23800 SECURITY GATEWAY

!

Ready to battle any threat, from small to the fifth generation large scale and multi-vector attacks, our
security gateways provide superior threat prevention and a unified security management. Check Point
23800 Next Generation Firewall combines the most comprehensive protections with data center-grade
security and hardware to maximize uptime and performance for securing large enterprise and data
center environments.

The Most Advanced

Threat Prevention

Protection from unknown threats and
zero-day attacks

Full Security

Uncompromising Performance

Highly optimized with up to 16.4 Gbps of
threat prevention throughput

Designed to Secure

Encrypted Traffic

Powerful platforms for inspection
of SSL traffic

PERFORMANCE HIGHLIGHTS

Performance measured with enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

23800

Data center grade security, performance and reliability

The Check Point 23800 Next Generation Security Gateway combines the most comprehensive
security protections with data center grade hardware to maximize uptime while safeguarding
enterprise and data center networks.

The 23800 is a 2U Next Generation Security Gateways with five I/O expansion slots for high port
capacity, redundant AC or DC power supplies and fans, a 2x 1TB (HDD) or 2x 480GB (SSD) RAID1
disk array, and Lights-Out Management (LOM) for remote management. If you’re ready for 25, 40 or
100 GbE, so is the 23800 Next Generation Security Gateway - with its 40 and 100/25 GbE IO card
options.

Key Features & Benefits

• Advanced Threat Prevention ....... 1 time prevention of known and zero-day threats

! !

• Uncompromising Performance ....... Achieve up to 16.4 Gbps of threat prevention throughput

! !

• Secure Encrypted Traffic ………... Combine SSL inspection into one integrated security platform

! !

!

23800 SECURITY GATEWAY

!1 Graphic LCD display

!2 2 x 1TB (HDD) or 2x 480GB (SSD) RAID1

!

!3 Five network card expansion slots

!4 USB ports for ISO installation

!5 Console port

!6 Lights-Out Management port

!7 Sync 10/100/1000Base-T RJ45

!8 Management 10/100/1000Base-T RJ45

Prevent Known and Zero-day Threats
Zero-day protection offering network
security with evasion-resistant malware
detection and complete protection from
the most advanced attacks, ensuring
quick delivery of safe content to users.

All-inclusive Security Solutions
Check Point 23800 Next Generation
Security Gateway offers a complete and
consolidated security solution available
in two complete packages:

• Threat Prevention
• Threat Prevention + SandBlast

Inclusive High Performance Package
Purchase the affordable High
Performance Package (HPP). This
includes the base system plus two 4x
10GbE SFP+ interface cards,
transceivers and 64 GB of memory for
high connection capacity.

100, 40 and 25 GbE Connectivity
If you’re ready to move from 10 to 25,
40 or 100 GbE, so is the 23800 Next
Generation Security Gateway. The
23800 Security Gateway lets you
connect your 10 GbE server uplinks to
your core network.

DATA CENTER GRADE PLATFORM

Performance

Enterprise Testing Conditions

• 16.4 Gbps of Threat Prevention¹
• 20.4 Gbps of NGFW
• 21.5 Gbps IPS
• 65 Gbps of firewall throughput

Ideal Testing Conditions

• 128 Gbps of UDP 1518 byte packet firewall throughput
• 26 Gbps of AES-128 VPN throughput
• 320,000 connections per second, 64 byte response³
• 12.8/25.6/51.2M concurrent connections, 64 byte response³

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast
Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance
measured with default/HPP/maximum memory with R80.10.

Additional Features

Highlights

• 2x CPUs, 24x physical cores, 48x virtual cores (total)
• 2x 1TB HDD or 480GB SSD RAID1 storage
• 32, 64 and 128 GB memory options
• Lights-Out-Management card is Included
• Virtual Systems (base/HPP/max mem): 125/250/250

Network Expansion Slot Options (3 of 5 slots open)

• 8x 10/100/1000Base-T RJ45 port card, up to 40 ports
• 4x 1000Base-F SFP port card, up to 20 ports
• 4x 10GBase-F SFP+ port card, up to 20 ports
• 2x 40G QSFP+ port card, up to 10 ports
• 2x 100/25G QSFP28 port card, up to 10 ports

Fail-Open/Bypass Network Options

• 4x 10/100/1000Base-T RJ45 port card • 2x 10GBase-F SFP+ port card

Content Security

First Time Prevention Capabilities

• CPU-level, OS-level and static file analysis
• File disarm and reconstruction via Threat Extraction
• Average emulation time for unknown files that require full
sandbox evaluation is under 100 seconds

Applications

• Emulation OS Support: Windows XP, 7, 8.1, 10 • Maximal file size for Emulation is 100 MB
• Use 8,000+ pre-defined or customize your own applications

Data Loss Prevention

• Accept, prevent, schedule, and apply traffic-shaping
• Classify 700+ pre-defined data types
• End user and data owner incident handling

Dynamic User-based Policy

Network Connectivity

• Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems) • 802.3ad passive and active link aggregation • Layer 2 (transparent) and Layer 3 (routing) mode

High Availability

• Active/Active L2, Active/Passive L2 and L3 • Session failover for routing change, device and link failure • ClusterXL or VRRP

IPv6

• NAT66, NAT64, NAT46 • CoreXL, SecureXL, HA with VRRPv3

Unicast and Multicast Routing

• OSPFv2 and v3, BGP, RIP • Static routes, Multicast routes • Policy-based routing • PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

Physical

Power Requirements

• Single Power Supply rating: 800W
• AC power input: 90 to 264V (47-63Hz)
• DC input current: -40.5V/24A -48V/19.2A, -60V/16.0A
• Power consumption avg/max: AC253/399W, DC343.6/394W
• Maximum thermal output: 1361.4 BTU/hr.

Dimensions

• Enclosure: 2RU
• Dimensions (WxDxH): 17.4x20.84x3.5 in. (442x529x88mm)
• Weight: 34.8 lbs. (15.8 kg)

Environmental Conditions

• Operating: 0° to 40°C, humidity 5% to 95%
• Storage: –20° to 70°C, humidity 5% to 95% at 60°C

Certifications

• Safety: UL, CB, CE, TUV GS • Emissions: FCC, CE, VCCI, RCM/C-Tick • Environmental: RoHS, WEEE, REACH¹, ISO14001

ORDERING 23800 SECURITY GATEWAYS

INTERFACE CARDS AND TRANSCEIVERS

SPARES AND MISCELLANEOUS