QUANTUM 16000 SECURITY GATEWAY

Quantum Security Gateway TM Advantage

Quantum Security Gateway Advantage

Protect larger environments
Greater resilience, faster operations
Handle more workloads

Check Point Quantum 16000 Next Generation Firewalls enables enterprises to deploy the industry’s leading threat prevention capabilities at all points of their infrastructure, scaling security almost infinitely according to their changing business needs. It also dramatically accelerates the efficiency of their security operations. This enables enterprises to prevent and block even the most advanced attacks, before they can disrupt business.

Always Protected against Gen V Attacks !

Highest caliber prevention !with unified security

Security at Hyperscale !

On-demand expansion !with hyperscalability

Efficient Operations !

Cut operation management !time by up to 80%

PERFORMANCE HIGHLIGHTS

Performance measured with enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

SPOTLIGHT

16000 SECURITY GATEWAY
!

1. RJ45, USB Type-C console port
2. Lights-out Management port
3. Sync 10/100/1000 Base-T port
4. 2x 480GB SSD RAID1
5. 2x USB 3.0 ports
6. Management 10/100/1000 Base-T port
7. Four network card expansion slots
8. 2x redundant hot-swap power supplies
9. 4x field replaceable fans

Prevent Known and Zero-day Threats
Zero-day protection offering network security with evasion-resistant malware detection and complete protection from the most advanced attacks, ensuring quick delivery of safe content to users.

High Performance Options

Purchase the affordable Plus package and get a base system plus two 4x 10Gb interface cards, transceivers, 2x AC power supplies, 2x 480 GB SSD drives and 64 GB of memory for high connection capacity.

Next Generation Firewall, Next Generation Threat Prevention and !Threat Prevention + SandBlast packages

All-inclusive Security Solutions

Check Point 16000 security gateways include all security technologies including the SandBlast (sandboxing) software package for one year. Purchase a renewal for NGFW, NGTP or SandBlast (SNBT) for subsequent years as you like.

100, 40 and 25 GbE Connectivity

If you’re ready to move from to 10 to 25, 40 or 100 GbE, so is the 16000 Next Generation Security Gateway. The 16000 Security Gateway lets you connect your 10 GbE server uplinks to your core network.

DATA CENTER GRADE PLATFORM

optional accessory

SPECIFICATIONS

Performance

Enterprise Test Conditions

RFC 3511, 2544, 2647, 1242 PERFORMANCE (LAB)

Firewall 1518B UDP (Gbps) 118

VPN AES-128 (Gbps) 17

Connections/sec 375,000

Concurrent connections³ 8/16/32

1. Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

2. Includes Firewall, Application Control and IPS. 3. Performance measured with Base/Plus/maximum memory.

Additional Features

Highlights

• 2x CPUs, 16 physical cores, 32 virtual cores

• 1x 1TB HDD or 480 GB SSD (2x in Plus)

• 1x AC power supplies, 2x in Plus (DC option)

• 32, 64 GB, 128 GB memory options

• Lights-Out-Management card (optional in Base package)

• Virtual Systems (Base/Plus/max mem): 60/250/250

Network Expansion Slot Options (2 of 4 slots open)

• 8x 10/100/1000Base-T RJ45 port card, up to 34 ports

• 4x 1000Base-F SFP port card, up to 16 ports

• 4x 10GBase-F SFP+ port card, up to 16 ports

• 2x 40G QSFP+ port card, up to 8 ports

• 2x 100/25G QSFP28 port card, up to 8 ports

Content Security

First Time Prevention Capabilities

• CPU-level, OS-level and static file analysis

• File disarm and reconstruction via Threat Extraction

• Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds

• Maximal file size for Emulation is 100 MB

• Emulation OS Support: Windows XP, 7, 8.1, 10

Applications

• Use 8,000+ pre-defined or customize your own applications

• Accept, prevent, schedule, and apply traffic-shaping

Data Loss Prevention

• Classify 700+ pre-defined data types

• End user and data owner incident handling

Content Security (continued)

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3^rd parties via a Web API

Dynamic User-based Policy

$$ 3^{\mathrm{r d}} $$

• Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android and Apple iOS platforms

Network

Network Connectivity

• Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)

• 802.3ad passive and active link aggregation

• Layer 2 (transparent) and Layer 3 (routing) mode

High Availability

• Active/Active L2, Active/Passive L2 and L3

• Session failover for routing change, device and link failure

• ClusterXL or VRRP

IPv6

• NAT66, NAT64, NAT46

• CoreXL, SecureXL, HA with VRRPv3

Unicast and Multicast Routing (see SK98226)

• Static routes, Multicast routes

• OSPFv2 and v3, BGP, RIP

• Policy-based routing

• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

Physical

Power Requirements

• Single Power Supply rating: 1300W

• Power input: 100 to 240V (47-63Hz), 40~-72VDC

• Power consumption avg/max : 190W/392W1

• Maximum thermal output AC¹: 1048 BTU/hr.

¹. base configuration, up to 800W/1337.6 BTU/hr. with max config

Dimensions

• Enclosure: 2RU

• Dimensions (WxDxH): 17.4 x 24 x 3.5 in. (442 x 610 x 88mm)

• Weight: 39.7 lbs. (18 kg)

Environmental Conditions

• Operating: 0° to 40°C, humidity 5% to 95%

• Storage: –20° to 70°C, humidity 5% to 95% at 60°C

Certifications

• Safety: UL, CB, CE, TUV GS

• Emissions: FCC, CE, VCCI, RCM/C-Tick

1 • Environmental: RoHS, WEEE, REACH¹, ISO14001

1 . factory certificate

ORDERING QUANTUM 16000 SECURITY GATEWAYS

INTERFACE CARDS AND TRANSCEIVERS

SPARES AND MISCELLANEOUS

¹ Renewal NGFW, NGTP and SandBlast (SNBT) packages are available in the online product catalog.