15600 SECURITY GATEWAY

!

The Check Point 15600 Next Generation Firewall is designed for high performance, reliability and
uncompromised security to combat even the most sophisticated 5th generation threats, making it ideal
for large enterprises and data center environments.

The Most Advanced

Threat Prevention

Protection from unknown threats and
zero-day attacks

Full Security

Uncompromising Performance

Highly optimized with up to 10.1 Gbps of
threat prevention throughput

Designed to Secure

Encrypted Traffic

Powerful platforms for inspection
of SSL traffic

PERFORMANCE HIGHLIGHTS

Performance measured with enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control,
and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

15600

Data center grade security, performance and reliability

The Check Point 15600 Next Generation Security Gateway combines the most comprehensive
security protections with data center grade hardware to maximize uptime while safeguarding
entprise and data center networks.

The 15600 is a 2U Next Generation Security Gateway with three I/O expansion slots for high port
capacity, redundant AC or DC power supplies and fans, a 2x 1TB (HDD) or 2x 480GB (SSD) RAID1
disk array, and Lights-Out Management (LOM) for remote management. If you’re ready for 25, 40, or
100 GbE, so is the 15600 Next Generation Security Gateway with the 40 and 100/25 GbE IO card
options.

Key Features & Benefits

st
Advanced Threat Prevention ….… 1 time prevention of known and zero-day threats
! !

! ! Uncompromising Performance.… Achieve up to 10.1 Gbps of threat prevention throughput
! ! !

! ! Secure Encrypted Traffic ………... Consolidate SSL inspection into one integrated security platform
! ! !

!

SPOTLIGHT

15600 SECURITY GATEWAY

!1 Graphic LCD display

!2 2 x 1 TB (HDD) or 2x 480GB (SSD) RAID1 !

!3 Three network card expansion slots

!4 USB ports for ISO installation

!5 Console port

!6 Lights-Out Management port

!7 Sync 10/100/1000Base-T RJ45

!8 Management 10/100/1000Base-T RJ45

Prevent Known and Zero-day Threats
Zero-day protection offering network
security with evasion-resistant malware
detection and complete protection from
the most advanced attacks, ensuring
quick delivery of safe content to users.

All-inclusive Security Solutions
Check Point 15600 Next Generation
Security Gateway offers a complete and
consolidated security solution available
in two complete packages:

v Threat Prevention

v Threat Prevention + SandBlast

Inclusive High Performance Package
Purchase the affordable High
Performance Package (HPP). This
includes the base system plus one 4x
10GbE SFP+ interface cards,
transceivers and 32 GB of memory for
high connection capacity.

100, 40 and 25 GbE Connectivity
If you’re ready to move from 10 to 25,
40 or 100 GbE, so is the 15600 Next
Generation Security Gateway. The
15600 Security Gateway lets you
connect your 10 GbE server uplinks to
your core network.

DATA CENTER GRADE PLATFORM

WELCOME TO THE FUTURE OF CYBER SECURITY

Performance

Enterprise Testing Conditions

• 10.1 Gbps of Threat Prevention¹

• 12.6 Gbps of NGFW

• 13.5 Gbps IPS

• 41.2 Gbps of firewall throughput

Ideal Testing Conditions

• 76 Gbps of UDP 1518 byte packet firewall throughput

• 15.8 Gbps of AES-128 VPN throughput

• 6.4/12.8/25.6M concurrent connections, 64 byte response³

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast
Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance
measured with default/HPP/maximum memory with R80.10.

Additional Features

Highlights

• 2x CPUs, 16x physical cores, 32x virtual cores (total)

• 2x 1TB HDD or 480GB SSD RAID1 storage

• 16, 32 and 64 GB memory options

• Lights-Out-Management card is Included

• Virtual Systems (base/HPP/max mem): 60/80/125

Network Expansion Slot Options (1 of 3 slots open)

• 8x 10/100/1000Base-T RJ45 port card, up to 24 ports

• 4x 1000Base-F SFP port card, up to 12 ports

• 4x 10GBase-F SFP+ port card, up to 12 ports

• 2x 40G QSFP+ port card, up to 6 ports

• 2x 100/25G QSFP28 port card, up to 6 ports

Fail-Open/Bypass Network Options

• 4x 10/100/1000Base-T RJ45 port card

• 2x 10GBase-F SFP+ port card

Content Security

First Time Prevention Capabilities

• CPU-level, OS-level and static file analysis

• File disarm and reconstruction via Threat Extraction

• Average emulation time for unknown files that require full
sandbox evaluation is under 100 seconds

• Emulation OS Support: Windows XP, 7, 8.1, 10

• Maximal file size for Emulation is 100 MB

Applications

• Use 8,000+ pre-defined or customize your own applications

Data Loss Prevention

• Accept, prevent, schedule, and apply traffic-shaping

• Classify 700+ pre-defined data types

• End user and data owner incident handling

Content Security (continued)

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid,
Terminal Servers and with 3 parties via a Web API

Dynamic User-based Policy

$$ 3^{\mathrm{r d}} $$

• Enforce consistent policy for local and remote users on
Windows, macOS, Linux, Android and Apple iOS platforms

Network

Network Connectivity

• Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)

• 802.3ad passive and active link aggregation

• Layer 2 (transparent) and Layer 3 (routing) mode

High Availability

• Active/Active L2, Active/Passive L2 and L3

• Session failover for routing change, device and link failure

• ClusterXL or VRRP

IPv6

• NAT66, NAT64, NAT46

• CoreXL, SecureXL, HA with VRRPv3

Unicast and Multicast Routing (see SK98226)

• OSPFv2 and v3, BGP, RIP

• Static routes, Multicast routes

• Policy-based routing

• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

Physical

Power Requirements

• Single Power Supply rating: AC(600W), DC(800W)

• AC power input: 90 to 264V (47-63Hz)

• DC input current: -40.5V/24A -48V/19.2A, -60V/16.0A

• Power consumption avg/max: AC220/297W, DC225/297W

• Maximum thermal output: 1013.4 BTU/hr.

Dimensions

• Enclosure: 2RU

• Dimensions (WxDxH): 17.4x20.84x3.5 in. (442x529x88mm)

• Weight: 31.5 lbs. (14.3 kg)

Environmental Conditions

• Operating: 0° to 40°C, humidity 5% to 95%

$$ 40^{\circ}\mathrm{C} $$

• Storage: –20° to 70°C, humidity 5% to 95% at 60°C

Certifications

• Safety: UL, CB, CE, TUV GS

• Emissions: FCC, CE, VCCI, RCM/C-Tick

1 • Environmental: RoHS, WEEE, REACH¹, ISO14001

1. factory certificate

WELCOME TO THE FUTURE OF CYBER SECURITY

ORDERING 15600 SECURITY GATEWAYS

INTERFACE CARDS AND TRANSCEIVERS

SPARES AND MISCELLANEOUS

¹ 2 and 3 year and Virtual Systems packages also available in the online product catalog.