Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
sjni01
Contributor
Contributor

Deployment MHO SDual (Maestro) in Col

Hello Dear CheckPoint Community,

I wanted to share my experience deploying Maestro Single Dual from mid-September 2024 until Sunday, November 17th, 2024, and finally, with documentation or Technical Memory, We delivered or closed this project the past 25th, November 2024.

It was very tough to do, there were workdays of a lot of hours before the last week leading up to the deployment.

In the last week, we work with non-stop,we deployed Maestro to one of our clients in Colombia, with a internal Partner Team supporting me always. Therefore, I had the opportunity to lead this great project. It is not a usual product here, The BOM contained the following:

a) 1 SMS 6KLP

b) 2 MHOs-140

c) 2 16.6K (HyperScale chassis)

We changed the client's architecture from  VSX Cluster (2 16K) to VSX Gateway (BOM above), we managed the purchase of the cabling, Almost 70% of the cabling was copper, and I migrated it to Fiber.

DAC cables, and 20Gb Bonds, and 200Gb QSFP Bonds, 7 Virtual System, 2 Virtual Switch, IPS,VPNs Remote Access,VPN S2S, etc.

For my controlled environment, we provided a small switch and a Cisco router which allowed us to save time by interconnecting the SMO with the already migrated SMS 6KL-Plus through a Site-to-Site VPN.

We had several challenges with almost 1500 static routes, thousands of objects, etc. and so many things that I no longer remember, even during the process,we had several challenge with the information, however we got back to the battlefield, as the project's critical deadline was very close, and there were still many tasks to complete.

I'd like share beyond a training that it's very important for someone with a challange like this, I suggest to verify the Maestro Admin Guide, it was quite usetful for understanding the ports logic and the different connections types.

It’s likely that for you, this is a routine, standard, or normal project, as you have much more experience and background in cybersecurity than I do. However, I share this because, for me, it was an incredible challenge, perhaps the biggest one I’ve had to lead. It was a journey where giving up was not an option, and I had to go at full speed. I love Check Point, and I continue learning.

 I just wanted to share with you that I overcame this challenge and was an opportunity fantastic to me.

Many thanks a lot for reading and listening to this testimony.

Regards,

(1)
5 Replies
_Val_
Admin
Admin

@sjni01 Thanks a lot for sharing!

sjni01
Contributor
Contributor

Many Thanks for your feedback.

0 Kudos
Denis_Davila
Participant

@sjni01 Excelente testimonio, en mi caso también tenemos Maestro y en este Diciembre nos toco levantar un Sitio secundario con Maestro, es una solución bonita pero compleja, que requiere dedicación y esfuerzo. Éxitos en tus próximos proyectos.

sjni01
Contributor
Contributor

Super, muchas gracias Denis, agradezco tu mensaje.

0 Kudos
the_rock
Legend
Legend

Though I know only very basics about Maestro, seems like you put a LOT of work into this. Its so nice of you to share it, Im sure it will help many people.

Andy

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

 
Upcoming Maestro Events