AWS latest recommended version?

[Danny]

I'm about to deploy a Gateway Load Balancer Security VPC for Transit Gateway in AWS.

• Deployment Guide for R80.40
• AWS CloudFormation Templates - sk111013
• Installing a Jumbo Hotfix Accumulator on CloudGuard for AWS - sk109141
  
• CloudGuard Network Security for AWS Gateway Load Balancer Architecture Options - sk174447

What is the latest recommended major release + JHF for a new deployment?

The latest available AWS CloudFormation Templates are version R80.40 while sk111013 notes at the end that "Check Point Default version widely recommended for all deployment is R81.10 with the latest Jumbo Hotfix Accumulator GA Take."

Also the header of sk111013 notes R81 and R81.10.

Regarding sk109141 there are JHFs available & supported for AWS for version R81, R81.10.

Regarding sk174447 for GWLB (Security VPC + TGW) only R80.40 seems to be supported at the moment.

[Nir_Shamir]

GWLB gateways  are still on R80.40 because they use specific configuration with the GENEVE encapsulation.

The next release will be on R81.20 so till then stick to R80.40 and don't install any new JHF on the gateways.

[Martin_Valenta]

when r81.20 will be on AWS support for GWLB?

[Chris_Atkinson · Accepted solution]

For R81.20 and higher Check Point versions, Gateway Load Balancer (GWLB) and Gateway images are unified. They use the same Product AMI in the AWS Marketplace per sk174447.

[iykeveline]

Hi Chris. Do you know how I can get the latest (R81.20) GWLB AMI from marketplace? 
I currently have the AMI in code for R80.40. I have to update my TF code by inserting the latest AMI. My current checkpoint image ID is ami-046f7eb1e7b7f6854

[Chris_Atkinson]

I believe the steps would be as below but possibly others can confirm:

1. In the AWS console, navigate to AMI section in the EC2 menu.

2. Search for the applicable Gaia version (R81.20 in this example) and look for the required image version (refer sk125252).

3. Copy the AMI ID of the required image

[abihsot__]

R81.20 was in the list for some time already. My impression is that it seems they just skipped R81.10 entirely.

[Bryce_Myers]

We have been using R81.20 for about 4 months without any issues.