QUANTUM 28000 SECURITY GATEWAY

AI ML powered Threat Prevention Protect networks and users from zero-days, phishing, DNS, and ransomware attacks.

Named a Leader in the For Enterprise Firewalls Q4 20 awarded the Frost & Sullivan Company of the Year.

Unified Management and Ops Efficiency

Increase protection and reduce TCO with a consolidated security architecture.

Industry Recognition

Named a Leader for the 2 Gartner Magic Quadrant Firewalls.

AI Deep Learning powered threat prevention to secure enterprise data centers

Check Point Quantum 28000 Next Generation Firewalls enable enterprises to deploy the industry's leading threat prevention capabilities at all points of their infrastructure, scaling security according to their changing business needs. This enables enterprises to prevent and block even the most advanced attacks before they can disrupt business, greatly increasing the efficiency of their security operations.

PERFORMANCE HIGHLIGHTS

SPOTLIGHT

28000 SECURITY GATEWAY

1. RJ45 and USB Type-C console ports
2. Lights-out Management port
3. 2x USB 3.0 ports
4. Sync 10/100/1000 Base-T port
5. ESD ground point
6. 2x 480GB SSD RAID1
7. Management 10/100/1000 Base-T port
8. Eight network card expansion slots 3x redundant power supplies (back view not shown) 4x field replaceable fans (back view not shown)

AI Deep Learning Threat Prevention

If you're ready to move from 10 to 25, 40 or 100 GbE, so is the 28000 Next Generation Security Gateway. The 28000 Security Gateway lets you connect your 10 GbE server uplinks to your core network.

Next Generation Firewall, Next Generation Threat Prevention and SandBlast packages

Security protects you when you're connected. SD-WAN ensures you're always connected, and the connection offers the best user experience for the lowest cost. Quantum SD-WAN in Quantum firewalls keeps you secure and connected.

IoT Security

Quantum IoT Protect now provides autonomous threat prevention. Quantum Firewalls discover IoT assets, feed those to the IoT Cloud Service to automatically map IoT devices to profiles and then apply a zero-trust policy on the firewalls to prevent IoT threats in 5 minutes.

Integrated SD-WAN

optional accessory Remote Management and Monitoring A Lights-Out-Management [LOM] card provides out-of-band management to remotely diagnose, start, restart, and manage the appliance from a remote location.

SPECIFICATIONS

Enterprise Test Conditions

RFC 3511, 2544, 2647, 1242 Performance (Lab)

1. Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection with logging enabled. 2. Includes Firewall, Application Control and IPS with logging enabled. 3. Performance measured with Base/Plus/maximum memory.

Additional Features

• 2x CPUs, 36 physical cores, 72 virtual cores (total)

Highlights

• 1x 480GB SSD, (2x in Plus package) • 3x AC power supplies (DC option) • 64, 96 and 128 GB memory options • Lights-Out-Management card (optional in Base package) • Virtual Systems (base/ PLUS /max mem): 125/250/250

Network Expansion Slot Options

(7 of 8 slots open)

First Time Prevention Capabilities

• 4x 10GBase-F SFP+ port card, up to 32 ports • 2x 100/ 40/ 25G QSFP28 port double-slot - width card, up to 8 ports • Emulation OS Support: Windows XP, 7, 8.1, 10

Applications

• Use 10,000+ pre-defined or customize your own applications

Data Loss Prevention

• Classify 700+ pre-defined data types • File disarm and reconstruction via Threat Extraction

Dynamic User-based Policy

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3 parties via a Web API • Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android and Apple iOS platforms

Network Connectivity

• Integrated SD-WAN network optimization and resilience • Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems) • Layer 2 (transparent) and Layer 3 (routing) mode

High Availability

• Active/Active L2, Active/Passive L2 and L3 • ClusterXL or VRRP

IPv6

• NAT66, NAT64, NAT46 • CoreXL, SecureXL, HA with VRRPv3

Unicast and Multicast Routing (see SK98226)

• OSPFv2 and v3, BGP, RIP • Static routes, Multicast routes • Policy-based routing • PIM- SM, PIM- SSM, PIM- DM, IGMP v2, and v3

Physical

Power Requirements

• Operating: 0° to 40°C, humidity 5% to 95% • Power input: 100 to 240V (47-63Hz), 40~-72VDC

$$ 0 ^ {\circ} $$

• Storage: – 20° to 70°C, humidity 5% to 95% at 60°C

$$ 4 0 ^ {\circ} \mathrm {C} $$

• Enclosure: 3RU • Weight: 46.3 lbs. (21 kg)

Certifications

• Emissions: FCC, CE, VCCI, RCM/C-Tick

$$

• 2 0 ^ {\circ} $$

$$ 7 0 ^ {\circ} \mathrm {C} $$

1 1 • Environmental: RoHS, WEEE, REACH, ISO14001

ORDERING QUANTUM 28000 SECURITY GATEWAYS

1. SECURITY APPLIANCE

The Base package includes 2 virtual systems (VS) - one management VS and one production/data VS. These are not additive or counted when adding additional VS licenses. Plus includes 5 VS licenses which are additive when adding additional VS licenses. 1 Renewal NGFW, NGTP and SandBlast (SNBT) packages are available.

© 2024 Check Point Software Technologies Ltd. All rights reserved.

WELCOME TO THE FUTURE OF CYBER SECURITY

FAIL-OPEN NETWORK INTERFACE CARDS

MEMORY

SPARES AND MISCELLANEOUS

WELCOME TO THE FUTURE OF CYBER SECURITY

All-inclusive Security

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years. Optional security capabilities can be ordered a-la-carte or separately.