Azure Public IP Prefix for Cloud Guard VMSS

[Marcel_M]

Hello, we need  the ability to user Public IP Prefixes in Azure on our Cloud Guard VMSS.

It makes it easier for us to maintain our VMSS Clusters with a dedicated Public IP Prefix. So we can whitelist/allow special IP ranges.

I tried to edit the VMSS ARM Template by myself, but I was not successful so far https://github.com/CheckPointSW/CloudGuardIaaS/blob/master/azure/templates/marketplace-vmss/mainTemp...

Anyone else tried this with any success ?

Can Check Point please implement this feature?

BR
Marcel

[Sunny_Leung]

modify the template by replacing the public IP creation section with public IP prefix, VMSS deployment will use IP from the predefined prefix. such as search "publicIpAddressConfiguration" in the template:

"publicIpAddressConfiguration": "[if(equals(parameters('instanceLevelPublicIP'),'yes'), variables('publicIPProperties'), json('null'))]",

replace it by:

"publicIpAddressConfiguration": {
"name": "pubIP",
"properties": {
"idleTimeoutInMinutes": 15,
"PublicIpPrefix": {
"Id": "your resource ID of the public IP prefix"
}
}
},

I not tested it fully, and the the name of public IP object created in IP prefix have the same name for all VMSS instance,  you need to refine the template , such as the public IP name different for each instance, etc.