Deploying CloudGuard for Cisco ACI

In This Section: Prerequisites Installing the CloudGuard Service Registration Hotfix

Prerequisites

These are the prerequisites for CloudGuard for Cisco ACI.

Component	Software Prerequisite and Required Hotfixes
Security Management Server / Multi-Domain Server	For R80.10 image, see sk111841. For CloudGuard Controller for R80.10, see the R80.10 home page, sk111841.
Virtual and physical Gateway	For R80.10, see the R80.10 home page, sk111841. For R77.30 images and OVFs, see sk104859. For R77.30 latest Jumbo Hotfix, see sk115772, file: Check_Point_R77.30_vSEC_Controller_Enforcer_Hotfix_FULL.tgz  CloudGuard Controller Enforcer is an additional prerequisite component for installation on the R77.30 gateway only. See or Installing the CloudGuard Controller Enforcer Hotfix on R77.30.
Cisco APIC	APIC version 1.2 and higher integrated with Security Management Server. For PBR, use APIC version 2.0 and above.
CloudGuard device package	CloudGuard device package version 1.3.1 and higher installed on Cisco APIC.

Installing the CloudGuard Service Registration Hotfix

The latest build of CPUSE Deployment Agent must be installed before you install any Hotfix. To download and import the latest build, see sk92449.

This Hotfix must be installed on top of the R80.10 Security Management Server.

You can install the Hotfix with CPUSE online or offline.

Offline Installation

To install the Security Management Server Hotfix with CPUSE offline:

1. From the Gaia portal, go to Upgrades > Status and Actions.
2. Select Import Package.

   The Import Package window opens.

3. Click Browse and select the CPUSE package (offline TGZ file or exported TAR file).
4. Click Import.
5. Click Showing Recommended packages. Select All.

   Select the imported package.

6. Click the More button on the toolbar. click Verifier.
7. Select this package and click Install Update.

   The offline installation starts immediately. The Security Management Server reboots automatically when the installation is complete.

Online Installation

To install the Security Management Server Hotfix with CPUSE online:

1. From the Gaia portal, go to Upgrades > Status and Actions.
2. Select the Hotfix package.
3. Click the More button on the toolbar. Click Verifier.
4. Select the Hotfix package and click Install Update.

   The online installation starts immediately. The Security Gateway reboots automatically when the installation is complete.

Uninstalling the Hotfix

To uninstall the Hotfix from a Security Management Server with CPUSE:

1. From the Gaia portal, go to CPUSE > Status and Actions.
2. Select the CloudGuard Controller Hotfix package.
3. Click Uninstall.