## Cloudguard Implementation without a Public loadbalancer / public IP's Hi all, Where can i find information about a Cloud Guard Implementation without a public loadbalancer or without a loadbalancer without Public IP's. Situation (See the screenshot) -2x Check Point Applicance ClusterXL (On-Premise) with a connection to Azure by ExpressRoute -1x Check Point Management (On-Premise) -Microsoft Azure Environment with multiple VNET's. The Azure environment is only accessible by the ExpressRoute connection. I want to use the Check Point Cloud Guard between VNET's and the ExpressRoute within Azure without a Internet Connection or the use of Public IP's. So traffic from On-Premise must go to the FrontEnd Loadbalancer -Check Point CloudGuard -> BackEnd Loadbalancers -> Different kind of azure virtual machines and vice versa. When we create a CloudGuard Network Security environment within Azure, we choose not to use "Use Public IP Prefix", but it still does. How can we achieve this, or is this even possible? Labels - Labels: - [loadbalancer](https://community.checkpoint.com/t5/forums/filteredbylabelpage/board-id/CloudNetworkSecurityforum-board/label-name/loadbalancer) - [public](https://community.checkpoint.com/t5/forums/filteredbylabelpage/board-id/CloudNetworkSecurityforum-board/label-name/public) 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/143366?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/1112/thread-id/1112&t:cp=kudos/contributions/tapletcontributionspage&ticket=r1f3gP5ZIIzs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143366) - [All forum topics](https://community.checkpoint.com/t5/Cloud-Firewall/bd-p/CloudNetworkSecurityforum-board/page/78 "Cloud Firewall") - [Previous Topic](https://community.checkpoint.com/t5/Cloud-Firewall/EKS-Best-Practice-for-Secure-Network-Architecture-Deep-Dive/td-p/143591 "EKS Best Practice for Secure Network Architecture - Deep Dive TechTalk") - [Next Topic](https://community.checkpoint.com/t5/Cloud-Firewall/Gaia-portal-first-time-login-permission-denied/td-p/143178 "Gaia portal first time login - permission denied") 1 Solution Accepted Solutions [Nir\_Shamir](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/1792) Employee ‎2022-03-0910:52 PM [Show option menu](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143366# "Show option menu") - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=1113) - [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143397/highlight/true#M1113) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/1113/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/143397) [Jump to solution](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143397#M1113) Hi, I have done this several times. this is what you need to do: 1) you can't use the Frontend LB because it only has Public IPs. you can even delete it if you don't need to use it. 2) All your UDRs need to go to the Internal LB private IP and on the CloudGuard GWs make sure the default route in changed to the Azure Router on eth1 subnet. This way all the traffic goes in and out from the same interface of the Check Point GWs (eth1) . This way you have like a Firewall on a stick. you can also detach the Public IPs from the CloudGuard GWs interface eth0 . the only thing you can't remove is the Public IP on the Cluster's VIP. [View solution in original post](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143397#M1113) [1\\ \\ \\ Kudo](https://community.checkpoint.com/t5/kudos/messagepage/board-id/CloudNetworkSecurityforum-board/message-id/1113/tab/all-users "Click here to see who gave kudos to this post.") [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/143397?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/1112/thread-id/1112&t:cp=kudos/contributions/tapletcontributionspage&ticket=r1f3gP5ZIIzs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143366) 2 Replies [Nir\_Shamir](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/1792) Employee ‎2022-03-0910:52 PM [Jump to solution](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143397#M1113) Hi, I have done this several times. this is what you need to do: 1) you can't use the Frontend LB because it only has Public IPs. you can even delete it if you don't need to use it. 2) All your UDRs need to go to the Internal LB private IP and on the CloudGuard GWs make sure the default route in changed to the Azure Router on eth1 subnet. This way all the traffic goes in and out from the same interface of the Check Point GWs (eth1) . This way you have like a Firewall on a stick. you can also detach the Public IPs from the CloudGuard GWs interface eth0 . the only thing you can't remove is the Public IP on the Cluster's VIP. 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143366) [RayP](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/36329) Contributor ‎2022-03-1102:37 PM - Mark as New - Bookmark - Subscribe - Mute - [Subscribe to RSS Feed](https://community.checkpoint.com/rss/message?board.id=CloudNetworkSecurityforum-board&message.id=1114) - [Permalink](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143557/highlight/true#M1114) - [Print](https://community.checkpoint.com/t5/forums/forumtopicprintpage/board-id/CloudNetworkSecurityforum-board/message-id/1114/print-single-message/true/page/1) - [Report Inappropriate Content](https://community.checkpoint.com/t5/notifications/notifymoderatorpage/message-uid/143557) [In response to Nir\_Shamir](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143397/highlight/true#M1113) [Jump to solution](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143397#M1113) Thnx for the information Nir\_Shamir, that helped us.👍 0 Kudos [Click here to give kudos to this post.](https://community.checkpoint.com/t5/forums/v5/forumtopicpage.kudosbuttonv2.kudoentity:kudoentity/kudosable-gid/143557?t:ac=board-id/CloudNetworkSecurityforum-board/message-id/1112/thread-id/1112&t:cp=kudos/contributions/tapletcontributionspage&ticket=r1f3gP5ZIIzs_-1 "Click here to give kudos to this post.") 1 2 3 4 5 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 [Reply](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143366) Post Reply Leaderboard Epsum factorial non deposit quid pro quo hic escorol. | User | Count | | --- | --- | |
[WiliRGasparetto](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/96099) | 13 | |
[Jeff\_Engel](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/1390) | 1 | |
[jorgeluiznim](https://community.checkpoint.com/t5/user/viewprofilepage/user-id/85528) | 1 | [View All ≫](https://community.checkpoint.com/t5/forums/kudosleaderboardpage/board-id/CloudNetworkSecurityforum-board/timerange/one_month/page/1/tab/authors) Trending Discussions [Part 1 How CloudGuard Controller R82.10 Builds Dynamic Security Context](https://community.checkpoint.com/t5/Cloud-Firewall/Part-1-How-CloudGuard-Controller-R82-10-Builds-Dynamic-Security/td-p/279800) [Identity Distribution, TTL, Monitoring, and Operations in CloudGuard Controller R82.10](https://community.checkpoint.com/t5/Cloud-Firewall/Identity-Distribution-TTL-Monitoring-and-Operations-in/td-p/279918) [Known R82.10 Limitations That Affect Architecture The current R82.10 documentation lists limitati](https://community.checkpoint.com/t5/Cloud-Firewall/Known-R82-10-Limitations-That-Affect-Architecture-The-current/td-p/279934) Upcoming Events Sort by: - [All](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143366#) - [Virtual](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143366#) - [In-Person](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143366#) [Virtual](https://community.checkpoint.com/labels/Virtual) Tue 28 Jul 2026 @ 11:00 AM (EDT) [Under the Hood - Check Point and Illumio – Modern Network Defense Against AI-Based Threats](https://community.checkpoint.com/t5/CheckMates-Events/Under-the-Hood-Check-Point-and-Illumio-Modern-Network-Defense/ev-p/279701) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 12:00 PM (SGT) [The AI Security Report 2026: A Turning Point for Enterprise Defense - SGT](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280019) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 02:00 PM (IDT) [The AI Security Report 2026: A Turning Point for Enterprise Defense - AMER](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280021) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 03:00 PM (CEST) [The AI Security Report 2026: A Turning Point for Enterprise Defense EMEA](https://community.checkpoint.com/t5/CheckMates-Events/The-AI-Security-Report-2026-A-Turning-Point-for-Enterprise/ev-p/280020) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 11:00 AM (EDT) [TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370) Thu 30 Jul 2026 @ 11:30 AM (CDT) [CheckMates Live DFW: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/CheckMates-Live-DFW-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279920) [Virtual](https://community.checkpoint.com/labels/Virtual) Tue 28 Jul 2026 @ 11:00 AM (EDT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 12:00 PM (SGT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 02:00 PM (IDT) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 03:00 PM (CEST) [Virtual](https://community.checkpoint.com/labels/Virtual) Wed 29 Jul 2026 @ 11:00 AM (EDT) [TechTalk: On-Premise SD-WAN Management](https://community.checkpoint.com/t5/CheckMates-Events/TechTalk-On-Premise-SD-WAN-Management/ev-p/279370) [Virtual](https://community.checkpoint.com/labels/Virtual) Thu 30 Jul 2026 @ 10:00 AM (PDT) [AI Security Masters E12: READY OR NOT: Securing the AI Enterprise 4/5 - AI Gateway](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Masters-E12-READY-OR-NOT-Securing-the-AI-Enterprise/ev-p/277411) [In-Person](https://community.checkpoint.com/labels/In-Person) Tue 11 Aug 2026 @ 11:30 AM (EDT) [New York City: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/New-York-City-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279476) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 13 Aug 2026 @ 11:30 AM (EDT) [Waltham, MA: Agentic AI Security Deep Dive & Hands-On](https://community.checkpoint.com/t5/CheckMates-Events/Waltham-MA-Agentic-AI-Security-Deep-Dive-amp-Hands-On/ev-p/279475) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 20 Aug 2026 @ 08:30 AM (COT) [Medellin: Workspace Evolution: Hybrid Mesh Management - Visibilidad, Automatización e IA](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Evolution-Hybrid-Mesh-Management-Visibilidad/ev-p/280003) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 20 Aug 2026 @ 06:00 PM (COT) [Medellin: Workspace Intelligence: IA Generativa en Acción para Equipos de Seguridad](https://community.checkpoint.com/t5/CheckMates-Events/Medellin-Workspace-Intelligence-IA-Generativa-en-Acci%C3%B3n-para/ev-p/280004) [In-Person](https://community.checkpoint.com/labels/In-Person) Thu 27 Aug 2026 @ 09:00 AM (CEST) [Check Point Hands-On SASE and Cloud Workshop - Zurich](https://community.checkpoint.com/t5/CheckMates-Events/Check-Point-Hands-On-SASE-and-Cloud-Workshop-Zurich/ev-p/279914) [In-Person](https://community.checkpoint.com/labels/In-Person) Wed 21 Oct 2026 @ 09:00 AM (BST) [AI Security Workshop - Glasgow](https://community.checkpoint.com/t5/CheckMates-Events/AI-Security-Workshop-Glasgow/ev-p/278505) [CheckMates Events](https://community.checkpoint.com/t5/CheckMates-Events/eb-p/events) [Top](https://community.checkpoint.com/t5/Cloud-Firewall/Cloudguard-Implementation-without-a-Public-loadbalancer-public/m-p/143366) About CheckMates - [Getting Started & FAQ](https://community.checkpoint.com/t5/help/faqpage) - [Community Guidelines](https://community.checkpoint.com/t5/user/TermsOfServicePage) Learn Check Point - [Check Point for Beginners](https://community.checkpoint.com/t5/Check-Point-for-Beginners-2-0/bg-p/check-point-for-beginners-2-0) - [Check Point Trivia](https://community.checkpoint.com/t5/Check-Point-Trivia/bg-p/trivia) - [CheckFlix Videos](https://community.checkpoint.com/t5/CheckFlix/ct-p/checkflix) Advanced Learning - [Check Point Security Masters](https://community.checkpoint.com/t5/Check-Point-Security-Masters/gp-p/ccsm) - [Tip of the Week](https://community.checkpoint.com/t5/SecureKnowledge-Tip-of-the-Week/bg-p/secureknowledge) - [TechTalks](https://community.checkpoint.com/t5/TechTalks/ct-p/techtalks%20role=) - [Training and Certification](https://community.checkpoint.com/t5/Training-and-Certification/bd-p/training-and-certification) Resources - [CheckMates Toolbox](https://community.checkpoint.com/t5/CheckMates-Toolbox/ct-p/CheckMatesToolbox) - [Developers (Code Hub)](https://community.checkpoint.com/t5/Developers-API-CLI/bd-p/codehub) - [Product Announcements](https://community.checkpoint.com/t5/Product-Announcements/bg-p/products-blog) - [Upcoming Events](https://community.checkpoint.com/t5/Upcoming-Events/bg-p/checkmates-live) Non-English Discussions - [Español](https://community.checkpoint.com/t5/Espa%C3%B1ol/bd-p/spanish) - [French](https://community.checkpoint.com/t5/Fran%C3%A7ais/bd-p/francais) - [Japanese](https://community.checkpoint.com/t5/Japanese-%E6%97%A5%E6%9C%AC%E8%AA%9E/bd-p/Japanese) - [Português](https://community.checkpoint.com/t5/Portugu%C3%AAs/bd-p/portuguese) - [Russian](https://community.checkpoint.com/t5/Russian/bd-p/russian) - [Chinese](https://community.checkpoint.com/t5/Chinese/bd-p/taiwan) YOU DESERVE THE BEST SECURITY We’re Social. Follow Us [CheckMates on LinkedIn](http://linkedin.com/company/cpcheckmates) [Check Point on YouTube](https://www.youtube.com/user/CPGlobal) [CheckMates on Facebook](https://www.facebook.com/cpcheckmates/) [CheckMates on Instagram](https://www.instagram.com/cpcheckmates/) ©1994-2026 Check Point Software Technologies Ltd. All rights reserved. [Copyright](https://www.checkpoint.com/copyright/) [Privacy Policy](https://www.checkpoint.com/privacy/) [About Us](https://www.checkpoint.com/about-us/) [UserCenter](https://usercenter.checkpoint.com/) Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.