I-Check Point iqale ngo-2019 ngokukhawuleza ngokwenza izibhengezo ezininzi ngaxeshanye. Akunakwenzeka ukuthetha ngayo yonke into kwinqaku elinye, ngoko ke masiqale ngeyona nto ibalulekileyo- . I-Maestro liqonga elitsha elinokwehla elikuvumela ukuba ukwandise "amandla" wesango lokhuseleko ukuya kumanani "angafanelekanga" kwaye phantse ngokulandelelana. Oku kuphunyezwa ngokwemvelo ngokulungelelanisa umthwalo phakathi kwamasango azimeleyo asebenza kwiqela elinye njengequmrhu elinye. Omnye umntu unokuthi- "Kwakunjalo! Sele kukho amaqonga e-blade angama-44000/64000". Nangona kunjalo, i-Maestro yinto eyahlukileyo ngokupheleleyo. Kule nqaku, ndiza kuzama ngokufutshane ukucacisa ukuba yintoni, isebenza njani kwaye le teknoloji iya kunceda njani gcina kukhuseleko lweperimeter yenethiwekhi.
Ngaba - iye yaba
Eyona ndlela ilula yokuyiqonda kukuba iqonga elitsha elinokwehla lihluke njani kwi-44000 endala./64000 jonga lo mfanekiso ungezantsi:
Umahluko ucacile.
Legacy Check Point 44000 iqonga/64000
Njengoko kunokubonwa kumfanekiso ongentla, inketho yokuqala yiplatifomu emiselweyo (i-chassis), apho inani elilinganiselweyo "iimodyuli ze-blade" ezikhethekileyo zingafakwa (Jonga indawo yeSGM). Konke oku kuqhagamshelwe kuyo Imodyuli yoTshintsho yoKhuseleko (SSM), elinganisa izithuthi phakathi kwamasango. Lo mfanekiso ungezantsi ubonisa amacandelo eli qonga ngokweenkcukacha ezithe vetshe:
Eli liqonga eligqwesileyo ukuba uyazi kakuhle ukuba yeyiphi intsebenzo oyifunayo ngoku kwaye inokukhula kangakanani. Nangona kunjalo, ngenxa yefomu emiselweyo (i-12 okanye ii-blades ezi-6), uthintelwe ekulinganiseni ngakumbi. Ukongeza, unyanzeliswa ukuba usebenzise iiblade zeSGM kuphela, ngaphandle kokukwazi ukudibanisa imilinganiselo eqhelekileyo, enoluhlu olubanzi kakhulu lweemodeli. Ngokufika I-Maestro Hyperscale Network Security imeko itshintsha kakhulu.
I-Check Point entsha ye-Maestro Hyperscale Network Security Platform
I-Check Point Maestro yaqalwa kuqala ngoJanuwari 22 kwinkomfa yeCPX eBangkok. Iimpawu eziphambili zingabonwa kumfanekiso ongezantsi:
Njengoko ubona, inzuzo ephambili yeCheck Point Maestro kukukwazi ukusebenzisa amasango aqhelekileyo (izixhobo zombane) zokulinganisa. Ezo. Asisapheleli kwiincakuba zeSGM. Ungahambisa umthwalo phakathi kwazo naziphi na izixhobo eziqala kwimodeli ye-5600 (iimodeli ze-SMB kunye ne-Chassis 44000/64000 ayixhaswanga). Umfanekiso ongentla ubonisa izikhombisi eziphambili ezinokufezekiswa xa usebenzisa iqonga elitsha. Sinokudibanisa kwisixhobo esinye sekhompyutha ukuya kuthi ga kwi31! isango. Ngoku i-firewall yakho inokujongeka ngolu hlobo:
I-Maestro Hyperscale Orchestrator
Ndiqinisekile ukuba abantu abaninzi sele bebuza: "Loluphi uhlobo lweOkhestra?βKulungile, dibana nam. I-Maestro Hyperscale Orchestrator - yile nto inoxanduva lokulinganisa umthwalo. Inkqubo yokusebenza efakwe kwesi sixhobo Gaia R80.20 SP. Ngoku kukho iimodeli ezimbini zeOkhestra- MHO-140 ΠΈ MHO-170. Iimpawu kulo mfanekiso ungezantsi:
Xa ujonga nje kuqala kunokubonakala ngathi oku kukutshintsha okuqhelekileyo. Ngapha koko, yi "switch + balancer + system management management." Yonke into kwibhokisi enye.
Amasango aqhagamshelwe kwezi Orchestrators. Ukuba i-balancers i-fault-tolerant, ngoko ke isango ngalinye lixhunyiwe kwi-orchestrator nganye. Ukudibanisa, "i-optics" (sfp + / qsfp + / qsfp28 +) okanye intambo ye-DAC (i-Direct Attach Copper) ingasetyenziswa. Kule meko, kufuneka ngokwendalo kubekho ikhonkco longqamaniso phakathi kweeokhestra:
Kulo mfanekiso ungezantsi unokubona ukuba izibuko zaba orchestra zihanjiswa njani:
Amaqela oKhuseleko
Ukuze umthwalo usasazwe phakathi kwamasango, la masango kufuneka abe kwiQela loKhuseleko elifanayo. Iqela loKhuseleko liqela elinengqiqo lezixhobo ezisebenza njengeqela elisebenzayo/elisebenzayo. Eli qela lisebenza ngokuzimeleyo kwamanye amaQela oKhuseleko. Ukusuka kwindawo yokujonga iseva yolawulo, iQela loKhuseleko lijongeka njengesixhobo esinye esinedilesi ye-IP enye.
Ukuba kuyimfuneko, sinokuhambisa isango elinye okanye ngaphezulu kwiQela loKhuseleko elahlukileyo kwaye sisebenzise eli qela ngezinye iinjongo, njengodonga olwahlukileyo lomlilo ukusuka kwindawo yolawulo. Umzekelo wokusetyenziswa uboniswe kumfanekiso ongezantsi:
Umlinganiselo Obalulekileyo, kuphela amasango afanayo (umzekelo) anokusetyenziswa kwiqela elinye loKhuseleko. Ezo. Ukuba ufuna ukukhulisa ngokomgca umthamo wesango lakho lokhuseleko (eliliqela lezixhobo ezininzi), ngoko ke kufuneka udibanise ngokuchanekileyo amasango afanayo. Lo mda kufuneka unyamalale kukukhutshwa kwesoftware elandelayo.
Kwividiyo engezantsi ungabona inkqubo yokwenza iQela loKhuseleko. Inkqubo intuitive.
Kwakhona, ukuba uthelekisa amacandelo e-Maestro kunye neqonga le-chassis, ufumana into efana nomfanekiso olandelayo:
Ziziphi iingenelo zeqonga elitsha?
Kukho iingenelo ezininzi, zombini kwimbono yobugcisa kunye nezoqoqosho. Ndiza kuchaza ngokufutshane ezona zibalulekileyo:
- Ngokwenyani asinamda ekulinganiseni. Ukuya kuthi ga kwi-31 yamasango ngaphakathi kweQela loKhuseleko elinye.
- Sinokongeza amasango njengoko kufuneka. Iseti encinci yokuthenga yi orchestrator enye + iigateways ezimbini. Akukho mfuneko yokubeka iimodeli "zokukhula".
- Enye i-plus ilandela ukusuka kwindawo yangaphambili. Akusekho mfuneko yokuba sitshintshe amasango angakwaziyo ukumelana nomthwalo. Ngaphambili, le ngxaki yasombululwa ngokusebenzisa inkqubo yokurhweba - banikezela nge-hardware endala kwaye bafumana amatsha ngesaphulelo. Ngesikimu esinjalo, "ilahleko" yezemali ayinakuphepheka. Inkqubo entsha yokukala iyawuphelisa lo mba. Awudingi ukunikezela nantoni na, unokuqhubeka nje ukwandisa imveliso ngoncedo lwe-hardware eyongezelelweyo.
- Ukukwazi ukudibanisa izixhobo ezikhoyo ukusabalalisa umthwalo. Ngokomzekelo, unako "ukudonsa" onke amaqoqo akho kwi-platform ye-Maestro kwaye uhlanganise amaQela amaninzi oKhuseleko, kuxhomekeke kumthwalo.
I-Maestro Hyperscale Network Security bundles
Okwangoku, kukho iindlela ezininzi zokuthenga izinto ezibizwa ngokuba zii-bundle ngeqonga le-Maestro. Isisombululo esisekwe kumasango 23800, 6800 kunye ne-6500:
Kule meko, unokukhetha kwiindidi ezimbini eziqhelekileyo zezixhobo:
- Iokhestra enye, namasango amabini;
- Iokhestra enye kunye namasango amathathu.
ungawabona amaxabiso aqikelelweyo. Ngokwemvelo, unokongeza enye iorchestrator kunye namasango amaninzi njengoko uthanda. Ingcaciso eyongezelelweyo kwiinkcukacha zinokucelwa .
Izixhobo 6500 ΠΈ 6800 Ezi ziimodeli zamva nje ezithe zaziswa ekuqaleni kwalo nyaka. Kodwa siza kuthetha ngazo ngokweenkcukacha ngakumbi kwinqaku elilandelayo.
Ndingayithenga nini?
Akukho mpendulo icacileyo apha. Okwangoku, akukho saziso sokungeniswa kwezi zisombululo kwilizwe lethu. Ngokukhawuleza ukuba ulwazi malunga nexesha lufumaneka, siya kwenza isaziso ngokukhawuleza kumaphepha ethu oluntu (, , ). Ukongezelela, i-webinar enikezelwe kwisisombululo se-Check Point Maestro icwangciswe kwikamva elikufutshane, apho zonke iimpawu zobugcisa ziya kuxutyushwa. Kwaye ngokuqinisekileyo unokubuza imibuzo. Hla umamele!
isiphelo
Ngokuqinisekileyo iqonga elitsha lulongezo olugqwesileyo kwizisombululo ze-Hardware ze-Check Point. Enyanisweni, le mveliso ivula icandelo elitsha, apho kungekhona wonke umthengisi wokhuseleko lolwazi unesisombululo esifanayo. Ngaphezu koko, namhlanje i-Check Point Maestro ayinayo enye indlela xa kuziwa ekuboneleleni "amandla okhuseleko" angazange abonwe ngaphambili. Nangona kunjalo, i-Maestro Hyperscale Network Security iya kuba nomdla kungekuphela nje kubanikazi bamaziko edatha, kodwa nakwiinkampani eziqhelekileyo. Abo bangabanini okanye baceba ukuthenga izixhobo eziqala ngemodeli ye-5600 sele sele bejonge ngakumbi kwi-Maestro Kwezinye iimeko, ukusebenzisa i-Maestro Hyperscale Network Security ingaba sisisombululo esinenzuzo kakhulu, zombini kwimbono yezoqoqosho kunye nezobugcisa.
PS Eli nqaku lilungiswe ngokuthatha inxaxheba kwe Anatoly Masover -Ingcaphephe yePlatform eScalable, Jonga iTekhnoloji yeSoftware yePoint.
umthombo: www.habr.com