Transcription
Appliance Comparison ChartSecurity Gateway Appliances310032005100Branch Office520054005600Small Enterprise58005900Mid-Size EnterpriseEnterprise Testing ConditionsThreat Prevention (Gbps) 1NGFW Throughput (Gbps)510 Mbps580 Mbps1.011.161.462.7846.17.25850 Mbps1.152.12.523.45.16IPS Throughput (Gbps)1.11.442.4533.95.56.57.6Firewall 72.251.61.882.166.51010.22Ideal Testing ConditionsFirewall Throughput (Gbps)VPN Throughput (Gbps)Connections Per Second (K)4048110125150185185210Concurrent Sessions 2/12.810/100/1000Base-T se-F SFP (Base/Max)NANA0/40/40/40/40/80/810GBase-F SFP (Base/Max)NANANANANA0/40/80/840GB QSFP (Base/Max)NANANANANANA0/40/4Expansion SlotNANA111122Fail-Over NIC OptionNANAYesYesYesYesYesYesCPUs/physical cores/virtual cores orage1x 320GB HDD or 240GB SSDNetworkAdditional FeaturesMemory Options (GB)LOM Card1x 1TB HDD or 240GB SSD1 1 HDD or SSD888, 168, 168, 16, 328, 16, 328, 16, 328,16, /20/20Virtual SystemsMax (base/HPP/max 1.3kg (2.9 lbs)1.3kg (2.9 lbs)6.22kg (13.7 lbs)6.22kg (13.7 lbs)6.37kg (14 lbs)7.95kg (17.53 lbs)8.37kg (18.45 lbs)10kg (22.05 lbs)Hot-Swappable Power SuppliesNANANANANAOptionalOptionalOptionalDC ptionalWeightPowerPower InputSingle Power Supply RatingPower Consumption (Max)190-240VAC, 47-63 9W76.5W87.2W110W165WIncludes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot, SandBlast.June 7, 20192Includes Firewall, Application Control, IPS.3Performance measured with default/maximum memory. 2019 Check Point Software Technologies Ltd. All rights reserved. 2
Appliance Comparison ChartSecurity Gateway Appliances 23800Large Enterprise2390026000Data Center GradeEnterprise Testing ConditionsThreat Prevention (Gbps)13.48.96.410.116.41116.42024NGFW Throughput (Gbps) 26.8157.612.62713.7520.42440.5IPS Throughput (Gbps)7.820813.528.814.4521.52643Firewall (Gbps)20.64233.541.278.3526577.9106.2Ideal Testing ConditionsFirewall Throughput (Gbps)22.8505876159116128128316.5VPN Throughput (Gbps)4.310.410.815.82026262640.1Connections Per Second (K)140300210300435310320400550Concurrent Sessions 1.218.3/51.220.8/32Network10/100/1000Base-T 10/661000Base-F SFP e-F SFP (Base/Max)0/44/82/122/128/162/202/202/200/3240G QSFP (Base/Max)——0/60/60/80/60/60/60/16100/25G QSFP28 (Base/Max)——0/60/60/80/60/60/60/16Expansion 1x 1TB HDD or240GB SSD2x 1TB HDD or480GB SSD RAID12x 1TB HDD or480GB SSD RAID12x 1TB HDD or480GB SSD RAID12x 1TB HDD or480GB SSD RAID12x 1TB HDD or480GB SSD RAID12x 1TB HDD or480 GB SSD RAID12x 1TB HDD or480 GB SSD RAID12x 1TB HDD or480 GB SSD RAID1Fail-Open/Bypass NIC OptionAdditional FeaturesCPUs/physical cores/virtual cores (total)StorageMemory Options (GB)LOM CardLCD Display16, 3232, 648, 24, 6416, 32, 6464, 12816, 64, 12832, 64, 12848, 64, 12848, 96, dIncludedIncludedIncluded——Graphic LCDGraphic LCD—Graphic LCDGraphic LCDGraphic 25/250/250125/250/250125/250/250Virtual SystemsMax (base/HPP/max 95kg (17.53 lbs)10kg (22.05 lbs)14.3kg (31.5 lbs)14.3kg (31.5 lbs)18kg (39.7 lbs)15.8kg (34.8 lbs)15.8 kg (34.8 lbs.)15.8 kg (34.8 lbs.)21kg (46.3 lbs)AC or DCAC or DCAC or DCAC or DCACAC or DCAC or DCAC or 3W)PowerHot-Swappable Power SuppliesPower Input190-240VAC (47-63Hz)Single Power Supply Rating275W500WPower Consumption (Max)87.2 W170WIncludes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot, SandBlast.June 7, 2019AC(550W), DC(800W) AC(550W), DC(800W)263W2297WIncludes Firewall, Application Control and IPS.3Performance measured with default/maximum memory. 2019 Check Point Software Technologies Ltd. All rights reserved. 3
Appliance Comparison ChartSecurity Systems4400064000Data Center, Telco, Carrier GradeEnterprise Testing ConditionsThreat Prevention (Gbps)Up to 90Up to 180NGFW (Gbps)Up to 204Up to 408Firewall (Gbps)Up to 335Up to 800Ideal Testing ConditionsFirewall Throughput (Gbps)Up to 395Up to 880Connections Per Second (M)Up to 2.46Up to 4.92Concurrent Sessions (M)Up to 55.2Up to 110.410GBase-F SFP (Max Ports)646440G QSFP (Max Ports)1212100G QSFP28 (Max Ports)44Expansion Slot714250250NetworkVirtual SystemsMax VS SupportedPhysicalEnclosureWeight6U16UMax: 40 kg (88.2 lbs.)Max: 99.8 kg (220.1 lbs.)PowerHot-Swappable Power Supplies4 ACPower InputSingle Power Supply RatingPower Consumption (Max)4 AC (up to 9 SGMs), 6 AC (10-12 SGMs) or 2 DCSee data sheet1200W@110V;1584W@220VAC: (2496W @ 208V/230V), DC: (-48V to -60V 125A)2500W5600WPerformance measured with R80SP.20June 7, 2019 2019 Check Point Software Technologies Ltd. All rights reserved. 4
Appliance Comparison ChartSmall Branch Office Security Appliances1430145014701490Ideal Testing Conditions22.53.24IPS Throughput (Mbps)Firewall Throughput (Gbps)325575700800NGFW Throughput (Mbps) 1300490625800Threat Prevention (Mbps) 2225400500550VPN Throughput (Mbps)2755005001000Connections Per Second (K)20273040Concurrent Sessions (K)500500500500Firewall (Mbps)900110016001800IPS Throughput (Mbps)175225285375NGFW Throughput (Mbps) 1100210240310Threat Prevention (Mbps)90150175220SPU Testing Conditions2NetworkWireless Option802.11 b/g/n/ac, single band 2.4 or 5GHzDSL802.11 b/g/n/ac, dual band 2.4 and 5GHzOptional-Power over Ethernet (PoE)-Optional10/100/1000Base-T Ports8181000Base-F Ports01Embedded GAiAEmbedded GAiAAdditional FeaturesSecurity Architecture3G, 4G Modem SupportSD Card SlotWeb-based ManagementCentral Management ModelYesYesMicro SDHC slotMicro SDHC slotAvailableAvailableEnterprise Security ManagementEnterprise Security kg (2.8 lbs)1.6kg (3.6 lbs)PowerPower Input12100/240VAC, 50-60Hz100/240VAC, 50-60HzSingle Power Supply Rating12V/3.33A 40W desktop adaptor12V/5.4A 65W desktop adaptorPower Consumption (Max)25W (non-Wi-Fi), 30W (Wi-Fi option)55W (non-Wi-Fi), 60W (Wi-Fi option)Includes Firewall, Application Control and IPSIncludes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot, SandBlastJune 7, 2019 2019 Check Point Software Technologies Ltd. All rights reserved. 5
Appliance Comparison ChartRugged Appliances11200RIdeal Testing ConditionsFirewall Throughput (Gbps)VPN Throughput (Mbps)2450Connections Per Second (K)10Concurrent Sessions (K)400SPU Testing ConditionsFirewall (Mbps)700Firewall and IPS (Mbps)60Network10/100/1000Base-T (Max)61000Base-F (Max)2Additional Features3G/4GYesSerial Console PortYesMount OptionsCentral Management ModelDIN railEnterprise Security ManagementCertificationsIndustrialIEC 61850-3, IEEE 1613MaritimeIEC-60945 B, IACS-E102Operating EnvironmentTemperature-40 to167 F / -40 to 75 CHumidity20%-90% (non-condensing)PhysicalEnclosureWeightDesktop1.2 kg (2.65 lbs.)PowerAC100-240V, 50–60 HzDC12V-72V, -48V DCPower Consumption (Max)1215WAlso see the [Siemens RUGGEDCOM APE (Application Processing Engine) Line Module]Test clause IEC-60945-8.12, IACS-E10-12 were not performedJune 7, 2019 2019 Check Point Software Technologies Ltd. All rights reserved. 6
Appliance Comparison ChartDDoS Protector506Network center3042040420CarrierPerformance1Capacity (Gbps)20.512481410203040Throughput (Gbps)20.512481210203040Max Concurrent Sessions (M)2224446666Max DoS Flood Attack Prevention Rate(M)(pps)11110101025252525Latency 60 micro secondsReal-time SignaturesDetect and protect against attacks in less than 18 secondsNetworkInspection Ports10/100/1000 Copper Ethernet444888----1GbE Fiber (SFP)222444----10GbE Fiber (XFP)---444----1/10 GbE (SFP )------2020202040 GbE (QSFP )------444410/100/1000 Copper2222222222RS-232 Console1111111111Management PortsOperation ModeNetwork OperationTransparent L2 ForwardingDeployment ModesIn-line; span port monitoring; copy port monitoring; local out-of-path; out-of-path mitigation (scrubbing center solution)Tunneling protocols supportVLAN Tagging, L2TP, MPLS, GRE, GTPIPv6Support IPv6 networks and block IPv6 attacksPolicy ActionBlock and Report; Report OnlyBlock ActionsDrop packet, reset (source, destination, both), suspend (source, source port, destination, destination port or any combination); Challenge-Response for HTTP and DNS attacksHigh AvailabilityFail-open / Fail-closeInternal fail-open/fail-close for copper ports;internal fail-close for SFP ports;optional fail-open for SFP ports3Internal fail-open/fail-close for copper ports;internal fail-close for SFP and XFP ports;optional fail-open for SFP and XFP ports4ClusteringInternal fail-close for SFP and QSFP ports;optional fail-open for SFP and QSFP ports4Active-Passive ClusterPhysicalEnclosure1U2UPowerDual Power SupplyPower Consumption (Max)OptionalActual performance figures may change per network configuration, traffic type, etc.3External fiber fail-open switch with SFP ports is available at additional cost1June 7, 2019Yes - Hot Swappable177W476W634WThroughput is measured with behavioral and signature protections using the eCommerce protection profile4External fiber fail-open switches with SFP or XFP ports are available at additional cost2 2019 Check Point Software Technologies Ltd. All rights reserved. 7
Appliance Comparison ChartComprehensive Software BundlesNGFWNGTPNGTX 26000230001600015000500060003000140011200RSecurity Gateway Feature SetsFirewallIdentity AwarenessIPsec VPNAdvanced Networking & ClusteringMobile AccessIPSApplication ControlContent AwarenessURL FilteringAntivirusAnti-SpamAnti-BotSandBlast Threat EmulationSandBlast Threat ExtractionDLPSecurity Management Feature SetsNetwork Policy ManagementLogging & StatusMobile Access:The 26000, 23000, 16000, 15000, 5000, 3000 and 1200R include 5 users in the default package and this can be extended using Mobile Access extensionsThe 1430/1450 and 1470/1490 include Mobile Access for 100 and 200 users respectivelyOptional Security Management Software features available:Monitoring, Management Portal, User Directory, SmartProvisioning, SmartEvent, Endpoint Policy Management, Compliance1The 1400 NGTX package includes Threat Emulation. Threat Extraction is not currently supported on this appliance.June 7, 2019 Included 2019 Check Point Software Technologies Ltd. All rights reserved. 8
Appliance Comparison Chart une 1 1200R Ideal Testing Conditions Firewall Throughput (Gbps) 2 VPN Throughput (Mbps) 450 Connections Per Second (K) 10 Concurrent Sessions (K) 400 SPU Testing Conditions Firewall (Mbps) 700 Firewall and IPS (Mbps) 60 Network 10/100/1000Base-T (Max) 6 1000Base-F (Max) 2 Additional Features 3G/4G Yes Serial Console Port Yes
