Troubleshooting of CloudGuard Network for Azure VMSS

See the Azure portal to check the health probe logs and make sure that the CloudGuard Security Gateways respond to health probes.

Note - The health probes arrive from a special IP address 168.63.129.16. See the Microsoft blog post on 'What is the IP address'.

Changing Existing VMSS Tags

Each VMSS deploys with a set of tags that are key-value pairs and represent a specific configuration for the automated management of the VMSS.

These tags you can change in the Azure portal:

  • x-chkp-anti-spoofing

  • x-chkp-ip-address

    Note - This is only applicable if the VMSS instances have public IP addresses assigned.

  • x-chkp-management

  • x-chkp-management-interface

  • x-chkp-srcImageUri

  • x-chkp-template

  • x-chkp-topology

Important - A change you make to a tag in Azure does not reflect automatically in the SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. for the existing CloudGuard Security Gateways. We strongly recommend to document the accurate tag details to prevent discrepancies caused by typo errors.

To change the existing tag:

  1. Go to the Azure Portal.

  2. Search for the VMSS resource group.

  3. Open the VMSS resource.

  4. In the left navigation pane, click Tags.

  5. In the opened window, edit the tags as needed.

  6. Click Save to apply the changes.