1. Yang'anani Point Maestro Hyperscale Network Security - nsanja yatsopano yotetezeka

Check Point idayamba 2019 mwachangu ndikulengeza zingapo nthawi imodzi. Ndizosatheka kuyankhula za chilichonse m'nkhani imodzi, kotero tiyeni tiyambe ndi chinthu chofunikira kwambiri - Onani Point Maestro Hyperscale Network Security. Maestro ndi nsanja yatsopano yowonjezereka yomwe imakupatsani mwayi wowonjezera "mphamvu" yachipata chachitetezo ku manambala "oyipa" komanso pafupifupi mzere. Izi zimatheka mwachibadwa mwa kulinganiza katundu pakati pa zipata zapayekha zomwe zimagwira ntchito mumagulu monga gulu limodzi. Wina akhoza kunena - ".Anali! Pali kale nsanja za 44000/64000". Komabe, Maestro ndi nkhani yosiyana kwambiri. M'nkhaniyi, ndiyesera mwachidule kufotokoza chomwe chiri, momwe chimagwirira ntchito komanso momwe teknolojiyi ingathandizire sungani pachitetezo cha perimeter network.

Was - wakhala

Njira yosavuta kumvetsetsa ndi momwe nsanja yatsopanoyi imasiyanirana ndi 44000 yabwino yakale./64000 yang'anani pa chithunzi pansipa:

Kusiyana kwake ndi koonekeratu.

Legacy Check Point 44000 nsanja/64000

Monga tawonera pa chithunzi pamwambapa, njira yoyamba ndi nsanja yokhazikika (chassis), momwe mungalowetsemo "ma modules" apadera (Onani SGM). Zonsezi zikugwirizana ndi Security Switch Module (SSM), yomwe imayendetsa magalimoto pakati pa zipata. Chithunzi chili pansipa chikuwonetsa zigawo za nsanjayi mwatsatanetsatane:

Iyi ndi nsanja yabwino kwambiri ngati mukudziwa bwino zomwe mukufunikira pano komanso momwe ingakulire. Komabe, chifukwa cha mawonekedwe okhazikika (masamba 12 kapena 6), muli ndi malire pakuwonjezereka. Kuphatikiza apo, mumakakamizika kugwiritsa ntchito masamba a SGM okha, osatha kulumikiza zokhazikika, zomwe zimakhala ndi mitundu yochulukirapo. Ndi kudza Maestro Hyperscale Network Security zinthu zikusintha kwambiri.

New Check Point Maestro Hyperscale Network Security Platform

Check Point Maestro idayambitsidwa koyamba pa Januware 22 pamsonkhano wa CPX ku Bangkok. Makhalidwe akuluakulu akuwonekera pachithunzichi:

Monga mukuwonera, mwayi waukulu wa Check Point Maestro ndikutha kugwiritsa ntchito zipata zokhazikika (zida) kuti zigwirizane. Iwo. Sitikhalanso ndi masamba a SGM okha. Mutha kugawa katundu pakati pa zida zilizonse kuyambira pamitundu ya 5600 (mitundu ya SMB ndi Chassis 44000/64000 sichikuthandizidwa). Chithunzi pamwambapa chikuwonetsa zizindikiro zazikulu zomwe zingatheke pogwiritsira ntchito nsanja yatsopano. Tikhoza kuphatikiza kukhala chida chimodzi cha makompyuta mpaka 31! pachipata. Tsopano firewall yanu ikhoza kuwoneka motere:

Maestro Hyperscale Orchestrator

Ndikutsimikiza kuti anthu ambiri adafunsapo kale kuti: "Kodi Orchestrator iyi ndi yotani?“Chabwino, kukumana nane. Maestro Hyperscale Orchestrator - ichi ndi chinthu chomwe chimayang'anira kusanja katundu. The opaleshoni dongosolo anaika pa chipangizo ndi Gaia R80.20 SP. Pakali pano pali mitundu iwiri ya Orchestrators - MHO-140 и MHO-170. Zomwe zili pachithunzi pansipa:

Poyang'ana koyamba zitha kuwoneka kuti uku ndikusintha wamba. M'malo mwake, ndi "switch + balancer + resource management system." Zonse mu bokosi limodzi.
Zipata zimalumikizidwa ndi Orchestrators awa. Ngati owongolera ali olekerera zolakwika, ndiye kuti chipata chilichonse chimalumikizidwa ndi oimba aliyense. Pakulumikiza, "optics" (sfp+ / qsfp+ / qsfp28+) kapena chingwe cha DAC (Direct Attach Copper) chingagwiritsidwe ntchito. Pankhaniyi, payenera kukhala mwachilengedwe ulalo wolumikizana pakati pa oimba:

Pachithunzi chomwe chili pansipa mutha kuwona momwe madoko a oimba awa amagawidwira:

Magulu Oteteza

Kuti katunduyo agawidwe pakati pa zipata, zipatazi ziyenera kukhala mu Gulu limodzi la Chitetezo. Gulu Lachitetezo ndi gulu lomveka la zida zomwe zimagwira ntchito ngati gulu logwira ntchito. Gululi limagwira ntchito mosadalira Magulu ena achitetezo. Kuchokera pakuwona seva yoyang'anira, Gulu la Chitetezo likuwoneka ngati chipangizo chimodzi chokhala ndi adilesi imodzi ya IP.
Ngati kuli kofunikira, titha kusuntha chipata chimodzi kapena zingapo kupita ku Gulu Lachitetezo lapadera ndikugwiritsa ntchito gululi pazifukwa zina, monga chozimitsa moto chosiyana ndi kawonedwe ka kasamalidwe. Chitsanzo chakugwiritsa ntchito chikuwonetsedwa pachithunzichi:

Kuchepetsa Kofunikira, zipata zofanana zokha (chitsanzo) zingagwiritsidwe ntchito mu Gulu limodzi la Chitetezo. Iwo. ngati mukufuna kukulitsa kuchuluka kwa zipata zanu zachitetezo (omwe ndi gulu la zida zingapo), ndiye kuti muyenera kuwonjezera zipata zomwezo. Kuletsa uku kuyenera kuzimiririka m'mapulogalamu otsatirawa.

Mu kanema pansipa mutha kuwona njira yopangira Gulu la Chitetezo. Ndondomekoyi ndi yodabwitsa.

Apanso, ngati mungafananize zigawo za Maestro ndi nsanja ya chassis, mumapeza chithunzi chotsatirachi:

Kodi phindu la nsanja yatsopano ndi yotani?

Pali zabwino zambiri, zonse kuchokera kuukadaulo komanso zachuma. Ndifotokoza mwachidule zofunika kwambiri:

1. Ndife opanda malire pakukulitsa. Kufikira zipata 31 mkati mwa Gulu limodzi la Chitetezo.
2. Tikhoza kuwonjezera zipata ngati pakufunika. Zochepera zomwe zimagulidwa ndi oimba amodzi + zipata ziwiri. Palibe chifukwa choyika zitsanzo "zakukula".
3. Kuphatikiza kwina kumatsatira kuchokera pa mfundo yapitayi. Sitifunikanso kusintha zipata zomwe sizingathenso kupirira katundu. M'mbuyomu, vutoli lidathetsedwa pogwiritsa ntchito njira yogulitsira - adapereka zida zakale ndikulandila zatsopano pamtengo wotsika. Ndi ndondomeko yotereyi, "kutaya" kwachuma sikungapeweke. Njira yatsopano yopangira makulitsidwe imathetsa izi. Simukusowa kupereka chilichonse, mutha kungopitiliza kukulitsa zokolola mothandizidwa ndi zida zowonjezera.
4. Kutha kuphatikiza zida zomwe zilipo kuti zigawire katunduyo. Mwachitsanzo, mukhoza "kukoka" magulu anu onse pa nsanja ya Maestro ndikusonkhanitsa Magulu angapo a Chitetezo, malingana ndi katundu.

Maestro Hyperscale Network Security bundles

Pakadali pano, pali zosankha zingapo zogulira zomwe zimatchedwa mitolo ndi nsanja ya Maestro. Yankho lochokera pazipata 23800, 6800 ndi 6500:

Pankhaniyi, mutha kusankha mitundu iwiri yazida:

1. Woyimba mmodzi ndi zipata ziwiri;
2. Oimba m'modzi ndi zipata zitatu.

ndi mutha kuwona mitengo yomwe ikuyembekezeredwa. Mwachilengedwe, mutha kuwonjezera woyimba wina ndi zipata zambiri momwe mukufunira. Zowonjezereka pazowunikira zitha kufunsidwa apa.
Zipangizo 6500 и 6800 Izi ndi zitsanzo zaposachedwa zomwe zidayambitsidwanso koyambirira kwa chaka chino. Koma tidzakambirana mwatsatanetsatane m’nkhani yotsatirayi.

Kodi ndingagule liti?

Palibe yankho lomveka bwino apa. Pakadali pano, palibe chidziwitso chokhudza kulowetsedwa kwa mayankhowa m'dziko lathu. Zikangodziwika za nthawiyo, tidzalengeza nthawi yomweyo patsamba lathu la anthu onse (vk, uthengawo, Facebook). Kuphatikiza apo, webinar yoperekedwa ku yankho la Check Point Maestro ikukonzekera posachedwa, pomwe zida zonse zaukadaulo zidzakambidwa. Ndipo ndithudi mukhoza kufunsa mafunso. Dzimvetserani!

Pomaliza

Ndithu nsanja yatsopano Maestro Hyperscale Network Security ndiwowonjezera bwino pamayankho a Hardware a Check Point. M'malo mwake, mankhwalawa amatsegula gawo latsopano, lomwe si onse ogulitsa zidziwitso ali ndi yankho lofanana. Komanso, lero Check Point Maestro ilibe njira zina zopezera "mphamvu zachitetezo" zomwe sizinachitikepo. Komabe, Maestro Hyperscale Network Security idzakhala yosangalatsa osati kwa eni ake a data, komanso makampani wamba. Omwe ali ndi kapena akukonzekera kugula zipangizo zoyamba ndi chitsanzo cha 5600 akhoza kuyang'anitsitsa Maestro Nthawi zina, kugwiritsa ntchito Maestro Hyperscale Network Security kungakhale njira yopindulitsa kwambiri, kuchokera kuzinthu zachuma ndi zamakono.

PS Nkhaniyi inakonzedwa ndi kutengapo mbali kwa Anatoly Masover - Scalable Platform Katswiri, Check Point Software Technologies.

Source: www.habr.com