Maestro Hyperscale Orchestrator
Check Point Maestro Hyperscale Orchestrator (MHO) unifies multiple Force Firewalls into one logical system powered by HyperSync — add or retire firewalls with zero downtime, share traffic active-active, and scale with cloud-level elasticity. Up to 52 gateways operate as a single system, delivering a true elastic security fabric for on-premises and hybrid data centers.
Key Benefits
- Seamless scale & growth: HyperSync-powered N+1 clustering adds or retires firewalls on demand with zero downtime
- Cloud-level agility on-premises: elastic traffic distribution across all nodes keeps performance consistent under any load
- Unified management & policy: a Single Management Object (SMO) with one policy to configure and monitor the entire cluster
- Elastic scale to 52 gateways: up to 4500 Gbps throughput and 1000M concurrent connections with no performance degradation
- Zero-downtime transition: different Force Firewall models coexist in one system for minimal-downtime upgrades
- Cost-efficient resiliency: compact 1U gateways maximize hardware utilization and lower total cost of ownership
Flexible Scalability
Start at 150 Gbps with two Force 29200 firewalls and elastically scale to 28 firewalls, 8 security groups, 4500 Gbps throughput and 1000M concurrent connections — without changing platforms.
Models & Specifications
| Specification | MHO-140 | MHO-175 | MHO-200 |
|---|---|---|---|
| Fabric capacity | 2 Tbps | 3.2 Tbps | 12.8 Tbps |
| Ports | 48×10/25GbE + 8×40/100GbE | 32×40/100GbE or 128×10/25GbE | 32×400GbE or 128×100/25/10GbE |
| Dimensions (W×D×H) | 438×436×43.8mm | 427.83×686×43.8mm | 440×590×43.8mm |
| Weight | 8.52 kg | 11.1 kg | 11.2 kg |
| Storage | 110GB SSD | 110GB SSD | 512GB SSD |
| Power | 165W (AC) | 150W (AC/DC) | 1600W (AC/DC, LOM included) |
Platform Features
- First Time Wizard and WebUI port map visualization for out-of-the-box deployment
- Insights tool for real-time cluster and port health monitoring
- Security Groups: each member runs active-active with its own policy and interfaces
- R82.20 enables continuous cluster health monitoring, background upgrades and console-based configuration
- 300-nanosecond port-to-port latency; supports 10/25/100/400GbE DAC cables
Deploying two Orchestrators across two sites provides full active/standby redundancy, synchronized over direct DAC connections, with dual Internet uplinks serving both data centers.
Hyperscale Bundles
| Orchestrator | Force gateways | Fabric throughput |
|---|---|---|
| MHO-140 | 9100 / 9200 / 9300 / 9400 / 9700 / 9800 | 150 / 184 / 221 / 321 / 459 / 573 Gbps |
| MHO-175 | 19100 / 19200 / 29100 / 29200 | 505 / 635 / 867 / 1000 Gbps |
| MHO-200 (2× fully redundant) | 19100 / 19200 / 29100 / 29200 | 2020 / 2543 / 3468 / 4500 Gbps |
Ordering Information
| Model / Package | Description |
|---|---|
| CPAP-MHO-140 | Maestro Hyperscale Orchestrator 140 (AC) |
| CPAP-MHO-175-AC | Maestro Hyperscale Orchestrator 175 (AC) |
| CPAP-MHO-200-AC | Maestro Hyperscale Orchestrator 200 (AC) |
| CPAP-MHO-200-DC | Maestro Hyperscale Orchestrator 200 (DC) |
| CPAP-MHS200-AC-29202-PLUS-SNBT | MHO-200 + 2×Force 29200 solution package (4500 Gbps) |
| CPAP-SG29202-PLUS-MHS-SNBT | Force 29200 + MHO solution package |
| CPAP-MHS-9802-PLUS-SNBT | MHO + 2×Force 9800 solution package |
| CPAP-SG9300-PLUS-MHS-SNBT | Force 9300 + MHO solution package |
Source: Check Point Maestro Hyperscale Orchestrator Datasheet (Rev. Oct 19, 2026).