{"id":38726,"date":"2019-10-31T22:25:31","date_gmt":"2019-10-31T19:25:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/1-check-point-maestro-hyperscale-network-security-novaya-masshtabiruemaya-security-platforma\/"},"modified":"2019-10-31T22:25:31","modified_gmt":"2019-10-31T19:25:31","slug":"1-check-point-maestro-hyperscale-network-security-novaya-masshtabiruemaya-security-platforma","status":"publish","type":"post","link":"https:\/\/prohoster.info\/no\/blog\/administrirovanie\/1-check-point-maestro-hyperscale-network-security-novaya-masshtabiruemaya-security-platforma","title":{"rendered":"1. Check Point Maestro Hyperscale Network Security - en ny skalerbar sikkerhetsplattform","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"1.
\n
\nSelskapet Check Point startet 2019 med en rekke kunngj\u00f8ringer. \u00c5 dekke alt i \u00e9n artikkel er ikke mulig, s\u00e5 vi begynner med det viktigste \u2014 Check Point Maestro Hyperscale Network Security<\/a><\/noindex><\/b>. Maestro er en ny skalerbar plattform som lar deg \u00f8ke \"kraften\" til sikkerhetsporten til \"ufine\" tall og praktisk talt line\u00e6rt. Dette oppn\u00e5s naturlig ved \u00e5 balansere belastningen mellom de enkelte portalene som fungerer i et klynge, som en enhet. Noen kan si \u2014 «Det har v\u00e6rt! B\u00e5de blade-plattformene 44000\/64000 er allerede tilgjengelige<\/i>«. Men Maestro er noe helt annet. I denne artikkelen vil jeg kort pr\u00f8ve \u00e5 forklare hva det er, hvordan det fungerer, og hvordan denne teknologien vil hjelpe. redusere kostnadene ved \u00e5 beskytte nettverksperimeteren.<\/b>.<\/a><\/noindex><\/p>\n

F\u00f8r \u2014 N\u00e5<\/h3>\n

\nDet enkleste m\u00e5ten \u00e5 forst\u00e5 hvordan den nye skalerbare plattformen adskiller seg fra de gamle gode 44000\/64000, er \u00e5 se p\u00e5 bildet nedenfor:<\/p>\n

\"1.
\n
\nForskjellen er \u00e5penbar.<\/p>\n

Den gamle platformen Check Point 44000\/64000<\/h3>\n

\nSom det fremg\u00e5r av bildet ovenfor, representerer det f\u00f8rste alternativet en fast plattform (chassis) som kan ta et begrenset antall spesielle \"blade-moduler\" (Check Point SGM<\/b>). Alt dette er koblet til Security Switch Module<\/b> (SSM), som utf\u00f8rer trafikkbalansering mellom portene. P\u00e5 bildet nedenfor er komponentene i denne plattformen illustrert mer detaljert:<\/p>\n

\"1.
\n
\nDette er en utmerket plattform hvis du vet n\u00f8yaktig hvilken ytelse du trenger n\u00e5, og innen hvilke rammer den kan vokse. Men p\u00e5 grunn av den faste formfaktoren (12 eller 6 blader) er du begrenset i fremtidig skalering. I tillegg m\u00e5 du bruke utelukkende SGM-blader, uten mulighet for \u00e5 koble til vanlige oppstr\u00f8msenheter som har et mye bredere utvalg. Med introduksjonen av Maestro Hyperscale Network Security<\/b> endres situasjonen dramatisk.<\/p>\n

Den nye plattformen Check Point Maestro Hyperscale Network Security<\/h3>\n

\nCheck Point Maestro ble f\u00f8rst presentert 22. januar p\u00e5 CPX-konferansen i Bangkok. De viktigste egenskapene kan sees p\u00e5 bildet nedenfor:<\/p>\n

\"1.
\n
\nSom kan merkja, er a\u00f0alfr\u00ed\u00f0indi Check Point Maestro a\u00f0 \u00fea\u00f0 er m\u00f6gulegt a\u00f0 nota venjuleg gateway (appliance) til a\u00f0 jafna \u00e1lagi\u00f0. \u00dea\u00f0 \u00fe\u00fd\u00f0ir a\u00f0 vi\u00f0 erum ekki lengur takm\u00f6rku\u00f0 vi\u00f0 SGM bla\u00f0. Vi\u00f0 getum dreift \u00e1laginu milli hva\u00f0a t\u00e6ki sem er, byrjandi fr\u00e1 5600 l\u00edkaninu (SMB l\u00edkanin og chassi 44000\/64000 eru ekki studd). \u00c1 myndinni a\u00f0 ofan eru helstu v\u00edsit\u00f6lur sem h\u00e6gt er a\u00f0 n\u00e1 me\u00f0 n\u00fdju platformi. Vi\u00f0 getum sameina\u00f0 \u00ed einn \u00fatreikningarau\u00f0lind. allt a\u00f0 31! gateway.<\/b>N\u00fa getur \u201eeldveggurinn\u201c \u00feinn liti\u00f0 \u00fat eins og h\u00e9r segir:<\/p>\n

\"1.
\n<\/p>\n

Maestro Hyperscale Orchestrator<\/h3>\n

\n\u00c9g er viss um a\u00f0 margir hafa \u00feegar spurt sig: \"Hva\u00f0 er \u00feetta Orchestrator?<\/i>\" J\u00e6ja, kynni\u00f0 ykkur \u00feetta. Maestro Hyperscale Orchestrator<\/b> \u2014 \u00feetta er t\u00e6ki\u00f0 sem s\u00e9r um a\u00f0 jafna \u00e1lagi\u00f0. \u00c1 \u00feessum t\u00e6ki er sett a\u00f0ger\u00f0akerfi\u00f0 Gaia R80.20 SP<\/b>. \u00cd augnablikinu eru til tv\u00f6 l\u00edkan Orchestrators \u2014 MHO-140<\/b> og MHO-170.<\/b>S\u00e9rfr\u00e6\u00f0in \u00e1 myndinni a\u00f0 ne\u00f0an:<\/p>\n

\"1.
\n
\nA\u00f0an vi\u00f0 fyrstu s\u00fdn g\u00e6ti \u00feetta virka\u00f0 eins og venjulegur rofi. En \u00ed raun er \u00feetta \u201erofi + jafna \u00e1lag + au\u00f0lindast\u00fdringarkerfi\u201c. Allt \u00ed einni kassa.
\n\u00deessar Orchestrators eru tengdar gateway. Ef jafnar \u00e1lagi\u00f0 er \u00ed \u00e1rei\u00f0anlegu \u00fatf\u00e6ri, \u00fe\u00e1 er hver gateway tengd vi\u00f0 hvert Orchestrator. Notast m\u00e1 vi\u00f0 \u201elj\u00f3s\u201c (sfp+ \/ qsfp+ \/ qsfp28+) e\u00f0a DAC kapall (Direct Attach Copper) fyrir tengingu. \u00deau \u00feurfa einnig a\u00f0 vera tengd \u00e1 milli Orchestrators me\u00f0 samstillingartengingu:<\/p>\n

\"1.
\n
\n\u00c1 myndinni a\u00f0 ne\u00f0an m\u00e1 sj\u00e1 hvernig portum \u00feessara Orchestrators er dreift:<\/p>\n

\"1.
\n<\/p>\n

Sikkerhetsgrupper<\/h3>\n

\nTil \u00feess a\u00f0 \u00e1laginu s\u00e9 h\u00e6gt a\u00f0 dreifa milli gateway, ver\u00f0a \u00feessar gateway a\u00f0 vera \u00ed einni Security Group. Sikkerhetsgruppe<\/b> \u00feetta er r\u00f6kfr\u00e6\u00f0ileg h\u00f3pur t\u00e6ki sem virkar eins og active\/active klasi. \u00deessi h\u00f3pur starfar \u00f3h\u00e1\u00f0 \u00f6\u00f0rum Security Group. Fr\u00e1 sj\u00f3narh\u00f3li stj\u00f3rnanda l\u00edtur Security Group \u00fat eins og eitt t\u00e6ki me\u00f0 einum IP-t\u00f6lu.
\nEf \u00fe\u00f6rf krefur getum vi\u00f0 dregi\u00f0 einn e\u00f0a fleiri gateway \u00ed s\u00e9r Security Group og nota\u00f0 \u00fe\u00e1 h\u00f3p fyrir a\u00f0rar \u00fe\u00f6rfur, eins og a\u00f0skildan eldvegg fr\u00e1 stj\u00f3rnunarhli\u00f0. D\u00e6mi um notkun er s\u00fdnt \u00e1 myndinni h\u00e9r a\u00f0 ne\u00f0an:<\/p>\n

\"1.
\n
\nMikilv\u00e6g takm\u00f6rkun<\/b>, i en Security Group kan det kun anvendes ensartede gateways (model). Det vil sige, hvis du vil skalere kraften af din sikkerhedsgateway (som er et cluster af flere enheder), skal du tilf\u00f8je pr\u00e6cis de samme gateways. Denne begr\u00e6nsning skal forsvinde i de kommende softwareudgivelser.<\/p>\n

I videoen nedenfor kan du se processen til oprettelse af en Security Group. Proceduren er intuitiv.<\/p>\n

\"1.
\n
\nHvis vi sammenligner komponenterne i Maestro med chassisplatformen, f\u00e5r vi cirka f\u00f8lgende billede 'f\u00f8r-efter':<\/p>\n

\"1.
\n<\/p>\n

Hvad er fordelene ved den nye platform?<\/h3>\n

\nDer er faktisk mange fordele, b\u00e5de teknisk og \u00f8konomisk. Jeg vil kort skitsere de vigtigste:<\/p>\n

    \n
  1. Vi er stort set ubegr\u00e6nsede i skalering. Op til 31 gateways inden for \u00e9n Security Group.<\/li>\n
  2. Vi kan tilf\u00f8je gateways efter behov. Det minimale setup ved k\u00f8b er en orkestrator + to gateways. Der er ikke behov for at tage h\u00f8jde for 'skaleringsmodeller'.<\/li>\n
  3. Fra det tidligere punkt f\u00f8lger en anden fordel. Vi beh\u00f8ver ikke l\u00e6ngere at udskifte gateways, der ikke l\u00e6ngere kan h\u00e5ndtere belastningen. Tidligere blev dette problem l\u00f8st med en trade-in-procedure \u2014 vi afleverede det gamle 'udstyr' og fik nyt med rabat. Denne model medf\u00f8rte uundg\u00e5elige finansielle 'tab'. Den nye skaleringsprocedure eliminerer denne faktor. Der er ikke noget, der skal indleveres, og man kan bare forts\u00e6tte med at \u00f8ge ydeevnen ved hj\u00e6lp af ekstra 'hardware'.<\/li>\n
  4. Muligheden for at kombinere eksisterende ressourcer til belastningsfordeling. For eksempel kan man 'tr\u00e6kke' alle sine klynger over p\u00e5 Maestro-platformen og oprette flere Security Groups alt afh\u00e6ngigt af belastningen.<\/li>\n<\/ol>\n

    <\/p>\n

    Maestro Hyperscale Network Security bundles<\/h3>\n

    \nI \u00f8jeblikket er der flere muligheder for at k\u00f8be de s\u00e5kaldte bundles med Maestro-platformen. L\u00f8sningen er baseret p\u00e5 gateways 23800, 6800 og 6500:<\/p>\n

    \"1.
    \n
    \nHer kan du v\u00e6lge mellem to standard konfigurationstyper:<\/p>\n

      \n
    1. En orkestrator og to gateways;<\/li>\n
    2. En orkestrator og tre gateways.<\/li>\n<\/ol>\n

      \nHer <\/a><\/noindex>Du kan se omtrentlige priser. Der kan naturligvis till\u00e6gges endnu en orkestrator og et ubegribelig antal gateways. Yderligere information om specifikationer kan anmodes om. her<\/a><\/noindex>.
      \nEnheter 6500<\/b> og 6800<\/b> Dette er de nyeste modeller, som ogs\u00e5 blev pr\u00e6senteret i begyndelsen af dette \u00e5r. Men om dem vil vi tale mere detaljeret i den n\u00e6ste artikel.<\/p>\n

      Hvorn\u00e5r kan de k\u00f8bes?<\/h3>\n

      \nDet finnes ikke noe entydig svar. For \u00f8yeblikket er det ingen varsler om innf\u00f8rsel av disse l\u00f8sningene til v\u00e5rt land. S\u00e5 snart vi f\u00e5r informasjon om tidspunktene, vil vi umiddelbart kunngj\u00f8re dette i v\u00e5re sosiale medier (vk<\/a><\/noindex>, Telegram<\/a><\/noindex>, facebook<\/a><\/noindex>). I tillegg planlegges det et webinar i n\u00e6r fremtid, dedikert til Check Point Maestro-l\u00f8sningen, der alle tekniske detaljer vil bli gjennomg\u00e5tt. Og selvf\u00f8lgelig vil det v\u00e6re mulig \u00e5 stille interessante sp\u00f8rsm\u00e5l. F\u00f8lg med p\u00e5 oppdateringene!<\/p>\n

      Konklusjon<\/h3>\n

      \nUten tvil er den nye plattformen Maestro Hyperscale Network Security<\/a><\/noindex> et glimrende tillegg til Check Points maskinvarel\u00f8sninger. Faktisk \u00e5pner dette produktet et nytt segment der ikke alle IKT-leverand\u00f8rer har lignende l\u00f8sninger. Dessuten har Check Point Maestro i dag n\u00e6rmest ingen alternativer n\u00e5r det gjelder \u00e5 tilby en s\u00e5 utenomjordisk \u00absikkerhetskraft\u00bb. Men Maestro Hyperscale Network Security vil v\u00e6re interessant ikke bare for datasentereiere, men ogs\u00e5 for vanlige selskaper. De som eier eller vurderer \u00e5 kj\u00f8pe enheter fra modell 5600 og oppover, kan allerede begynne \u00e5 \u00abse\u00bb p\u00e5 Maestro. I enkelte tilfeller kan bruken av Maestro Hyperscale Network Security vise seg \u00e5 v\u00e6re en sv\u00e6rt l\u00f8nnsom l\u00f8sning, b\u00e5de \u00f8konomisk og teknisk.<\/p>\n

      P.S. Artikkelen er utarbeidet med bidrag fra Anatolij Masover<\/b> \u2014 Ekspert p\u00e5 skalerbare plattformer, Check Point Software Technologies.
      \n
      Kilde:       habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

      \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Check Point \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0440\u0435\u0437\u0432\u043e \u043d\u0430\u0447\u0430\u043b\u0430 2019 \u0433\u043e\u0434 \u0441\u0434\u0435\u043b\u0430\u0432 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0430\u043d\u043e\u043d\u0441\u043e\u0432. \u0420\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043e\u0431\u043e \u0432\u0441\u0435\u043c \u0432 \u043e\u0434\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u0447\u043d\u0435\u043c \u0441 \u0441\u0430\u043c\u043e\u0433\u043e \u0433\u043b\u0430\u0432\u043d\u043e\u0433\u043e \u2014 Check Point Maestro Hyperscale Network Security. Maestro \u044d\u0442\u043e \u043d\u043e\u0432\u0430\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0440\u0430\u0449\u0438\u0432\u0430\u0442\u044c \u00ab\u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044c\u00bb \u0448\u043b\u044e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043e \u00ab\u043d\u0435\u043f\u0440\u0438\u043b\u0438\u0447\u043d\u044b\u0445\u00bb \u0446\u0438\u0444\u0440 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043b\u0438\u043d\u0435\u0439\u043d\u043e. \u0414\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0442\u043e \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0437\u0430 \u0441\u0447\u0435\u0442 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29050,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38726","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd471. Check Point Maestro Hyperscale Network Security \u2014 ny skalerbar sikkerhetsplattform | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/no\/blog\/administrirovanie\/1-check-point-maestro-hyperscale-network-security-novaya-masshtabiruemaya-security-platforma","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nn_NO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd471. Check Point Maestro Hyperscale Network Security \u2014 \u043d\u043e\u0432\u0430\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0438\u0440\u0443\u0435\u043c\u0430\u044f security \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 | ProHoster","og:url":"https:\/\/prohoster.info\/no\/blog\/administrirovanie\/1-check-point-maestro-hyperscale-network-security-novaya-masshtabiruemaya-security-platforma","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:25:31+00:00","article:modified_time":"2019-10-31T19:25:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38726","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:11:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:59:39","updated":"2026-01-23 23:11:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/38726","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/comments?post=38726"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/38726\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media\/29050"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media?parent=38726"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/categories?post=38726"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/tags?post=38726"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}