Maestro Hyperscale Orchestrator
In the AI era, speed is everything. Yet too often, advanced security is turned off just to keep up. Check Point Maestro solves that dilemma with elasticity: an Orchestrator that unifies individual firewalls into one logical unit that scales with demand, while each packet remains fully inspected.
Built for AI Hyperscale. Simple to Operate.
Maestro Hyperscale Orchestrator brings cloud-level agility to on-premises and hybrid environments, with AI security embedded in the network firewall. It’s ideal for hyperscale AI data centers, neoclouds, and private and sovereign AI.
- One Policy. One Console.
Manage up to 52 firewalls with one policy and one console. You get the simplicity of the cloud on your own hardware, without configuring each gateway separately. - More Performance, Lower Cost
Add firewalls only when you need them. Maestro spreads the load across every appliance automatically, so you maximize hardware utilization and lower total cost of ownership (TCO). - Always On, Even During Updates
Keep AI services running with 99.999% uptime. Automated failover and recovery to backup sites protect business continuity. Live patching applies security updates on the fly. No reboots. No downtime. - Every Use Case, Every Site
Secure the perimeter. Inspect east-west traffic between workloads. Add a critical layer to your multi-layered AI data center security. Run workloads across multiple sites, colocation facilities, and hybrid clouds, with consistent security and microsegmentation everywhere.
The Guide to Hyperscale Network Security
Check Point Maestro Hyperscale Orchestrator
The Maestro Hyperscale Firewall orchestrates multiple Check Point firewalls as one unified system, with seamless and near-limitless scaling.
Maestro Hyperscale Orchestrator 140
- Advanced Threat Prevention Throughput 1.28 Tbps
- Fabric Capacity 1.28 Tbps
- Latency 300 nsec port to port
- Ports 48x 10GbE and 8x 100GbE
- Enclosure 1RU
- Dual Power Supplies Included
Maestro Hyperscale Orchestrator Data Sheet
Maestro Hyperscale Orchestrator 175
- Advanced Threat Prevention Throughput 1.5 Tbps
- Fabric Capacity 3.2 Tbps
- Latency 400 nsec port to port
- Ports 32x 100GbE or 128x 10GbE
- Enclosure 1RU
- Dual Power Supplies Included
Maestro Hyperscale Orchestrator Data Sheet
Maestro Hyperscale Orchestrator 200
- Ideal for hyperscale AI data centers, neoclouds, private & sovereign AI
- Up to 4.5 Tbps Threat Prevention throughput
- Fabric Capacity 12.8 Tbps
- 32x 400GbE or 128x 100GbE Ports
- 1RU Enclosure
- Lights-Out Management for remote debugging and installation
- 512 GB disk capacity for improved snapshot restore and debugging
Maestro Hyperscale Orchestrator Data Sheet
Elastic Scale Enabling Non-Disruptive Expansion
Networks connect through uplinks, firewalls connect through downlinks, and the Orchestrator ties them together. Growth means adding a compact 1U firewall without replacing the system already deployed.
Every Firewall Works
Traffic is distributed in active-active mode across all firewalls in the group, maximizing deployed capacity.
Scale Without Thinning Inspection
Each firewall independently enforces the complete threat prevention policy as throughput grows.
Managed as One Firewall
The firewall group is managed as one logical system, or Single Management Object, with consistent policy, monitoring, and change control.
Maestro Use Cases:
From Perimeter to Private AI
Maestro adapts to workload demands across the network edge, hybrid data centers, business continuity environments, and AI factories. In every case, the architecture scales by adding firewalls, not systems.
- Dynamic Perimeter Security
Adaptive hyperscale security at the network edge, scaling throughput without compromising full-spectrum inspection. - East-West Traffic Inspection
Deep inspection across hybrid-cloud and on-premises workloads with consistent policy between data center segments. - Business Continuity and Disaster Recovery
N+N clustering and geo-clustering support minimum downtime and automatic failover to backup sites. - AI Data Centers and AI Factories
Layered AI security for private LLM initiatives, including GPU-cluster protection with Check Point AI Factory Firewall integrated with NVIDIA BlueField DPUs.
Multi-layered AI Data Center & AI Factory Security
Secure AI Traffic from the Data Center Firewall You Already Run
With Check Point’s AI Network Firewall, you discover, govern, and protect AI traffic from the hardware firewall you already run today. That also includes firewalls that make up a Maestro Security group.
- Keep Autonomous Agents from Taking Unsafe Actions
Apply guardrails to govern how autonomous agents access tools, files, and systems. - Prevent Attacks and Harmful Outputs in AI Applications
Protect prompts, responses, and model behavior inline within customer-facing and internal applications. - Gain Full Visibility into AI Traffic
Use unified policy and telemetry across models, agents, and data services.
Introducing the AI Network Firewall
Prevent Lateral Movement with Micro Segmentation
Turn segmentation models into enforceable firewall policy. Multiple Security Groups and VSX support distinct routing tables, policies, and security blades, with integrations for leading microsegmentation platforms.
“Using Check Point Maestro Hyperscale Firewall has been the bedrock of our relationship with Check Point.”
-Daniel Brusilovsky
Chief Technology Officer, Denver Broncos
“Check Point’s Maestro Hyperscale Orchestrator allows us to add capacity on the fly, allowing us to optimize our network and provide the customer with the best experience and lowest latency possible.”
-Anthony Britton
– Manager, IT Security, US-based Major Aerospace Company
“Check Point Maestro Hyperscale Orchestrator and Check Point Security Gateways gave us unmatched protection and scalability. No other solution came close to its power and ease of use.”
—Johannes Reitschuster
Deputy IT Director and Team Lead, Landkreis Augsburg
“I can’t emphasize enough how Check Point has gone above and beyond to help CoxHealth in the face of overwhelming challenges. I definitely recommend Check Point Maestro and Check Point Security Gateways to any security team. They have made our job so much easier.”
-Kyle Pomering
Network Engineer, CoxHealth
“Since the implementation, we have not had a single outage due to service delivery platform issues. Thanks to Maestro, we’ve saved thousands of working hours every month”
-Marko Mäki
Group and Service Manager for Network Core, Design and Security Services, Government ICT Centre Valtori
Unified Control for Complex Network Security
Use Check Point Security Management for centralized administration, advanced policy layers, multi-domain management, and centralized operations.
Firewall Orchestration Built for Elasticity
Maestro replaces the chassis with a system. An Orchestrator connects networks to compact 1U firewalls operating as one logical system.
Distributed by the Orchestrator
Traffic from untrusted networks is distributed natively across every active firewall, with no external load balancer in the path.
Inspected at Full Depth
Each 1U firewall enforces the complete threat prevention policy, so dynamic throughput never reduces inspection depth.
Forwarded with State Intact
Inspected traffic passes to trusted networks while shared state across all firewalls preserves every session.
Hardware Flexibility
Unlike chassis solutions tied to dedicated hardware, Maestro combines firewalls of different models and generations into one system that grows with demand.
One System. Multiple Policies
Split a Maestro system into up to eight independent security groups (policy domains), each with its own rules, with no trade-off in advanced threat prevention.
Designed for Hyperscale
Scale up to 52 security gateways within a single system, while maintaining consistent performance and simplified management.
See Maestro Hyperscale Firewall in Action
Otros recursos
FAQs
Maestro Hyperscale Firewall is a clustering architecture that unifies multiple Check Point firewalls into one logical system. It provides 99.999% uptime, elastic performance from 60 Gbps to 1,400 Gbps of threat prevention and up to 3 Tbps of firewalling for east-west traffic, AI-ready security with R82.20, intelligent load sharing, streamlined upgrades, and multi-tenancy.
Yes. Maestro unifies on-premises and private-cloud firewalls into a hyperscale fabric, supporting inspection between on-premises and cloud workloads, geo-clustering, and unified policy across connected environments.
Check Point HyperSync distributes traffic across active firewalls and synchronizes connection state. N+N clustering, geo-clustering, and active-active redundancy help eliminate bottlenecks and maintain service through firewall, component, or site failures.
Maestro scales linearly by adding firewalls. A Security Group can include up to 14 firewalls per site, with up to eight Security Groups, while each group remains managed as one logical firewall.
Yes. Maestro supports an open integration ecosystem, including microsegmentation platforms. Workload tags and labels can be incorporated into firewall policy to keep enforcement aligned as workloads move or scale.
