Check Point 15400 Security Gateway Datasheet

15400 SECURITY GATEWAY

!

The Check Point 15400 Next Generation Firewall is designed for high performance, reliability and
uncompromised security to combat even the most sophisticated 5th generation threats, making it ideal
for large enterprises and data center environments.

The Most Advanced

Threat Prevention

Protection from unknown threats and
zero-day attacks

Full Security

Uncompromising Performance

Highly optimized with up to 6.4 Gbps of
threat prevention throughput

! Designed to Secure Encrypted Traffic

Powerful platforms for inspection
of SSL traffic

PERFORMANCE HIGHLIGHTS

Performance measured with enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control,
and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

15400

Data center grade security, performance and reliability

The Check Point 15400 Next Generation Security Gateway combines the most comprehensive
security protections with data center grade hardware to maximize uptime while safeguarding
entprise and data center networks.

The 15400 is a 2U Next Generation Security Gateway with three I/O expansion slots for high port
capacity, redundant AC or DC power supplies and fans, an optional 2x 1TB (HDD) or 2x 480GB
(SSD) RAID1 disk array, and Lights-Out Management (LOM) for remote management. If you’re ready
for 25, 40, or 100 GbE, so is the 15400 Next Generation Security Gateway with the 40 and 100/25
GbE IO card options.

Key Features & Benefits

• Advanced Threat Prevention ....… 1 time prevention of known and zero-day threats
  ! !

! !

! !

• Uncompromising Performance.… Achieve up to 6.4 Gbps of threat prevention throughput
  ! !

! ! ! !

• Secure Encrypted Traffic ………... Consolidate SSL inspection into one integrated security platform
  !

SPOTLIGHT

15400 SECURITY GATEWAY

!1 Graphic LCD display
!2 2 x 1 TB (HDD) or 2x 480GB (SSD) RAID1
!

!3 Three network card expansion slots
!4 USB ports for ISO installation
!5 Console port

!6 Lights-Out Management port
!7 Sync 10/100/1000Base-T RJ45
!8 Management 10/100/1000Base-T RJ45

Prevent Known and Zero-day Threats
Zero-day protection offering network
security with evasion-resistant malware
detection and complete protection from
the most advanced attacks, ensuring
quick delivery of safe content to users.

All-inclusive Security Solutions
Check Point 15400 Next Generation
Security Gateway offers a complete and
consolidated security solution available
in two complete packages:

• Threat Prevention
• Threat Prevention + SandBlast

Inclusive High Performance Package
Purchase the affordable High
Performance Package (HPP). This
includes the base system plus one 4x
10GbE SFP+ interface cards,
transceivers, 2x 1TB (HDD) or 2x
480GB (SSD) storage and 24 GB of
memory for high connection capacity.

100, 40 and 25 GbE Connectivity
If you’re ready to move from 10 to 25,
40 or 100 GbE, so is the 15400 Next
Generation Security Gateway. The
15400 Security Gateway lets you
connect your 10 GbE server uplinks to
your core network.

DATA CENTER GRADE PLATFORM

Performance

Enterprise Testing Conditions

1
• 6.4 Gbps of Threat Prevention

2
• 7.6 Gbps of NGFW

• 8 Gbps IPS

• 33.5 Gbps of firewall throughput

Ideal Testing Conditions

• 58 Gbps of UDP 1518 byte packet firewall throughput

• 10.8 Gbps of AES-128 VPN throughput

• 3.2/6.4/25.6M concurrent connections, 64 byte response³

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast
Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance
measured with default/HPP/maximum memory with R80.10.

Additional Features

Highlights

• 1x CPUs, 8x physical cores, 16x virtual cores (total)

• 1x 1TB HDD or 480GB SSD storage (2x RAID1 option)

• 8, 24 and 64 GB memory options

• Lights-Out-Management card is Included

• Virtual Systems (base/HPP/max mem): 10/40/40

Network Expansion Slot Options (1 of 3 slots open)

• 8x 10/100/1000Base-T RJ45 port card, up to 24 ports

• 4x 1000Base-F SFP port card, up to 12 ports

• 4x 10GBase-F SFP+ port card, up to 12 ports

• 2x 40G QSFP+ port card, up to 6 ports

• 2x 100/25G QSFP28 port card, up to 6 ports

Fail-Open/Bypass Network Options

• 4x 10/100/1000Base-T RJ45 port card

• 2x 10GBase-F SFP+ port card

Content Security

First Time Prevention Capabilities

• CPU-level, OS-level and static file analysis

• File disarm and reconstruction via Threat Extraction

• Average emulation time for unknown files that require full
sandbox evaluation is under 100 seconds

• Emulation OS Support: Windows XP, 7, 8.1, 10

• Maximal file size for Emulation is 100 MB

Applications

• Use 8,000+ pre-defined or customize your own applications

Data Loss Prevention

• Accept, prevent, schedule, and apply traffic-shaping

• Classify 700+ pre-defined data types

• End user and data owner incident handling

Content Security (continued)

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3 parties via a Web API

Dynamic User-based Policy

$$ 3^{\mathrm{r d}} $$

• Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android and Apple iOS platforms

Network

Network Connectivity

• Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)

• 802.3ad passive and active link aggregation

• Layer 2 (transparent) and Layer 3 (routing) mode

High Availability

• Active/Active L2, Active/Passive L2 and L3

• Session failover for routing change, device and link failure

• ClusterXL or VRRP

IPv6

• NAT66, NAT64, NAT46

• CoreXL, SecureXL, HA with VRRPv3

Unicast and Multicast Routing (see SK98226)

• OSPFv2 and v3, BGP, RIP

• Static routes, Multicast routes

• Policy-based routing

• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

Physical

Power Requirements

• Single Power Supply rating: AC(550W), DC(800W)

• AC power input: 90 to 264V (47-63Hz)

• DC input current: -40.5V/24A -48V/19.2A, -60V/16.0A

• Power consumption avg/max AC111.9/263W,AC225.2/258W

• Maximum thermal output: 897.4 BTU/hr.

Dimensions

• Enclosure: 2RU

• Dimensions (WxDxH): 17.4x20.84x3.5 in. (442x529x88mm)

• Weight: 31.5 lbs. (14.3 kg)

Environmental Conditions

• Operating: 0° to 40°C, humidity 5% to 95%

$$ 40^{ullet} ext{C} $$

• Storage: –20° to 70°C, humidity 5% to 95% at 60°C

Certifications

• Safety: UL, CB, CE, TUV GS

• Emissions: FCC, CE, VCCI, RCM/C-Tick

• Environmental: RoHS, WEEE, REACH¹, ISO14001

ORDERING 15400 SECURITY GATEWAYS

INTERFACE CARDS AND TRANSCEIVERS

SPARES AND MISCELLANEOUS