Configuring Azure Spoke Subnet Groups

For Azure-based Transit FireNet Gateways that have Spoke Gateways attached, you can use the Azure Spoke Subnet Groups dialog to add Azure Spoke Subnet Groups to these attached Spoke Gateways.

You cannot add Azure Spoke Subnet Groups to a Spoke Gateway that has inspection enabled.

You must remove Azure Spoke Subnet Groups from Azure Transit Gateways before removing FireNet functionality from those gateways.

Adding Azure Spoke Subnet Groups

When you add an Azure Spoke subnet group, selecting the Spoke Gateway automatically synchronizes the Subnet(s) list with the Azure portal so that the list is refreshed with any new subnets for this Spoke Gateway.

  1. On the Security > FireNet > FireNet Gateways tab, click the name of an Azure FireNet Gateway that has at least one Spoke Gateway attached.

  2. Click the Policy tab.

  3. Click Azure Spoke Subnet Groups.

  4. In the Azure Spoke Subnet Groups dialog, you can:

    • Edit or delete an existing subnet group (if editing, you can only add or remove a subnet group; if deleting, you are prompted if you want to delete the subnet group)

    • Add a Subnet Group

  5. If adding a subnet group, click +Azure Spoke Subnet Group.

    400

  6. Enter a name for the Subnet Group.

  7. Select the Spoke Gateway (only Spoke Gateways attached to this Transit FireNet are available). The Subnet(s) list is automatically refreshed with any new subnets for this Spoke Gateway from the Azure portal.

  8. Select the Subnet Group(s).

    400

  9. Click Save. It may take a couple of minutes for the changes to save.

  10. After the changes are saved, click Close to close the Create Azure Spoke Subnet Group dialog.

  11. The new subnet group is displayed on the Azure Spoke Subnet Groups dialog.

Adding Inspection Policy for Spoke Subnet Group

After your new subnet groups are created, you can add them to the inspection policy for this particular Azure Transit FireNet gateway.

  1. Select the Spoke Subnet Group in the Policy list.

  2. Click Add in the Actions list.

    spoke subnet group policy

See Configuring Transit FireNet Inspection Policies for more information.

Removing Spoke Subnet Groups

  1. Disable inspection for the Spoke Subnet Group by selecting the group on the FireNet Gateways > Policy tab and then selecting Remove from the Actions menu.

  2. On the Policy tab, click Azure Spoke Subnet Groups.

  3. In the Azure Spoke Subnet Groups dialog, select the delete icon 25 next to the subnet group.

  4. Click Delete to confirm that you want to delete the subnet group.

  5. When the deletion is complete, click Close to close the dialog.