF itself minimum requirements are 1 vCPU, 1GB Ram and 1GB Disk. However, the VNF on the 520V and 840 specifically is installed statically is non-configurable. 

View solution in original post

4 Replies
PhoneBoy
Admin
Admin
Right now, I don't believe these elements are configurable (cores/ram/disk space).
It's also only for specific SD-WAN appliances, so it's not necessarily something you can install in, say, a generic VMware environment.
0 Kudos
Scott_Chambers
Participant

Is there any plans for Checkpoint to support a VNF deployment on something like Cisco ENCS  platforms?   

Ref: https://www.cisco.com/c/en/us/products/routers/5000-series-enterprise-network-compute-system/index.h...

Silver Peak is one of the supported VNF providers (ReF: https://www.silver-peak.com/documentation/silverpeak-edgeconnect-cisco-encs)  and would allow for similar design has what VMWARE is doing with their SD-WAN product and Checkpoint integration.  

Palo Alto and Fortinet are also 2 other NGFW VNF providers for this platform and it would be awesome if Checkpoint support is in the near future 😉

 

 

 

0 Kudos
PhoneBoy
Admin
Admin
I assume we are looking at integrating with other vendors as well.
If you have a specific requirement for this, I recommend engaging with your local Check Point office.
0 Kudos
Itay_Sharim
Employee
Employee

Hi,

 

CloudGuard Edge is a VM environment that is installed on top of an SD-WAN appliance such as the 520V and 840 that are currently supported. Regarding the minimum requirement - the VNF itself minimum requirements are 1 vCPU, 1GB Ram and 1GB Disk. However, the VNF on the 520V and 840 specifically is installed statically is non-configurable. 

Upcoming Events

    CheckMates Events