Checkpoint Quantum-7000 SERIES FIREWALL
- Description
Description
Checkpoint Quantum-7000 SERIES FIREWALL
Checkpoint 7000 SERIES
GEN V SECURITY: Performance with full
threat prevention including sandblast |
GEN III SECURITY:
Next-Gen Firewall |
GEN II SECURITY:
Firewall Bandwidth |
Form Factor | MAXIMUM:
Connectivity |
REDUNDANCY |
---|---|---|---|---|---|
9.5Gbps
|
22Gbps | 48Gbps | 1U | 26X,1GbE,8X 10GbE,4X 40GbE | 2x PSUs 2X,480GB SSDs |
QUANTUM 7000 SECURITY GATEWAY
7000-security-gateway-datasheet
Check Point Quantum 7000 Next-Generation Firewalls
Checkpoint 7000 SERIES enables enterprises to deploy the industry’s leading threat prevention capabilities at all points of their infrastructure, scaling security almost infinitely according to their changing business needs. It also dramatically accelerates the efficiency of their security operations. This enables enterprises to prevent and block even the most advanced attacks before they can disrupt business.
Always Protected against Gen V Attacks
Highest caliber prevention with unified security
Security at Hyperscale
On-demand expansion with hyper scalability
Efficient Operations
Cut operation management time by up to 80%
PERFORMANCE HIGHLIGHTS
Gen II Security Firewall | Gen III Security | Gen V Security |
NGFW1 | Threat Prevention + SandBlast2 | |
48 Gbps | 22 Gbps | 9.5 Gbps |
Performance measured with enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.
Checkpoint 7000 SERIES SPOTLIGHT
1. | Sync 10/100/1000 Base-T port | 6. | 2x USB 3.0 ports |
2. | RJ45 console port | 7. | Lights-out Management port |
3. | 2x network card expansion slots | 8. | USB Type-C console port |
4. | 8x 10/100/1000 Base-T ports | 9. | 2x 480GB SSD RAID1 |
5. | Management 10/100/1000 Base-T port | 10. | Redundant hot-swap power supplies |
Prevent Known and Zero-day Threats Check Point SandBlast Network is an evasion-resistant sandbox that provides zero-day protection from advanced and unknown threats. SandBlast Threat Extraction (CDR) ensures quick delivery of safe email and web content to users. | All-inclusive Security Solutions Check Point 7000 security gateways include all security technologies including the SandBlast (sandboxing) software package for one year. Purchase a renewal for NGFW, NGTP or SandBlast (SNBT) for subsequent years as you like. |
Next-Generation Firewall, Next
Threat Prevention +
Flexible I/O Options Purchase the affordable Plus package and get a base system plus 4x 10GbE SFP+ ports with transceivers, 2x AC power supplies, 2x SSD drives, Lights- out Management, and 32 GB of memory for high connection capacity. |
Generation Threat Prevention and
SandBlast packages
Remote Management and Monitoring A Lights-Out-Management (LOM) card provides out-of-band remote management to remotely diagnose, start, restart and manage the appliance from a remote location. Also, use LOM for remote installs of the Gaia OS. |
Checkpoint 7000 SERIES ENTERPRISE-GRADE PLATFORM
1 GbE
(copper) |
1 GbE
(fiber) |
10 GbE | 40 GbE | Memory | Redundant Storage | Redundant Power | LOM | |
Base model | 10 | 0 | 0 | 0 | 16 GB | |||
Plus model | 10 | 0 | 4 | 0 | 32 GB | |||
Max capacity | 26 | 8 | 8 | 4 | 64 GB |
optional accessory
Checkpoint 7000 SERIES SPECIFICATIONS
Checkpoint 7000 SERIES Performance
Enterprise Test Conditions | |
Threat Prevention1 (Gbps) | 9.5 |
NGFW2 (Gbps) | 22 |
IPS (Gbps) | 25 |
Firewall (Gbps) | 48 |
RFC 3511, 2544, 2647, 1242 PERFORMANCE (LAB) | |
Firewall 1518B UDP (Gbps) | 76.8 |
VPN AES-128 (Gbps) | 11.9 |
Connections/sec | 330,000 |
Concurrent connections3 | 4/8/16M |
1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection with logging enabled. 2: Includes Firewall, Application Control and IPS with logging enabled. 3: Performance measured with default/Plus/maximum memory.
Checkpoint 7000 SERIES Additional Features
Highlights |
· 1x CPUs, 16 physical cores, 32 virtual cores
· 1x 480 GB SSD storage (2x in Plus) · 1 AC power supply (2x in Plus) · 16, 32 and 64 GB memory options · Lights-Out-Management (included in Plus) · Virtual Systems (Base/Plus/max mem): 10/20/20 |
Network Expansion Slot Options (2 of 2 slots open) |
· 8x 10/100/1000Base-T RJ45 port card, up to 26 ports
· 4x 1000Base-F SFP port card, up to 8 ports · 4x 10GBase-F SFP+ port card, up to 8 ports · 2x 40GBase-F QSFP+ port card, up to 4 ports |
Checkpoint 7000 SERIES Content Security
Dynamic User-based Policy |
· Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3rd parties via a Web API
· Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android and Apple iOS platforms |
Checkpoint 7000 SERIES Network
Network Connectivity |
· Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)
· 802.3ad passive and active link aggregation · Layer 2 (transparent) and Layer 3 (routing) mode |
High Availability |
· Active/Active L2, Active/Passive L2 and L3
· Session failover for routing change, device and link failure · ClusterXL or VRRP |
IPv6 |
· NAT66, NAT64, NAT46
· CoreXL, SecureXL, HA with VRRPv3 |
Unicast and Multicast Routing (see SK98226) |
· OSPFv2 and v3, BGP, RIP
· Static routes, Multicast routes · Policy-based routing · PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3 |
|
Checkpoint 7000 SERIES Physical
First Time Prevention Capabilities |
· CPU-level, OS-level and static file analysis
· File disarm and reconstruction via Threat Extraction · Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds · Maximal file size for Emulation is 100 MB · Emulation OS Support: Windows XP, 7, 8.1, 10 |
Applications |
· Use 8,000+ pre-defined or customize your own applications
· Accept, prevent, schedule, and apply traffic-shaping |
Data Loss Prevention |
· Classify 700+ pre-defined data types
· End-user and data owner incident handling |
Checkpoint 7000 SERIES SECURITY GATEWAYS
BASE CONFIGURATION 1 | SKU |
7000 Security Gateway Base configuration, includes 10x 1GbE copper ports, 16 GB RAM, 1 SSD, 1 AC PSU, telescopic rails, SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG7000-SNBT |
7000 Security Gateway Plus configuration, includes 10x 1GbE copper ports, 4x 10GbE SFP+ ports, 4x SR transceivers, 32 GB RAM, 2x SSD, 2x AC PSU, Lights-out Management, telescopic rails, SandBlast (SNBT)
Security Subscription Package for 1 Year |
CPAP-SG7000-PLUS-SNBT |
The Base and Plus packages include 2 VS; VS0 and VS1. VS1 is counted when adding additional VS licenses.
1 Renewal NGFW, NGTP, and SandBlast (SNBT) packages are available in the online product catalog.
Checkpoint 7000 SERIES Accessories
INTERFACE CARDS AND TRANSCEIVERS | |
8 Port 10/100/1000 Base-T RJ45 interface card | CPAC-8-1C-C |
4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers | CPAC-4-1F-C |
SFP transceiver module for 1G fiber ports – long range (1000Base-LX) | CPAC-TR-1LX-C |
SFP transceiver module for 1G fiber ports – short range (1000Base-SX) | CPAC-TR-1SX-C |
SFP transceiver to 1000 Base-T RJ45 (Copper) | CPAC-TR-1T-C |
4 Port 10GBase-F SFP+ interface card | CPAC-4-10F-C |
SFP+ transceiver module for 10G fiber ports – long-range (10GBase-LR) | CPAC-TR-10LR-C |
SFP+ transceiver module for 10G fiber ports – short-range (10GBase-SR) | CPAC-TR-10SR-C |
SFP+ transceiver 10GBASE-T RJ45 (Copper) – for links up to 30m over CAT6a/CAT7 | CPAC-TR-10T-C |
2 Port 40G QSFP28 interface card | CPAC-2-40F-C |
QSFP+ transceiver module for 40G fiber ports – short-range (40GBase-SR) | CPAC-TR-40SR-QSFP-300m |
QSFP+ transceiver module for 40G fiber ports – long-range (40GBase-LR) | CPAC-TR-40LR-QSFP-10Km |
4 Port 1GE copper Bypass (Fail-Open) Network interface card (10/100/1000 Base-T) | CPAC-4-1C-BP-C |
2 Port 10GE Short-range Fiber Bypass (Fail-Open) Network interface card (10GBase-SR) | CPAC-2-10FSR-BP-C |
MEMORY | SKU |
Memory upgrade kit from 16GB to 32GB for 7000 appliance | CPAC-RAM16GB-7000 |
Memory upgrade kit from 16GB to 64GB for 7000 appliance | CPAC-RAM48GB-7000 |
Memory upgrade kit from 32GB to 64GB for 7000 appliance | CPAC-RAM32GB-7000 |
SPARES AND MISCELLANEOUS | SKU |
Additional/Replacement AC Power Supply for 7000 appliances | CPAC-PSU-AC-7000 |
Additional/Replacement DC Power Supply for 7000 appliances | CPAC-PSU-DC-7000 |
480GB SSD for 7000 Security Gateways | CPAC-SSD-480G-7000 |
Lights Out Management module | CPAC-LOM-C |
Slide rails for 6000 and 7000 Security Appliances (22” – 32”) | CPAC-RAILS-6000/7000 |
Extended slide rails for 6000 and 7000 Security Appliances (24” – 36”) | CPAC-RAILS-EXT- 6000/7000 |