Azure Migrate over Checkpoint Firewall

Question

Hi,
i have a question about Azure Migrate and Checkpoint Firewalls. For Azure, Checkpoint has CP Opjects (Templates) for Azure Services like for example Exchange (CP_MS_Exchange). Behind these Updatable Objects are all needed IP-Ranges for the Service.

object name : CP_MS_Exchange
range 0 : 13.107.6.152 13.107.6.153
range 1 : 13.107.18.10 13.107.18.11
range 2 : 13.107.128.0 13.107.131.255
range 3 : 23.103.160.0 23.103.175.255
range 4 : 40.92.0.0 40.93.255.255
range 5 : 40.96.0.0 40.105.255.255
range 6 : 40.107.0.0 40.107.255.255
range 7 : 52.96.0.0 52.103.255.255
range 8 : 52.238.78.88 52.238.78.88
range 9 : 104.47.0.0 104.47.127.255
range 10 : 131.253.33.215 131.253.33.215
range 11 : 132.245.0.0 132.245.255.255
range 12 : 150.171.32.0 150.171.35.255
range 13 : 204.79.197.215 204.79.197.215

I tryed to map your "Azure IP Ranges and Service Tags" against the list of needed URLs but without luck.
Could you name all services/objects needed for Azure Migrate located in West Europe?

Thank you and kind regards, Michael

Answer 1

anonymous user You can use the IP address range for the West Europe region as listed here: https://www.microsoft.com/en-in/download/details.aspx?id=41653

Even though the file has now been deprecated, you can use the IP range from the file and it should work.

As for IP ranges for specific service tags, we are working on making that available through private endpoint support by end of this year or early next year.

------------------------------------------------------------------------------------------------------------------------------

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.