Transcription
Appliance Comparison Chart
Appliance Comparison ChartSecurity Gateway Appliances32005200Branch Office54005600Small Enterprise5800Mid-Size EnterpriseProduction Performance (Real-World Traffic Blend)SecurityPowerFirewall (Gbps)25042560095017502.15.31017.522IPS Throughput (Gbps)460 Mbps810 Mbps1.081.93.05NGFW Throughput (Gbps)260 Mbps520 Mbps690 Mbps1.182Threat Prevention (Gbps)140 Mbps250 Mbps330 Mbps540 Mbps1Ideal Testing Conditions Performance (RFC 3511, 2544, 2647, 1242 )Firewall Throughput (Gbps)416222535Connections Per Second (K)48125150185185Concurrent Sessions (M)13.23.2/6.43.2/6.43.2/6.43.2/6.4VPN Throughput (Gbps)2.251.882.166.510IPS Throughput (Gbps)1.4433.97.810NGFW Throughput (Gbps)1.152.73.45.88.110/100/1000Base-T (Base/Max)6/66/1410/1810/1810/261000Base-F SFP (Base/Max)NA0/40/40/40/810GBase-F SFP (Base/Max)NA0/00/00/40/840GB QSFP (Base/Max)NANANANA0/4Expansion SlotNA1112Fail-Over NIC OptionNAYesYesYesYes1x 320 GB1x 500 GB1x 500 GB1x 500 GB1x 500 GB888, 168, 168, /2010/20NetworkAdditional FeaturesStorageMemory Options (GB)LOM CardVirtual SystemsMaximum .3kg (2.9 lbs)6.22kg (13.7 lbs)6.37kg (14 lbs)7.95kg (17.53 lbs)8.37kg (18.45 lbs)NANANAOptionalOptionalPowerDual, Hot-Swappable Power SuppliesPower InputSingle Power Supply RatingPower Consumption (Max)90-264V, 47-63 es maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protection2Performance measured with default/maximum memory1May 11, 2016 2016 Check Point Software Technologies Ltd. All rights reserved.Classification: [Protected] — All rights reserved. 2
Appliance Comparison ChartSecurity Gateway Appliances continued154001560023500Large Enterprise23800Data Center GradeProduction Performance (Real-World Traffic Blend)1SecurityPower2600385049006200Firewall (Gbps)30303443IPS Throughput (Gbps)4.58101235.26.37.21.52.52.93.6128NGFW Throughput (Gbps)Threat Prevention (Gbps)Ideal Testing Conditions Performance (RFC 3511, 2544, 2647, 1242)Firewall Throughput (Gbps)5877116Connections Per Second urrent Sessions (M)2VPN Throughput (Gbps)10.815.82626IPS Throughput (Gbps)14182230NGFW Throughput (Gbps)1217202710/100/1000Base-T (Base/Max)10/2610/2610/4210/421000Base-F SFP (Base/Max)0/120/120/200/2010GBase-F SFP (Base/Max)2/122/122/202/2040GBase QSFP (Base/Max)0/40/40/40/4NetworkExpansion SlotFail-Open/Bypass NIC Option3355YesYesYesYes1x 1TB2x 1TB RAID12x 1TB RAID12x 1TB cludedGraphic LCDGraphic LCDGraphic LCDGraphic LCD10/4060/8060/125125/250Additional FeaturesStorageMemory Options (GB)LOM CardLCD DisplayVirtual SystemsMaximum (base/HPP)2PhysicalEnclosureWeight2U2U2U2U14.3kg (31.5 lbs)14.3kg (31.5 lbs)15.8kg (34.8 lbs)15.8 kg (34.8 pable Power SuppliesPower Input90-264V, 47-63 HzSingle Power Supply Rating600W600W800W800WPower Consumption (Max)263W297W383W399WAssumes maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protection2Performance measured with default/maximum memory1May 11, 2016 2016 Check Point Software Technologies Ltd. All rights reserved.Classification: [Protected] — All rights reserved. 3
Appliance Comparison ChartSecurity Gateway Appliances (released before 2016)220042004400Small-Office46004800673Enterprise GradeProduction Performance (Real-World Traffic Blend)1SecurityPower121121230405Firewall (Gbps)1.41.42.23.45.8Firewall and IPS (Mbps)150165360630110011RFC 3511, 2544, 2647, 1242 Performance Tests (LAB)Firewall Throughput (Gbps)3359VPN Throughput (Gbps)0.40.41.21.52IPS Recommended Profile (Gbps)0.30.30.711.5Connections Per Second (K)2525405070Concurrent Sessions (M)1.21.21.21.23.3210/100/1000Base-T/Max Ports6/64/88/128/128/161000Base-F SFP (MAX Ports)NA444410GBase-F SFP (MAX Ports)NANANANA201111NoYesYesYesYesStorage250 GB250 GB250 GB250 GB250 GBMemory / Max4/4 GB4/4 GB4/4 GB4/4 GB4/8 nsion SlotFail-Open/Bypass NIC OptionAdditional FeaturesLOM CardVirtual SystemsDefault/Max VS SupportedPhysicalEnclosureWeightDesktop1U1U1U1U2kg (4.4 lbs)4kg (8.82 lbs)7.5kg (16.53 lbs)7.5kg (16.53 lbs)7.6kg (16.76 lbs)NoNoNoNoOptional275WPowerDual, Hot-Swappable Power SuppliesPower InputSingle Power Supply Rating40W100W250W250WPower Consumption (Max)35W57W90W90W140WNoNoNoOptional3Optional3DC Option123100-240VAC, 47-63HzAssumes maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protectionWith memory upgrade and the GAiA OSVia a Solutions Center requestMay 11, 2016 2016 Check Point Software Technologies Ltd. All rights reserved.Classification: [Protected] — All rights reserved. 4
Appliance Comparison ChartSecurity Gateway Appliances (released before 2016 continued)1220012400126001350013800Enterprise GradeProduction Performance (Real-World Traffic Blend)1SecurityPower8111185205032003800Firewall (Gbps)6.29.11423.627.2Firewall and IPS (Gbps)1.282.113.585.76.4777718.3RFC 3511, 2544, 2647, 1242 performance tests (LAB)Firewall Throughput (Gbps)152530VPN Throughput (Gbps)2.53.5717IPS Recommended Profile (Gbps)2.53.567.89.6Connections Per Second (K)90110130178190Concurrent Sessions (M)52525228228210/100/1000Base-T/Max Ports8/1610/2614/2614/2614/261000Base-F SFP (MAX Ports)41212121210GBase-F SFP (MAX rk40GBase-F MAX PortsExpansion SlotFail-Open/Bypass NIC OptionAdditional FeaturesStorage1 1 500 GB1 1 500 GB2x500 GB RAID 12x500GB RAID 12x500GB RAID 1Memory / Max4/12 GB4/12 GB6/12 GB16/64 GB16/64 GBLOM 25/75275/1502150/2502150/25021U2U2U2U2U7.6kg (16.76 lbs)23.4kg (51.6 lbs)23.4kg (51.6 lbs)17.5 kg (38.6 lbs.)17.5 kg (38.6 lbs.)Optional2 AC2 AC2 AC2 AC600W600WVirtual SystemsDefault/Max VS SupportedPhysicalEnclosureWeightPowerHot-Swappable Power SuppliesPower InputSingle Power Supply RatingPower Consumption (Max)DC Option123100-240VAC, tional3Optional3OptionalOptionalAssumes maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protectionWith memory upgrade and the GAiA OSVia a Solutions Center requestMay 11, 2016 2016 Check Point Software Technologies Ltd. All rights reserved.Classification: [Protected] — All rights reserved. 5
Appliance Comparison ChartSecurity Gateway Appliances (released before 2016 continued)214002170021800Data Center GradeProduction Performance (Real-World Traffic Firewall 178/110178/11017/5011/5023.5/5011Firewall and IPS (Gbps)1RFC 3511, 2544, 2647, 1242 performance tests (LAB)Firewall Throughput (Gbps)VPN Throughput (Gbps)1IPS Recommended Profile 0/1000Base-T/Max Ports13/3713/3713/371000Base-F SFP (MAX Ports)36363610GBase-F SFP (MAX Ports)12131340GBase-F MAX PortsNANANA333NoNoNoConnections Per Second (K)Concurrent Sessions (M)NetworkExpansion SlotFail-Open/Bypass NIC OptionAdditional FeaturesStorage2x500 GB RAID 12x500GB RAID 12x500GB RAID 1Memory / Max12/24 GB16/64 GB16/64 GBLOM 022U2U2U26kg (57.4 lbs)26kg (57.4 lbs)26kg (57.4 lbs)2 AC2 ACVirtual SystemsDefault/Max VS SupportedPhysicalEnclosureWeightPowerHot-Swappable Power Supplies2 ACPower Input100-240VAC, 47-63HzSingle Power Supply RatingPower Consumption (Max)DC Option1With Security Acceleration ModuleMay 11, 20162With memory upgrade and the GAiA onal3Optional3Optional33Via a Solutions Center request 2016 Check Point Software Technologies Ltd. All rights reserved.Classification: [Protected] — All rights reserved. 6
Appliance Comparison ChartSecurity Systems4100061000Data Center, Telco, Carrier GradeProduction Performance (Real-World Traffic Blend)1SecurityPower3200 to 110003200 to 33000Firewall (Gbps)Up to 40Up to 120Firewall and IPS (Gbps)Up to 25Up to 70Firewall Throughput (Gbps)Up to 80Up to 400VPN Throughput (Gbps)Up to 40Up to 110IPS Recommended Profile (Gbps)Up to 44Up to 130Up to 1100Up to 3000Up to 80Up to 21010/100/1000Base-T/Max Ports14281000Base-F SFP (MAX Ports)142810GBase-F SFP (MAX Ports)3060240GBase-F MAX Ports482Expansion Slot614NoNoRFC 3511, 2544, 2647, 1242 performance tests (LAB)Connections Per Second (K)Concurrent Sessions (M)NetworkFail-Open/Bypass NIC OptionAdditional FeaturesStorage--Memory64 GB64 GBIncludedIncluded2502506U15UMax: 38.6kg (84.9 lbs)Max: 65.84kg (145.2 lbs)LOM CardVirtual SystemsMax VS SupportedPhysicalEnclosureWeightPowerHot-Swappable Power Supplies3 AC or 2 DCPower InputSingle Power Supply RatingPower Consumption (Max)DC Option124 AC or 2 DCSee data sheet1200W@110V;1500W@220V2500W @ 208V/230V,1500W @ 110V (USA),1300W @ 100V (Japan)2300W4900WYesYesAssumes maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protectionWith 4 x SSM160May 11, 2016 2016 Check Point Software Technologies Ltd. All rights reserved.Classification: [Protected] — All rights reserved. 7
Appliance Comparison ChartSmall Branch Office Security r28343775141194233Firewall (Mbps)2050100900110016001800Threat Prevention (Mbps)10255090150175220Firewall Throughput (Gbps)750 Mbps1.01.5223.24Connections Per Second (K)55518253040Concurrent Sessions (K)200200200500500500500VPN Throughput (Mbps)1401752202505005001000PerformanceLab (RFC 3511, 2544, 2647, 1242 Performance Tests)NetworkWireless Option802.11 b/g/n802.11 b/g/n/ac802.11 b/g/n and 802.11 n/acADSL2/ADSL2 (Annex A or B)Yes--10/100/1000Base-T/Max Ports10818Embedded GAiAEmbedded GAiAEmbedded GAiAYesYesYesMicro SDHC slotAdditional FeaturesSecurity Architecture3G, 4G Modem SupportSD Card SlotWeb-based ManagementCentral Management ModelSDMicro SDHC slotAvailableAvailableAvailableEnterprise Security ManagementEnterprise Security ManagementEnterprise Security ktop1.2kg (2.65 lbs)1.3kg (2.8 lbs)1.6kg (3.6 lbs)100/240VAC, 50-60Hz100/240VAC, 50-60Hz100/240VAC, 50-60HzPowerPower InputSingle Power Supply RatingPower Consumption (Max)May 11, 201612V/2A 24W - 12V/2.5A 30W (ADSL and Wi-Fi models)12V/3.33A 40W desktop adaptor12V/5.4A 65W desktop adaptor16.68W25W (non-Wi-Fi), 30W (Wi-Fi option)55W (non-Wi-Fi), 60W (Wi-Fi option) 2016 Check Point Software Technologies Ltd. All rights reserved.Classification: [Protected] — All rights reserved. 8
Appliance Comparison ChartRugged Appliances11200RProduction Performance (Real-World Traffic Blend)1SecurityPower49Firewall (Mbps)700Firewall and IPS (Mbps)60RFC 3511, 2544, 2647, 1242 performance tests (LAB)Firewall Throughput (Gbps)VPN Throughput (Mbps)2450Connections Per Second (K)10Concurrent Sessions (K)400Network10/100/1000Base-T (Max)61000Base-F (Max)2Additional Features3G/4GSerial Console PortMount OptionsCentral Management ModelYesYesDIN railEnterprise Security ManagementCertificationsIndustrialIEC 61850-3, IEEE 1613, IEC 60068-2Operating EnvironmentTemperatureHumidity-40 to167 F / -40 to 75 C20%-90% (non-condensing)PhysicalEnclosureWeightDesktop1.2 kg (2.65 lbs.)PowerAC100-240V, 50–60 HzDC12V-72V, -48V DCPower Consumption (Max)115WAlso see the [Siemens RUGGEDCOM APE (Application Processing Engine) Line Module]May 11, 2016 2016 Check Point Software Technologies Ltd. All rights reserved.Classification: [Protected] — All rights reserved. 9
Appliance Comparison ChartX-Series PlatformsX20X30X50X60X80-SPerformanceFirewall IMIX Chassis Throughput (Gbps)Up to 5Up to 10Up to 18Up to 70Up to 140XOS Stateful Connections Per SecondUp to 120KUp to 120KUp to 150KUp to 300KUp to 600KXOS Stateless Connections Per SecondNA (not enabled)NA (not enabled)Up to 220KUp to 550KUp to 1.1M8M8M18M70M100M10 x 1Gb SFP ports10 x 1Gb SFP ports;2 x 10Gb XFP portsUp to 16 x 10/1Gb SFP portsMaximum Concurrent ConnectionsNetworkInterfacesModules Support1 NPM-x, up to 2 APM-x, and 1 CPM-x (included)Maximum ModulesUp to 4Up to 32 x 1Gb SFP/10Gb SFP Up to 64 x 1Gb SFP/10Gb SFP (16 per NPM)(16 per NPM)Up to 2 NPM-x,Up to 4 NPM-x,up to 5 APM-x, up to 2 CPM-x up to 10 APM-x, up to 2 CPM-xUp to 7Up to 14Application Processor Module (APM) DetailsProcessors (per APM)System Memory (per APM)Disk Size (per APM)8 core4, 8 or 12 core optionsUp to 16 GBUp to 12 GBUp to 2 x 500GB SATA Hard Drives with RAID 1Up to 24 GBUp to 2 x 450GB SAS with RAID 1Additional FeaturesCheck Point SoftwareSupported Operating SystemHigh Availability OptionsSystem ManagementSecurity Gateway R77, R76, R75.40, R75.40VS, R75.20, R75, R71.10; Firewall-1 GX 5.0XOS 9.0.x, 9.5.x, 9.6.x and 9.7.xDual Box High Availability (DBHA) with another chassis of the same modelX-Series Management System (XMS), Greenlight Elelment Manager (GEM), Command line interface (CLI) with automated workflow system (AWS),SNMP v1 v2 v3 and NetFiow v5 v9 v10 supportPhysicalForm Factor / SizeEnvironmentCertificationChassis Regulatory ComplianceGreen IT Compliancy13.5” H, 17.5” W, 19” D29” H, 17.5” W, 17.5” DTemperature 0 to 40’ C (32-104’F); Humidity: 10%- 90% non-condensing; Altitude: 3048m (10,000ft.)FIPS 140-2 Certified; Under evaluation for Common Criteria EAL4 Network Equipment Building System (NEBS) Compliant;Under evaluation for Common Criteria EAL4 RoHS, UL 60950, IEC 950, FCC 47 CFR Part 15 Class A, EN 55022: EN 55024, VCCI V-3: AS/NZS 3548: 1995 : CNS 13438 C
Firewall (Gbps) 6.2 9.1 14 23.6 27.2 Firewall and IPS (Gbps) 1.28 2.11 3.58 5.7 6.4 RFC 3511, 2544, 2647, 1242 performance tests (LAB) Firewall Throughput (Gbps) 15 25 30 77 77 VPN Throughput (Gbps) 2.5 3.5 7 17 18.3 IPS Recommended Profile (Gbps) 2.5 3.5 6 7.8 9.6 Connections Per Second (K) 90 110 130 178 190 Concurrent Sessions (M) 5 25 25 28 .
