Maestro Hyperscale Orchestrator 140 | 175

Overview

Maestro Hyperscale is designed to simplify small, medium and large-scale security deployments with a modern firewall clustering architecture that spans both on-premises and cloud environments, creating a true hybrid datacenter fabric. By orchestrating multiple Quantum firewalls as one unified system, Maestro delivers:

Seamless Scale & Growth:

• N+1 clustering powered by Check Point HyperSync lets you add or retire firewalls without downtime, growing capacity on demand.

Cloud-Level Agility On-Premises:

• Elastic traffic distribution across all nodes ensures consistent performance under any load.

Unified Management & Policy:

• A single pane-of-glass for configuration, monitoring, and reporting across your entire security cluster.

Flexibility for Any Environment:

• Support for multi-site and hybrid cloud deployments, so you can collocate workloads wherever it makes sense — public cloud, private cloud, or traditional datacenter — without changing policies or tools.

With Maestro, organizations of any size gain simplicity, flexibility, and growth potential of cloud-native security — delivered on premises with enterprise-grade resilience and control. The Maestro hyperscale network security solution orchestrates multiple Quantum firewalls as one unified system with a new clustering architecture that offers simplicity and hybrid datacenter flexibility at growth. Bring scale, agility, and elasticity of the cloud on premises with efficient N+1 clustering based on Check Point HyperSync technology.

Cost-Efficient Resiliency:

• Leverage hyperscale efficiency to maximize hardware utilization and lower total cost of ownership, while maintaining N+1 uptime guarantees.

Example: Maestro System with Dual MHO 175 Orchestrators

Orchestration Layer 2 x MHO 175

• Cloud-Level Resiliency
• Telco-Grade Technology
• Linear Scalability
• Operational Supremacy
• Hyperscale Security

Maestro Strengths

Compute Layer Firewalls / Security Gateways

Technical Resources

• Guide to Hyperscale Networking
• Tech Point Central Video Series

Flexible Scalability with MHO 140 or MHO 175

Top end of Hyperscale range is achieved by stacking multiple Security Gateways in a Maestro system.

• Single Appliance Threat Prevention Throughput
• True multi-tenancy: Isolate and enforce zero trust seamlessly.

Firewall Appliance Model & Threat Prevention Throughput

• Elastic Performance: 60 Gbps to 1,400 Gbps threat prevention without disruption. No gaps during traffic spikes.
• Always-On: 99.999% uptime, no single point of failure.

Key Maestro Benefits

Maestro Hyperscale Orchestrator 140 & 175 Default Port Mappings

The Hyperscale Orchestrator 140 is a mid-range model with 48x 10/25 GbE ports and a total fabric capacity of 2 Tbps. The Hyperscale Orchestrator 175 is a high-end model with 32x 40/100 GbE ports and a total fabric capacity of 3.2 Tbps.

• For full redundancy, deploy two Orchestrators of the same model together. Security Group members connect to the Orchestrator via Direct Attached Copper (DAC) cables, either 10, 25, 40 or 100 GbE depending upon the gateway and Orchestrator models deployed.
• The Orchestrator's 300-nanosecond port-to-port latency delivers predictable wire speed performance with no packet loss for any packet size.

Appliance Specifications

Spotlight on Management

Security Groups

With Maestro, you can dynamically allocate or deallocate compute resources within and between Security Groups to meet your needs. Security Groups are logical groups of appliances providing active/active cluster functionality segregated from other Security Groups.

• Each Security Group has dedicated internal and external interfaces and may have a different configuration set and policy.

Single Management Object (SMO)

Externally a Security Group is seen as one security gateway or VSX gateway object in the Check Point security management GUI client, SmartConsole. A single IP address per Security Group for management communications and policy installation simplifies Security Group management. All configurations, e.g., interfaces or IP addresses and routes are mirrored on gateways in the Security Group.

• Prior to becoming an online member and actively handling traffic, each new member of the Security Group synchronizes its image, software configuration, and security policy with the SMO of the Security Group.

Latest Orchestrator OS Features

Quantum Firewall Software release R82 has implemented significant changes in the Orchestrator's software features. Starting with the initial deployment, the Orchestrator's setup is managed by the First Time Wizard, where all environment and site parameters can be set.

• A vastly improved WebUI allows easy and intuitive interactive port mapping to simplify identification of ports and their roles and status.

Hyperscale Security System

With Maestro, you can start with two gateways and then grow to up to 28 gateways across 8 security groups, in a single site, each managing their own separate networks with their own rules and policies.

• For example, when you start with 88 Gbps using two Quantum Force 19200 gateways you can finish with a 1012 Gbps security solution that supports over 713 million concurrent connections.

Intelligent Load Sharing & Operational Efficiency

Simplified operations with improved user interface, features and tools. When we add a gateway to the system, it gets all the configurations, the policy, even the software version, updated and aligned with the existing deployment, ready to go within 6 minutes.

Maestro Traffic Distribution

Within security groups, traffic is fully load-balanced; HyperSync tracks the Active/Standby/ Backup state of group members. Sync traffic is limited to only the Active and Standby members handling the connection.

Cost-Efficient N+1 Deployments

Zero Touch & Zero downtime enhance operational simplicity and efficiency and enable continuity of business with no connection lost during upgrades.

Specifications

Single Appliance-MHO 175 bundles

*In a 2xMHO175 full redundancy deployment with up to 22 appliances connected and based on Quantum Firewall Software Release R82 take #25.

Ordering Maestro Hyperscale Orchestrator

Security Gateway Appliances for Scale-Up - Quantum Lightspeed

MAESTRO HYPERSCALE SOLUTION PACKAGES

MAESTRO HYPERSCALE SOLUTION PACKAGES – MH0 140