6. I-platform ye-Check Point Maestro ye-scalable ifikeleleke ngakumbi. IiGango eziNtsha zokuHlola

6. I-platform ye-Check Point Maestro ye-scalable ifikeleleke ngakumbi. IiGango eziNtsha zokuHlola

Sabhala ngaphambili ukuba ngokufika kwe Jonga iPoint Maestro, inqanaba lokungena (kwimali-mali) kwiiplatifomu ezihlanjululwayo liye lancipha kakhulu. Akusekho mfuneko yokuthenga izisombululo ze-chassis. Thatha kanye le nto uyidingayo kwaye wongeze njengoko kufuneka ngaphandle kweendleko ezinkulu zangaphambili (njengoko kunjalo nge-chassis). Kunokwenziwa njani oku? jonga apha. Ixesha elide, kuphela iinyanda ezimbalwa ezifumanekayo kwi-odolo - 6500, 6800 kunye ne-23800. Kwaye ngoku, kulo nyaka, i-Check Point ibonise iimodeli zesango elitsha kunye nemveliso ngakumbi - i-Quantum. Ngenxa yoko, entsha inyanda encinci kunye okhestra (MHO140) kunye namasango amabini (6200 Plus) ixabiso lehle ngaphezu kwesiqingatha! Oku kuvumela iinkampani phantse naziphi na isayizi ukuba zisebenzise izisombululo ezinokunyuka ngaphandle kweendleko ezinyukayo zangaphambili. Makhe sijonge iimodeli ezintsha ngeenkcukacha ezincinci.

Amasebe kunye neeofisi ezincinci (ezingafanelekanga kwi-Maestro)

Iimodeli ezintsha zanikwa amashishini amancinci kunye namasebe - 3600 (ishiti yedatha) kunye 3800 (ishiti yedatha). Nangona le mizekelo ayinakusetyenziselwa ukuxhuma kwi-orchestrator (izixhumanisi ze-10G ziyafuneka), ndicinga ukuba kubalulekile ukuthetha ngazo. Xa kuthelekiswa neemodeli zangaphambili (3100, 3200), imveliso iphindwe kabini, ngelixa ixabiso liye lahlala lingatshintshi. Iimpawu eziphambili zezixhobo ezitsha ziboniswe kumfanekiso ongezantsi:

6. I-platform ye-Check Point Maestro ye-scalable ifikeleleke ngakumbi. IiGango eziNtsha zokuHlola

Amashishini amancinci naphakathi

Kumashishini amancinci naphakathi, iimodeli ezi-4 ezintsha zakhululwa ngaxeshanye: 6200 (ishiti yedatha), 6400 (ishiti yedatha), 6600 (ishiti yedatha) kunye 6700 (ishiti yedatha). Iimpawu eziphambili kumfanekiso ongezantsi:

6. I-platform ye-Check Point Maestro ye-scalable ifikeleleke ngakumbi. IiGango eziNtsha zokuHlola

Zonke iimodeli zingasetyenziselwa ukuqhagamshela kwi-orchestrator. Umzekelo, ukuba usebenzisa i-6200 yesango, unokwandisa "amandla" eqela ukusuka 3.6 Gbit/s (2 iindawo) ukuya kuthi ga 93.6 I-Gbit/s (i-52 nodes) kwimowudi yoThintelo lweNgozi. Kwisango elingu-6600 ezi ziya kuba ngamanani 7.4 ΠΈ 192.4 ngokulandelelanayo. Amanani anzulu.

Ishishini elikhulu

Kumashishini amakhulu, kuye kwavela iimodeli ezimbini ezintsha - 7000 (ishiti yedatha) kunye ne-16200 (ishiti yedatha). Iimpawu zemodeli ye-7000 kumfanekiso ongezantsi:

6. I-platform ye-Check Point Maestro ye-scalable ifikeleleke ngakumbi. IiGango eziNtsha zokuHlola

Unokwandisa amandla eqela ukusuka 19 Gbit/s (2 iindawo) ukuya kuthi ga 494 I-Gbit/s (i-52 nodes) kwimowudi yoThintelo lweNgozi.

Iimpawu zemodeli ye-16200th:

6. I-platform ye-Check Point Maestro ye-scalable ifikeleleke ngakumbi. IiGango eziNtsha zokuHlola

Unokwandisa amandla eqela ukusuka 30 Gbit/s (2 iindawo) ukuya kuthi ga 780 I-Gbit/s (i-52 nodes) kwimowudi yoThintelo lweNgozi.

Izisombululo kumaziko data

Kwaye iimodeli ezinamandla kakhulu kwintsapho, iimodeli zamaziko edatha - 26000 (ishiti yedatha) kunye ne-28000 (ishiti yedatha). Iimpawu eziphambili kumfanekiso ongezantsi:

6. I-platform ye-Check Point Maestro ye-scalable ifikeleleke ngakumbi. IiGango eziNtsha zokuHlola

Kwimodeli ye-26000, unokwandisa amandla eqela ukusuka 48 Gbit/s (2 iindawo) ukuya kuthi ga 1248 I-Gbit/s (i-52 nodes) kwimowudi yoThintelo lweNgozi.
Kwimodeli ye-28000, unokwandisa amandla eqela ukusuka 60 Gbit/s (2 iindawo) ukuya kuthi ga 1560 I-Gbit/s (i-52 nodes) kwimowudi yoThintelo lweNgozi. Ezo. 1.5 Tbit/s!

IWebinar kwiimodeli ezintsha zeCheck Point Quantum

Isithethi - Dmitry Zakharenko (RRC Security)

Endaweni yesiphelo

Ndiqinisekile ukuba abaninzi baya kuba nomdla kwiimodeli ezivela kumgca we-6000. Ngokusekwe kubo, unokuqalisa kwangoko ukwakha iqonga elinokwehla kwi-perimeter yenethiwekhi. Oku kuya kuba nenzuzo ngakumbi kune-classic cluster, zombini ukusuka kwinqanaba lemali kunye nezobugcisa. Siye ngaphambili wabhala ngayo. Ke ngoko, ukuba uceba ukwenza i-firewall okanye ucinga ukuba kunokwenzeka ukuhlaziya, sicebisa kakhulu ukuba ujonge kwi-Check Point Maestro. Ngeqondo eliphezulu lokunokwenzeka kunokuvela ukuba le iya kuba sesona sisombululo silungileyo.

Hlala ubukele uhlaziyo kumajelo ethu (yocingo, Facebook, VK, TS Solution Blog)!

Ngabasebenzisi ababhalisiweyo kuphela abanokuthatha inxaxheba kuphando. Ngena, ndiyacela.

Ngaba ukulungele ukuqwalasela isisombululo se-Maestro esinobungozi endaweni yeqela le-Check Point yeklasi?

  • 57,1%Ewe4

  • 42,9%No3

  • 0,0%Sele usebenzisa0

Bali-7 abasebenzisi abavotileyo. Abasebenzisi abasi-5 abakhange.

umthombo: www.habr.com

Yongeza izimvo