1. Tarisa Point Maestro Hyperscale Network Security - itsva scalable security platform

Check Point yakatanga 2019 nekukurumidza nekuita zviziviso zvakati wandei kamwechete. Hazvibviri kutaura nezve zvese muchinyorwa chimwe, saka ngatitangei nechinhu chakakosha - Tarisa Point Maestro Hyperscale Network Security. Maestro ipuratifomu nyowani inokonzeresa iyo inokutendera iwe kuti uwedzere "simba" rekuchengetedza gedhi kune "zvisina kunaka" nhamba uye dzinenge mutsara. Izvi zvinogoneka zvakajairika nekudzikamisa mutoro pakati pemasuwo ega ega anoshanda musumbu sechinhu chimwe chete. Mumwe munhu angati - "Was! Patova ne44000 blade mapuratifomu/64000". Zvisinei, Maestro inyaya yakasiyana zvachose. Muchikamu chino, ndichaedza muchidimbu kutsanangura kuti chii, kuti chinoshanda sei uye kuti teknolojia iyi ichabatsira sei chengetedza pane network perimeter kuchengetedza.

Yakanga - Yakave

Nzira iri nyore yekunzwisisa ndeyekuti iyo itsva scalable platform inosiyana sei kubva kune yakanaka yekare 44000./64000 inotarisa pamufananidzo uri pazasi:

Musiyano uri pachena.

Legacy Check Point 44000 chikuva/64000

Sezvinoonekwa kubva pamufananidzo uri pamusoro, sarudzo yekutanga ipuratifomu yakagadziriswa (chassis), umo inogona kuiswa nhamba shoma yeakakosha "blade modules".Tarisa Point SGM) Zvose izvi zvakabatanidzwa Security Switch Module (SSM), iyo inoyera traffic pakati pemagedhi. Mufananidzo uri pazasi unoratidza zvikamu zvepuratifomu iyi zvakadzama:

Iyi ipuratifomu yakanaka kana iwe uchiziva chaizvo kuita kwaunoda izvozvi uye kuti inogona kukura sei. Nekudaro, nekuda kweiyo yakagadziriswa fomu chinhu (12 kana 6 blades), iwe unogumira mune imwe scalability. Mukuwedzera, iwe unomanikidzwa kushandisa chete SGM blades, pasina kukwanisa kubatanidza yakajairwa uplines, iyo ine yakawanda yakawanda yakawanda yemhando. Nekuuya Maestro Hyperscale Network Security mamiriro ezvinhu ari kuchinja zvikuru.

New Check Point Maestro Hyperscale Network Security Platform

Check Point Maestro yakatanga kuunzwa muna Ndira 22 pamusangano weCPX muBangkok. Hunhu hukuru hunoonekwa mumufananidzo uri pazasi:

Sezvauri kuona, mukana mukuru weCheck Point Maestro kugona kushandisa magedhi enguva dzose (midziyo) yekuenzanisa. Avo. Isu hatisisiri kuganhurirwa kune maSGM blades. Unogona kugovera mutoro pakati pezvishandiso zvese kutanga kubva ku5600 modhi (SMB modhi uye Chassis 44000/64000 haina kutsigirwa). Mufananidzo uri pamusoro unoratidza zviratidzo zvikuru zvinogona kuwanikwa kana uchishandisa chikuva chitsva. Tinogona kusanganisa mune imwe komputa sosi kusvika ku31! gateway. Zvino firewall yako inogona kutaridzika seizvi:

Maestro Hyperscale Orchestrator

Ndine chokwadi chekuti vanhu vazhinji vakatobvunza kuti: "Imhandoi yeOrchestrator iyi?“Zvakanaka, tisangane. Maestro Hyperscale Orchestrator - chinhu ichi ndicho chine basa rekuenzanisa mitoro. Iyo yekushandisa system yakaiswa pamudziyo uyu ndeye Gaia R80.20 SP. Parizvino kune mhando mbiri dzeOrchestrators - MHO-140 и MHO-170. Zvimiro mumufananidzo pazasi:

Pakutanga kuona zvingaita sekuti iyi ishanduko yakajairwa. Muchokwadi, i "switch + balancer + resource management system." Zvese mubhokisi rimwe.
Magedhi akabatanidzwa kune aya Orchestrators. Kana zvienzaniso zvisingakwanisi kukanganisa, ipapo gedhi rega rega rinobatanidzwa kune imwe neimwe orchestrator. Nekubatanidza, "optics" (sfp+ / qsfp+ / qsfp28+) kana DAC tambo (Direct Attach Copper) inogona kushandiswa. Muchiitiko ichi, panofanira kunge paine chinongedzo chekuyananisa pakati pevaimbi:

Mumufananidzo uri pazasi unogona kuona kuti zviteshi zveiyi orchestrators zvinogoverwa sei:

Mapoka Ekuchengetedza

Kuti mutoro ugovaniswe pakati pemagedhi, magedhi aya anofanira kunge ari muboka rimwe chete reSecurity. Security Boka iboka rine musoro rezvishandiso zvinoshanda sechikwata chinoshanda/chinoshanda. Boka iri rinoshanda rakazvimiririra kubva kune mamwe maSecurity Groups. Kubva pakuona kwesevha yekutarisira, Boka Rokuchengetedza rinotaridzika semudziyo mumwe une IP kero.
Kana zvichidikanwa, tinogona kufambisa gedhi rimwe kana akawanda kupinda muBoka rakasiyana Chekuchengetedza uye toshandisa boka iri kune zvimwe zvinangwa, senge firewall yakaparadzana kubva kune manejimendi maonero. Muenzaniso wekushandiswa unoratidzwa mumufananidzo uri pasi apa:

Kuganhurirwa Kwakakosha, chete magedhi akafanana (modhiyo) anogona kushandiswa mune rimwe Chengetedzo Boka. Avo. kana iwe uchida mutsara kukura kugona kwegedhi rako rekuchengetedza (rinove sumbu rezvishandiso zvakati wandei), saka iwe unofanirwa kuwedzera iwo chaiwo masuwo. Izvi zvinogumira zvinofanirwa kunyangarika mune inotevera software inoburitswa.

Muvhidhiyo iri pazasi iwe unogona kuona maitiro ekugadzira Security Boka. Nzira yacho intuitive.

Zvekare, kana iwe uchienzanisa iyo Maestro zvikamu nechassis chikuva, iwe unowana chimwe chinhu senge unotevera mufananidzo:

Ndezvipi zvinobatsira zvepuratifomu itsva?

Iko kune chaizvo akawanda mabhenefiti, ese kubva kune tekinoroji uye ehupfumi maonero. Ini ndichatsanangura muchidimbu izvo zvakanyanya kukosha:

1. Isu hatina muganhu mukuyera. Kusvikira ku31 magedhi mukati meimwe Security Group.
2. Tinogona kuwedzera magedhi sezvinodiwa. Iyo shoma yakatarwa yekutenga ndeye orchestrator imwe + maviri magedhi. Hapana chikonzero chekuisa pasi mienzaniso "yekukura".
3. Imwe yekuwedzera inotevera kubva pane yapfuura poindi. Hatichadi kushandura magedhi asingachakwanisi kubata nemutoro. Pakutanga, dambudziko iri rakagadziriswa vachishandisa nzira yekutengeserana - vakapa hardware yekare uye vakagamuchira zvitsva pamutengo. Nechirongwa chakadaro, "kurasikirwa" kwemari hakudzivisiki. Iyo nyowani yekuyera maitiro inobvisa chinhu ichi. Iwe haufanire kupa chero chinhu, iwe unogona kungoenderera mberi nekuwedzera kugadzirwa nerubatsiro rwekuwedzera hardware.
4. Iko kukwanisa kusanganisa zviwanikwa zviripo kugovera mutoro. Semuenzaniso, unogona "kudhonza" masumbu ako ese paMaestro chikuva uye kuunganidza akati wandei Chengetedzo Mapoka, zvichienderana nemutoro.

Maestro Hyperscale Network Security masumbu

Parizvino, pane akati wandei sarudzo dzekutenga anonzi mabundle neMaestro papuratifomu. Mhinduro yakavakirwa pamasuwo 23800, 6800 uye 6500:

Muchiitiko ichi, unogona kusarudza kubva kune maviri akajairwa marudzi emidziyo:

1. Muimbi mumwe chete namasuwo maviri;
2. Imwe orchestrator nemasuwo matatu.

zviri unogona kuona mitengo inofungidzirwa. Nomuzvarirwo, iwe unogona kuwedzera imwe orchestrator uye akawanda magedhi sezvaunoda. Ruzivo rwakawedzerwa pane zvakatemwa runogona kukumbirwa pano.
Zvishandiso 6500 и 6800 Aya ndiwo mamodheru achangoburwa akaunzwawo kutanga kwegore rino. Asi tichataura nezvavo zvakadzama munyaya inotevera.

Ndingaitenga rinhi?

Hapana mhinduro yakajeka pano. Parizvino, hapana chiziviso chekupinzwa kwemhinduro idzi munyika yedu. Kana ruzivo rwenguva rwave kuwanikwa, isu tinobva taita chiziviso mumapeji edu eruzhinji (vk, teregiramu, Facebook) Uye zvakare, webinar yakatsaurirwa kuCheck Point Maestro mhinduro inorongwa munguva pfupi iri kutevera, apo ese ehunyanzvi maficha achakurukurwa. Uye zvechokwadi unogona kubvunza mibvunzo. Ramba wakatarisa!

mhedziso

Chokwadi chikuva chitsva Maestro Hyperscale Network Security ndeye yakanakisa yekuwedzera kune Check Point hardware mhinduro. Muchokwadi, chigadzirwa ichi chinovhura chikamu chitsva, icho chisiri chese chekuchengetedza ruzivo mutengesi ane mhinduro yakafanana. Uyezve, nhasi Check Point Maestro haina dzimwe nzira kana zvasvika pakupa "simba rekuchengetedza" risati ramboitika. Nekudaro, Maestro Hyperscale Network Security ichave yekufarira kwete chete kune varidzi ve data data, asiwo kumakambani akajairwa. Vaya varidzi kana vari kuronga kutenga zvigadzirwa kutanga nemuenzaniso we5600 vanogona kutonyatsotarisa Maestro Mune zvimwe zviitiko, kushandisa Maestro Hyperscale Network Security inogona kuva mhinduro inobatsira zvikuru, zvose kubva mune zvehupfumi uye zvehutano maonero.

PS Chinyorwa ichi chakagadzirwa nekubatanidzwa kwe Anatoly Masover - Scalable Platform Nyanzvi, Tarisa Point Software Technologies.

Source: www.habr.com