Learning about network segmentation
Today, most of the environments where Check Point firewalls are found are fairly sophisticated and, generally, consist of one or more data centers (or server rooms) that may contain a mix of physical and virtual servers, container hosts, switching and routing equipment, and a dedicated storage area network (SAN). It may also include a hyperconverged infrastructure where a part of the network, compute, memory, and storage are virtualized and distributed between nodes.
These environments are often a part of hybrid cloud implementations. Access to a public cloud or multiple clouds is achieved either by VPNs or by direct connectivity to cloud service providers (for example, AWS Direct Access, Azure Express Route, and so on).
Some firms are using public cloud segments of their hybrid infrastructure for elastic computational capabilities while keeping them locked down. Others are using the cloud to host their public-facing applications. Yet, others...