Description

Checkpoint Quantum-7000 SERIES FIREWALL

Checkpoint 7000 SERIES

GEN V SECURITY: Performance with full

threat prevention including sandblast

GEN III SECURITY:

Next-Gen Firewall

GEN II SECURITY:

Firewall Bandwidth

Form Factor MAXIMUM:

Connectivity

REDUNDANCY
9.5Gbps

 

22Gbps 48Gbps 1U  26X,1GbE,8X 10GbE,4X 40GbE  2x PSUs 2X,480GB SSDs

 

QUANTUM 7000 SECURITY GATEWAY

 

 7000-security-gateway-datasheet

 

 

 

 

 

 

 

 

 

 

 

 

Check Point Quantum 7000 Next-Generation Firewalls

Checkpoint 7000 SERIES enables enterprises to deploy the industry’s leading threat prevention capabilities at all points of their infrastructure, scaling security almost infinitely according to their changing business needs. It also dramatically accelerates the efficiency of their security operations. This enables enterprises to prevent and block even the most advanced attacks before they can disrupt business.

 

 

 

 

 

Always Protected against Gen V Attacks

Highest caliber prevention with unified security

Security at Hyperscale

On-demand expansion with hyper scalability

Efficient Operations

Cut operation management time by up to 80%

 

 

 

PERFORMANCE HIGHLIGHTS

 

Gen II Security Firewall Gen III Security Gen V Security
NGFW1 Threat Prevention + SandBlast2
48 Gbps 22 Gbps 9.5 Gbps

Performance measured with enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

 

Checkpoint 7000 SERIES SPOTLIGHT

 

 

1. Sync 10/100/1000 Base-T port 6. 2x USB 3.0 ports
2. RJ45 console port 7. Lights-out Management port
3. 2x network card expansion slots 8. USB Type-C console port
4. 8x 10/100/1000 Base-T ports 9. 2x 480GB SSD RAID1
5. Management 10/100/1000 Base-T port 10. Redundant hot-swap power supplies

 

 

 

Prevent Known and Zero-day Threats Check Point SandBlast Network is an evasion-resistant sandbox that provides zero-day protection from advanced and unknown threats. SandBlast Threat Extraction (CDR) ensures quick delivery of safe email and web content to users. All-inclusive Security Solutions Check Point 7000 security gateways include all security technologies including the SandBlast (sandboxing) software package for one year. Purchase a renewal for NGFW, NGTP or SandBlast (SNBT) for subsequent years as you like.
Next-Generation Firewall, Next

Threat Prevention +

 

Flexible I/O Options

Purchase the affordable Plus package and get a base system plus 4x 10GbE SFP+ ports with transceivers, 2x AC power supplies, 2x SSD drives, Lights- out Management, and 32 GB of memory

for high connection capacity.

Generation Threat Prevention and

SandBlast packages

 

Remote Management and Monitoring A Lights-Out-Management (LOM) card provides out-of-band remote management to remotely diagnose, start, restart and manage the appliance from a remote location. Also, use LOM for

remote installs of the Gaia OS.

 

 

Checkpoint 7000 SERIES ENTERPRISE-GRADE PLATFORM

 

1 GbE

(copper)

1 GbE

(fiber)

10 GbE 40 GbE Memory Redundant Storage Redundant Power LOM
Base model 10 0 0 0 16 GB      
Plus model 10 0 4 0 32 GB      
Max capacity 26 8 8 4 64 GB  

optional accessory

 

Checkpoint 7000 SERIES SPECIFICATIONS

Checkpoint 7000 SERIES Performance

 

  Enterprise  Test Conditions                                                             
Threat Prevention1 (Gbps) 9.5
NGFW2 (Gbps) 22
IPS (Gbps) 25
Firewall (Gbps) 48
  RFC 3511,  2544, 2647,  1242 PERFORMANCE (LAB)                    
Firewall 1518B UDP (Gbps) 76.8
VPN AES-128 (Gbps) 11.9
Connections/sec 330,000
Concurrent connections3 4/8/16M

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection with logging enabled. 2: Includes Firewall, Application Control and IPS with logging enabled. 3: Performance measured with default/Plus/maximum memory.

 

Checkpoint 7000 SERIES Additional Features

 

  Highlights                                                                                          
·  1x CPUs, 16 physical cores, 32 virtual cores

·  1x 480 GB SSD storage (2x in Plus)

·  1 AC power supply (2x in Plus)

·  16, 32 and 64 GB memory options

·  Lights-Out-Management (included in Plus)

·  Virtual Systems (Base/Plus/max mem): 10/20/20

  Network Expansion Slot Options (2 of 2  slots open)        
·  8x 10/100/1000Base-T RJ45 port card, up to 26 ports

·  4x 1000Base-F SFP port card, up to 8 ports

·  4x 10GBase-F SFP+ port card, up to 8 ports

·  2x 40GBase-F QSFP+ port card, up to 4 ports

 

Checkpoint 7000 SERIES Content Security

 

 

  Dynamic User-based Policy                                                       
·  Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3rd parties via a Web API

·  Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android and Apple iOS platforms

 

Checkpoint 7000 SERIES Network

 

  Network Connectivity                                                                   
·  Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)

·  802.3ad passive and active link aggregation

·  Layer 2 (transparent) and Layer 3 (routing) mode

  High Availability                                                                              
·  Active/Active L2, Active/Passive L2 and L3

·  Session failover for routing change, device and link failure

·  ClusterXL or VRRP

  IPv6                                                                                                    
·  NAT66, NAT64, NAT46

·  CoreXL, SecureXL, HA with VRRPv3

  Unicast and Multicast Routing (see SK98226)                    
·  OSPFv2 and v3, BGP, RIP

·  Static routes, Multicast routes

·  Policy-based routing

·  PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

 

  Power Requirements                                                                                                               
·  Single Power Supply rating: 500W

·  AC power input: 100 to 240V (47-63Hz)

·  Power consumption avg/max: 144W/270W

·  Maximum thermal output: 921 BTU/hr.

  Dimensions                                                                                                               
·  Enclosure: 1RU

·  Dimensions (WxDxH): 17.2 x 20 x 1.73 in. (438 x 508 x 44mm)

·  Weight (Base/Plus): 17.6/19.8 lbs. (8.45/9 kg)

  Environmental Conditions                                                                                                               
·  Operating: 0° to 40°C, humidity 5 to 95%

·  Storage: –20° to 70°C, humidity 5 to 95%

  Certifications                                                                                                               
·  Safety: UL, CB, CE, TUV GS

·  Emissions: FCC, CE, VCCI, RCM/C-Tick

·  Environmental: RoHS, WEEE, REACH1, ISO140011

1. factory certificate

 

Checkpoint 7000 SERIES Physical

 

 

  First Time Prevention Capabilities                                             
·  CPU-level, OS-level and static file analysis

·  File disarm and reconstruction via Threat Extraction

·  Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds

·  Maximal file size for Emulation is 100 MB

·  Emulation OS Support: Windows XP, 7, 8.1, 10

  Applications                                                                                     
·  Use 8,000+ pre-defined or customize your own applications

·  Accept, prevent, schedule, and apply traffic-shaping

  Data Loss Prevention
·  Classify 700+ pre-defined data types

·  End-user and data owner incident handling

 

Checkpoint 7000 SERIES SECURITY GATEWAYS

 

BASE CONFIGURATION 1 SKU
7000 Security Gateway Base configuration, includes 10x 1GbE copper ports, 16 GB RAM, 1 SSD, 1 AC PSU, telescopic rails, SandBlast (SNBT) Security Subscription Package for 1 Year CPAP-SG7000-SNBT
7000 Security Gateway Plus configuration, includes 10x 1GbE copper ports, 4x 10GbE SFP+ ports, 4x SR transceivers, 32 GB RAM, 2x SSD, 2x AC PSU, Lights-out Management, telescopic rails, SandBlast (SNBT)

Security Subscription Package for 1 Year

CPAP-SG7000-PLUS-SNBT

The Base and Plus packages include 2 VS; VS0 and VS1. VS1 is counted when adding additional VS licenses.

1 Renewal NGFW, NGTP, and SandBlast (SNBT) packages are available in the online product catalog.

 

Checkpoint 7000 SERIES Accessories

INTERFACE CARDS AND TRANSCEIVERS
8 Port 10/100/1000 Base-T RJ45 interface card CPAC-8-1C-C
4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers CPAC-4-1F-C
SFP transceiver module for 1G fiber ports – long range (1000Base-LX) CPAC-TR-1LX-C
SFP transceiver module for 1G fiber ports – short range (1000Base-SX) CPAC-TR-1SX-C
SFP transceiver to 1000 Base-T RJ45 (Copper) CPAC-TR-1T-C
4 Port 10GBase-F SFP+ interface card CPAC-4-10F-C
SFP+ transceiver module for 10G fiber ports – long-range (10GBase-LR) CPAC-TR-10LR-C
SFP+ transceiver module for 10G fiber ports – short-range (10GBase-SR) CPAC-TR-10SR-C
SFP+ transceiver 10GBASE-T RJ45 (Copper) – for links up to 30m over CAT6a/CAT7 CPAC-TR-10T-C
2 Port 40G QSFP28 interface card CPAC-2-40F-C
QSFP+ transceiver module for 40G fiber ports – short-range (40GBase-SR) CPAC-TR-40SR-QSFP-300m
QSFP+ transceiver module for 40G fiber ports – long-range (40GBase-LR) CPAC-TR-40LR-QSFP-10Km
4 Port 1GE copper Bypass (Fail-Open) Network interface card (10/100/1000 Base-T) CPAC-4-1C-BP-C
2 Port 10GE Short-range Fiber Bypass (Fail-Open) Network interface card (10GBase-SR) CPAC-2-10FSR-BP-C

 

MEMORY SKU
Memory upgrade kit from 16GB to 32GB for 7000 appliance CPAC-RAM16GB-7000
Memory upgrade kit from 16GB to 64GB for 7000 appliance CPAC-RAM48GB-7000
Memory upgrade kit from 32GB to 64GB for 7000 appliance CPAC-RAM32GB-7000

 

SPARES AND MISCELLANEOUS SKU
Additional/Replacement AC Power Supply for 7000 appliances CPAC-PSU-AC-7000
Additional/Replacement DC Power Supply for 7000 appliances CPAC-PSU-DC-7000
480GB SSD for 7000 Security Gateways CPAC-SSD-480G-7000
Lights Out Management module CPAC-LOM-C
Slide rails for 6000 and 7000 Security Appliances (22” – 32”) CPAC-RAILS-6000/7000
Extended slide rails for 6000 and 7000 Security Appliances (24” – 36”) CPAC-RAILS-EXT- 6000/7000