Prisma AIRS as a Firewall - Hyperscale Security Fabric
HSF eliminates the need for third-party external load balancing by deploying P-Nodes
as fixed capacity NGFWs that both inspect and also load balance to the dynamically scaling
S-Nodes behind them.
| Where Can I Use This? | What Do I Need? |
|
|
- Software NGFW Credits
- HSF subscription license
|
The Hyperscale Security Fabric (HSF) is an innovative solution designed to
address the scalability and performance needs of large data centers and service
providers through its in-built load balancer. HSF contains P-Nodes and
auto-scaling S-Nodes which help to manage normal throughput and fluctuations in traffic.
By deploying P-Nodes as fixed capacity NGFWs and dynamically scaling S-Nodes instances
behind them, you can efficiently manage your network security as your data center
grows.
HSF eliminates the need for third-party external load balancing by utilizing a
firewall cluster that can be exposed as a single IP through ECMP. This solution offers
flexibility in deployment, allowing you to place P-Nodes and S-Nodes within the same or
separate hosts. You can leverage HSF to achieve high throughput capabilities, with the
ability to reach 100 Gbps using 4 P-Nodes and scale to over 200 Gbps with additional
S-Nodes. With its auto-scaling capabilities in vSphere environments, HSF provides a
robust and adaptable security solution for your evolving network infrastructure
needs.
You can deploy the HSF cluster in ESXi environments using a Panorama plugin and
the deployment supports one HSF cluster within a single vCenter. HSF supports:
- In-built load balancer with session resiliency and session failover to healthy
firewall instances.
- Auto-scaling based on session utilization. You can configure auto-scale
parameters to dynamically adjust the number of S-Nodes instances based on
traffic demands.
- Simplified and automated deployment through the Software Orchestration
Panorama plugin.
- Rolling upgrades with rollback support, ensuring minimal disruption
during maintenance.
- Monitoring and visibility to view the firewall cluster as a single
entity within Panorama.
- Customer-facing APIs and CLIs for querying individual firewall member status and
performance metrics.