Tsis ntev los no, Check Point nthuav tawm lub platform tshiab uas tuaj yeem hloov tau . Peb twb tau luam tawm tag nrho tsab xov xwm txog . Nyob rau hauv luv luv, nws tso cai rau koj mus yuav luag linearly nce kev ua tau zoo ntawm lub rooj vag kev ruaj ntseg los ntawm combining ntau yam pab kiag li lawm thiab ntsuas lub load ntawm lawv. Kuj ceeb tias, tseem muaj cov lus dab neeg hais tias lub platform scalable no tsuas yog tsim rau cov chaw zov me nyuam loj lossis cov tes hauj lwm loj. Qhov no tsis muaj tseeb kiag li.
Check Point Maestro tau tsim rau ntau pawg ntawm cov neeg siv ib zaug (peb yuav saib lawv me ntsis tom qab), suav nrog cov lag luam nruab nrab. Hauv cov lus luv luv no kuv yuav sim xav txog technical thiab economic zoo ntawm Check Point Maestro rau cov koom haum nruab nrab (los ntawm 500 cov neeg siv) thiab vim li cas qhov kev xaiv no yuav zoo dua li cov pawg classic.
Tshawb xyuas Point Maestro cov neeg tuaj saib
Ua ntej, cia saib cov neeg siv ntu uas Check Point Maestro tau tsim los rau. Tsuas muaj 4 ntawm lawv:
1. Cov tuam txhab uas tsis muaj peev xwm chassis. Check Point Maestro tsis yog Check Point thawj lub platform uas muaj peev xwm. Peb twb tau sau tseg tias yav dhau los muaj cov qauv zoo li 64000 thiab 44000. Txawm hais tias lawv muaj kev ua tau zoo, tseem muaj cov tuam txhab uas qhov no tsis txaus. Maestro tshem tawm qhov teeb meem no, vim tias ... tso cai rau koj los sib sau ua ke txog 31 cov khoom siv rau hauv ib pawg ua haujlwm siab. Nyob rau tib lub sijhawm, koj tuaj yeem sib sau ua ke los ntawm cov khoom siv sab saum toj (23900, 26000), yog li ua tiav cov txiaj ntsig loj.
Qhov tseeb, hauv thaj tsam ntawm kev ruaj ntseg rooj vag, Check Point tam sim no tsuas yog ib qho uas siv cov peev txheej zoo li no.
2. Cov tuam txhab uas xav tuaj yeem xaiv lawv cov khoom siv kho vajtse. Ib qho ntawm qhov tsis zoo ntawm cov laus scalable platforms yog qhov yuav tsum tau siv nruj me ntsis txhais "hniav modules" (Check Point SGM). Tus tshiab Check Point Maestro platform tso cai rau koj siv ntau yam khoom siv sib txawv. Koj tuaj yeem xaiv ob qho qauv ntawm ntu nruab nrab (5600, 5800, 5900, 6500, 6800) thiab los ntawm ntu High End (15000 series, 23000 series, 26000 series). Ntxiv mus, koj tuaj yeem ua ke lawv, nyob ntawm cov haujlwm.
Qhov no yooj yim heev los ntawm qhov pom ntawm kev siv cov peev txheej zoo. Koj tuaj yeem yuav tsuas yog qhov kev ua tau zoo uas koj xav tau los ntawm kev xaiv tus qauv zoo.
3. Cov tuam txhab uas lub chassis ntau dhau, tab sis tseem xav tau scalability. Lwm qhov "tsis zoo" ntawm cov qub scalable platforms (64000, 44000) yog qhov pib nkag siab (los ntawm kev pom kev lag luam). Tau ntev, cov platforms scalable tsuas yog muaj rau cov lag luam loj nrog "zoo" IT pob nyiaj siv. Nrog rau qhov tshwm sim ntawm Check Point Maestro, txhua yam tau hloov pauv. Tus nqi ntawm cov pob khoom tsawg kawg nkaus (tus kws qhia ntawv + ob lub rooj vag) yog qhov sib piv (thiab qee zaum qis dua) nrog cov khoom siv classic / standby pawg. Cov. qhov pib nkag tau poob qis heev. Thaum xaiv ib qho kev daws teeb meem, lub tuam txhab tuaj yeem tso ib qho kev tsim kho kom zoo nkauj tam sim ntawd, tsis tas them nyiaj ntau dua rau qhov kev xav tau ntxiv tom ntej. Puas muaj ntau tus neeg siv ib xyoos tom qab kev taw qhia ntawm Check Point Maestro? Koj tsuas yog ntxiv ib lossis ob lub rooj vag, tsis muaj kev hloov ntawm cov uas twb muaj lawm. Koj tsis tas yuav hloov lub topology. Tsuas txuas cov rooj vag tshiab mus rau tus kws qhia suab paj nruag thiab siv qhov chaw rau lawv hauv ob peb clicks xwb.
4. Cov tuam txhab uas xav ua kom pom kev siv cov khoom siv uas twb muaj lawm. Kuv xav tias muaj coob tus neeg paub txog tus txheej txheem Trade-In. Thaum qhov kev ua tau zoo ntawm cov khoom siv uas twb muaj lawm tsis txaus thiab kho vajtse yuav tsum tau hloov kho kom tau raws li qhov xav tau tam sim no. Heev tus txheej txheem kim. Ntxiv rau, feem ntau muaj qhov xwm txheej thaum tus neeg siv khoom muaj ob peb pawg Check Point rau cov haujlwm sib txawv. Piv txwv li, pawg rau kev tiv thaiv ib puag ncig, pawg rau cov chaw taws teeb nkag (RA VPN), pawg rau VSX, thiab lwm yam. Tsis tas li ntawd, ib pawg yuav tsis muaj peev txheej txaus, thaum lwm tus muaj ntau ntawm lawv. Kos Maestro yog lub sijhawm zoo los txhim kho kev siv cov peev txheej no los ntawm kev faib cov khoom nruab nrab ntawm lawv.
Cov. koj tau txais cov txiaj ntsig hauv qab no:
- Tsis tas yuav "tawm" cov khoom siv uas twb muaj lawm. Koj tuaj yeem yuav ib lossis ob lub qhov rooj ntxiv, lossis ...
- Configure dynamic load ntsuas nruab nrab ntawm lwm lub rooj vag uas twb muaj lawm rau kev pom zoo siv cov peev txheej. Yog hais tias lub load ntawm lub perimeter rooj vag nce sharply, ces tus orchestrator yuav siv tau cov "dhuav" cov kev pab cuam ntawm cov chaw taws teeb nkag rooj vag thiab vice versa. Qhov no pab ua kom lub caij nyoog (lossis ib ntus) load peaks.
Raws li koj tau nkag siab, ob ntu kawg cuam tshuam tshwj xeeb rau cov lag luam nruab nrab, uas tam sim no tseem tuaj yeem siv cov kev ruaj ntseg platforms scalable. Txawm li cas los xij, cov lus nug tsim nyog yuav tshwm sim: "Vim li cas Check Point Maestro zoo dua li cov pawg li niaj zaus?βPeb yuav sim teb cov lus nug no.
Classic pawg vs Check Point Maestro
Yog hais tias peb tham txog cov classic Check Point pawg, ces ob hom kev khiav hauj lwm tau txais kev txhawb nqa: High Availability (piv txwv li Active/Standby) thiab Load Sharing (ie Active/Active). Peb yuav piav qhia luv luv txog lawv lub ntsiab lus ntawm kev ua haujlwm, nrog rau lawv qhov zoo thiab qhov tsis zoo.
Muaj Muaj (Active/Standby)
Raws li lub npe qhia, nyob rau hauv hom kev khiav hauj lwm no, ib qho ntawm tag nrho cov tsheb khiav los ntawm nws tus kheej, thiab qhov thib ob yog nyob rau hauv standby hom thiab khaws cov tsheb khiav yog tias lub active node pib muaj teeb meem.
Tshaj:
- Hom ruaj khov tshaj plaws;
- Lub tswv yim SecureXL tau txais kev txhawb nqa kom ua kom cov tsheb khiav ceev;
- Yog hais tias lub active node tsis ua hauj lwm, qhov thib ob yog guaranteed yuav tau "qhuav" tag nrho cov tsheb (vim nws yog ib yam nkaus).
Txais:
Qhov tseeb, tsuas muaj ib qho kev rho tawm - ib qho ntawm qhov tsis ua haujlwm kiag li. Nyob rau hauv tas li ntawd, vim hais tias ntawm no, peb raug yuam mus yuav ntau haib hardware kom nws thiaj li tswj tau lub tsheb ib leeg.
Tau kawg, HA hom yog qhov txhim khu kev qha ntau dua li Load Sib Koom, tab sis kev ua kom zoo tshaj plaws tawm ntau yam uas xav tau.
Load sib koom (Active / Active)
Hauv hom no, tag nrho cov nodes hauv pawg txheej txheem kev khiav tsheb. Koj tuaj yeem ua ke txog li 8 lub cuab yeej rau hauv pawg xws li (ntau dua 4 ).
Tshaj:
- Koj tuaj yeem faib cov khoom nruab nrab ntawm cov nodes, uas yuav tsum muaj cov cuab yeej muaj zog tsawg;
- Muaj peev xwm ua kom du scaling (ntxiv txog li 8 nodes rau pawg).
Txais:
- Oddly txaus, cov pros tam sim ntawd tig mus rau hauv cons. Lawv nyiam siv Load Sharing hom txawm tias lub tuam txhab tsuas muaj ob lub nodes xwb. Xav kom txuag tau nyiaj, lawv yuav cov khoom siv, txhua qhov yog thauj khoom ntawm 40-50%. Thiab txhua yam zoo li zoo. Tab sis yog tias ib qho tsis ua haujlwm, peb tau txais qhov xwm txheej uas tag nrho cov khoom xa mus rau qhov seem, uas tsuas yog tsis tuaj yeem tiv taus. Yog li ntawd, tsis muaj kev zam txim rau qhov zoo li hauv cov tswv yim zoo li no.
- Ntxiv rau qhov no ib pawg ntawm Load Sharing txwv (). Thiab qhov kev txwv tseem ceeb tshaj plaws yog tias SecureXL tsis tau txais kev txhawb nqa, lub tshuab ua kom nrawm nrawm ntawm kev ua haujlwm tsheb;
- Raws li kev ntsuas los ntawm kev ntxiv cov nodes tshiab rau pawg, hmoov tsis Load Sharing yog deb ntawm qhov zoo tagnrho ntawm no. Yog tias ntau tshaj 4 cov khoom siv ntxiv rau hauv pawg, ces kev ua haujlwm pib .
Xav txog thawj ob qhov tsis zoo, txhawm rau ua qhov kev ua txhaum cai thaum siv ob lub nodes, peb kuj raug yuam kom yuav cov khoom tsim tau ntau dua kom nws tuaj yeem " zom" tsheb hauv qhov xwm txheej tseem ceeb. Yog li ntawd, peb tsis muaj txiaj ntsig kev lag luam, tab sis peb tau txais nyiaj ntau . Ntxiv mus, nws yog tsim nyog sau cia tias pib ntawm version R80.20, Load Sharing hom tsis txaus siab. Qhov no txwv cov neeg siv los ntawm qhov yuav tsum tau hloov tshiab. Nws tseem tsis tau paub tias Load Sharing yuav tau txais kev txhawb nqa hauv kev tshaj tawm tshiab.
Check Point Maestro ua lwm txoj
Los ntawm qhov pom ntawm pawg, Check Point Maestro coj qhov zoo ntawm Kev Muaj Peev Xwm Loj thiab Load Sharing hom:
- Cov rooj vag txuas nrog lub orchestrator tuaj yeem siv SecureXL, uas ua kom cov tsheb khiav ceev tshaj plaws. Tsis muaj lwm yam kev txwv nyob rau hauv Load Sharing;
- Tsheb thauj mus los tau faib nruab nrab ntawm cov rooj vag hauv ib Pawg Kev Ruaj Ntseg (lub rooj sib tham qhov rooj uas muaj ntau lub cev). Ua tsaug rau qhov no, peb tuaj yeem txhim kho cov khoom tsim tau tsawg dua, vim tias peb tsis muaj lub rooj vag tsis ua haujlwm ntxiv lawm, xws li nyob rau hauv High Availability hom. Nyob rau tib lub sijhawm, lub zog tuaj yeem nce yuav luag linearly, yam tsis muaj kev poob loj xws li hauv Load Sharing hom (ntau cov ntsiab lus tom qab).
Qhov no yog txhua yam zoo, tab sis cia saib ob qho piv txwv tshwj xeeb.
Piv txwv # 1
Cia lub tuam txhab X npaj siab yuav nruab ib pawg ntawm cov rooj vag ntawm lub network perimeter. Lawv twb tau paub txog tag nrho cov kev txwv ntawm Load Sharing (uas yog tsis tsim nyog rau lawv) thiab tab tom txiav txim siab rau High Availability hom tshwj xeeb. Tom qab sizing, nws hloov tawm hais tias 6800 lub rooj vag yog haum rau lawv, uas yuav tsum tsis txhob yuav loaded los ntawm ntau tshaj 50% (kom muaj tsawg kawg yog ib co kev ua tau zoo cia). Txij li thaum qhov no yuav yog pawg, koj yuav tsum tau yuav ib lub cuab yeej thib ob, uas tsuas yog "pas luam yeeb" cua hauv hom standby. Nws yog ib tug smokehouse kim heev.
Tab sis muaj lwm txoj kev. Siv ib pob khoom los ntawm tus kws ntaus suab paj nruag thiab peb 6500 lub rooj vag. Nyob rau hauv rooj plaub no, cov tsheb khiav yuav raug faib tawm ntawm tag nrho peb cov khoom siv. Yog tias koj saib ntawm qhov tshwj xeeb ntawm ob tus qauv, koj yuav pom tias peb 6500 lub rooj vag muaj zog ntau dua li 6800.
Yog li, thaum xaiv Check Point Maestro, tuam txhab X tau txais txiaj ntsig hauv qab no:
- Lub tuam txhab tam sim ntawd nteg ib tug scalable platform. Kev nce qib hauv kev ua tau zoo tom qab yuav nqis los tsuas yog ntxiv lwm 6500 daim khoom kho vajtse. Yuav ua li cas yooj yim dua?
- Txoj kev daws yog tseem txhaum-tolerant, vim Yog tias ib qho ntawm qhov tsis ua haujlwm, qhov seem ob yuav tuaj yeem tiv nrog lub nra.
- Ib qho tseem ceeb sib npaug thiab xav tsis thoob qhov zoo yog tias nws pheej yig dua! Hmoov tsis zoo, Kuv tsis tuaj yeem tshaj tawm tus nqi rau pej xeem, tab sis yog tias koj txaus siab, koj tuaj yeem ua tau
Piv txwv # 2
Cia lub tuam txhab Y twb muaj HA pawg ntawm 6500 qauv. Lub active node yog loaded ntawm 85%, uas thaum lub sij hawm ncov loads ua rau poob nyob rau hauv tsim khoom. Txoj kev daws teeb meem rau qhov teeb meem zoo li yuav hloov kho kho vajtse. Tus qauv tom ntej yog 6800. Qhov ntawd yog. lub tuam txhab yuav tsum tau xa rov qab lub rooj vag los ntawm Trade-In program thiab yuav ob qho khoom siv tshiab (nqi dua).
Tab sis muaj lwm txoj kev xaiv. Yuav ib tug orchestrator thiab lwm yam raws nraim tib lub node (6500). Sib sau ua ke ntawm peb lub cuab yeej thiab "kis" qhov no 85% ntawm kev thauj khoom hla peb lub rooj vag. Raws li qhov tshwm sim, koj yuav tau txais qhov kev ua haujlwm loj heev (peb lub cuab yeej yuav thauj khoom ntawm qhov nruab nrab tsuas yog 30%). Txawm hais tias ib qho ntawm peb cov nodes tuag, qhov seem ob tseem yuav tiv thaiv kev tsheb nrog qhov nruab nrab ntawm 45%. Ntxiv mus, rau lub ncov loads, ib pawg ntawm peb lub active 6500 lub rooj vag yuav muaj zog tshaj ib lub rooj vag 6800, uas nyob rau hauv HA pawg (piv txwv li active / standby). Tsis tas li ntawd, yog tias nyob rau hauv ib xyoos lossis ob lub tuam txhab Y cov kev xav tau nce ntxiv, ces txhua yam lawv yuav tsum tau ua yog ntxiv ib lossis ob qho ntxiv 6500 nodes. Kuv xav tias cov txiaj ntsig kev lag luam ntawm no yog qhov pom tseeb.
xaus
Yog lawm, Check Point Maestro tsis yog kev daws teeb meem rau SMB. Tab sis txawm tias ib lub lag luam me me tuaj yeem xav txog lub platform no thiab tsawg kawg yog sim ntsuas qhov kev ua haujlwm ntawm kev lag luam. Koj yuav xav tsis thoob thaum pom tias cov platforms scalable tuaj yeem muaj txiaj ntsig ntau dua li cov pawg classic. Nyob rau tib lub sij hawm, muaj qhov zoo tsis tsuas yog kev lag luam, tab sis kuj yog technical. Txawm li cas los xij, peb yuav tham txog lawv nyob rau hauv tsab xov xwm tom ntej, qhov twg, ntxiv rau cov txuj ci dag, kuv yuav sim qhia ntau qhov xwm txheej (topology, scenarios).
Koj tseem tuaj yeem sau npe rau peb cov nplooj ntawv pej xeem (, , , ), qhov twg koj tuaj yeem ua raws li qhov tshwm sim ntawm cov ntaub ntawv tshiab ntawm Check Point thiab lwm yam khoom siv kev ruaj ntseg.
Tau qhov twg los: www.hab.com