CloudGuard Controller for Cisco Application Centric Infrastructure (ACI)

CloudGuard Controller Provisions SDDC services as Virtual Data Centers that provide virtualized computer networking, storage, and security. integrates the Cisco ACI Cisco® Application Centric Infrastructure. Comprehensive SDN architecture, policy-based automation solution for increased scalability through a distributed enforcement system with greater network visibility. Trademark of Cisco. fabric with Check Point security.

To learn more, see vSEC for ACI Managed by R80.10 Security Management Server Administration Guide for R80.10.

Prerequisites

• Cisco ACI version 4.2 or lower.

• You must have a Cisco ACI user role with at least read permissions for Tenant EPG.

  Note - This role is sufficient for CloudGuard Controller functionality.

  More permissions may be required for device package installation (CloudGuard for ACI).

• Enable Bridge Domain unicast routing to allow IP address learning for EPGs on the Cisco ACI.

• Define a subnet on the Bridge Domain to help the fabric maintain IP address learning tables.

  This prevents time-outs on silent hosts that respond to periodic ARP requests.

• Before you upgrade the Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server., if you have a Cisco APIC Cisco® Application Policy Infrastructure Controller. Automation and management point for the Cisco ACI fabric. It centralizes access to fabric information, optimizes the application lifecycle for scale and performance, and supports flexible application provisioning across physical and virtual resources. server, keep only one URL. After the upgrade, add the other URLs.

Connecting to a Cisco ACI Data Center Server

Step	Instructions
1	In SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on., create a new Data Center Virtual centralized repository, or a group of physical networked hosts, Virtual Machines, and datastores. They are collected in a group for secured remote storage, management, and distribution of data. object in one of these ways: In the top left corner, click the Objects menu > More object types > Server > Data Center > New Cisco ACI. In the top right corner, click Objects Pane > New > More > Server > Data Center > Cisco ACI.
2	In the Enter Object Name field, enter the applicable name.
3	In the URLs field, enter the addresses of Cisco ACI Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Members. Multiple URLs allows support for APIC cluster for redundancy. Important - These addresses can be either HTTP or HTTPS, but not both.
4	In the Username field, enter your Cisco APIC server User ID. When using Login Domains, use this syntax: apic:<domain>\<username>
5	In the Password field, enter the Cisco APIC server password.
6	Click Test Connection.
7	Click OK.
8	Publish the SmartConsole session.
9	Install the Access Control Policy on the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. object.