# 3200 SECURITY GATEWAY

## End Of Sale December 31st 2020

Check Point 3200 Next Generation Firewall offers an enterprise-grade security against 5th generation threats. 3200 Security Gateway leverages multi-core design and industry-leading performance – all in a compact form factor ideal for branch and small office deployments.

## The Most Advanced Threat Prevention

- **Full Security** 
- **Uncompromising Performance**  
- Protection from unknown threats and zero-day attacks
- Designed to Secure Encrypted Traffic

## PERFORMANCE HIGHLIGHTS

| Gen II Security Firewall | Gen III Security NGFW¹ | Gen V Security Threat Prevention+SandBlast² |
| --- | --- | --- |
| 4Gbps | 1.15Gbps | 580Mbps |

Performance measured with enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

Highly optimized with up to 580 Mbps of threat prevention throughput.

Powerful platforms for inspection of SSL traffic.

---

## WELCOME TO THE FUTURE OF CYBER SECURITY

The Check Point 3200 Next Generation Security Gateway combines the most comprehensive security protections to safeguard your branch and small office deployments.

The 3200 Next Generation Security Gateway is available in a compact desktop form factor with 240GB of SSD storage. This powerful Next Generation Security Gateway is optimized to deliver real-world threat prevention to secure your critical assets and environments.

## Key Features & Benefits

- **Advanced Threat Prevention**: 1 time prevention of known and zero-day threats.
- **Uncompromising Performance**: Achieve up to 580 Mbps of threat prevention throughput.
- **Secure Encrypted Traffic**: Consolidate SSL inspection into one integrated security platform.

## THE CYBER SECURITY ARCHITECTURE OF THE FUTURE

Blocking the most sophisticated attacks before they infiltrate the network.

---

## 3200 SECURITY GATEWAY

1. Management 10/100/1000Base-T RJ45 port  
2. 5x 10/100/1000Base-T RJ45 ports  
3. 2x USB ports for ISO installation  
4. RJ45/micro USB console port  
5. Power connector

### Prevent Known and Zero-day Threats

Zero-day protection offering network security with evasion-resistant malware detection and complete protection from the most advanced attacks, ensuring quick delivery of safe content to users.

## NETWORK

### All-inclusive Security Solutions

Check Point 3200 Next Generation Security Gateway offers a complete and consolidated security solution available in two complete packages:  
- Threat Prevention  
- Threat Prevention + SandBlast

### Prevent First

Unlike other integrated solutions on the market that rely on processing shortcuts such as scanning traffic in one direction, scanning only the beginning of the packet or are limited to a small set of apps or data types or file sizes, Check Point doesn’t need to trade security for performance.

### Best-in-class Security Management

With one console, security teams can manage all aspects of security from policy to threat prevention – across the entire organization – on both physical and virtual environments. Consolidated management means increased operational efficiency.

## ORDERING 3200 SECURITY GATEWAYS

| BASE CONFIGURATION | SKU |
| --- | --- |
| 3200 Next Generation Security Gateway Base Configuration, includes 6x1GbE copper ports,8GB RAM,1 SSD,1 AC Power Unit,Next Generation Threat Prevention(NGTP)Security Subscription Package for 1 Year. | CPAP-SG3200-NGTP-SSD |
| 3200 SandBlast Next Generation Security Gateway Base Configuration, includes 6x1GbE copper ports,8GB RAM,1 SSD,1 AC Power Unit,SandBlast(NGTX)Security Subscription Package for 1 Year | CPAP-SG3200-NGTX-SSD |
| SPARES AND MISCELLANEOUS | SKU |
| Replacement Power Supply for 3000 Security Gateways | CPAC-PSU-3000 |
| Single/Dual chassis Rack Shelf for 3000 Security Gateways | CPAC-RM-DUAL-3000 |

3200 Next Generation Security Gateway Base Configuration, includes 6x1GbE copper ports, 8GB RAM, 1 SSD, CPAP-SG3200-NGTP-SSD. 1 AC Power Unit, Next Generation Threat Prevention (NGTP) Security Subscription Package for 1 Year.

---

## Performance

### Enterprise Testing Conditions

- 580 Mbps of Threat Prevention¹
- 1.15 Gbps of NGFW²
- 1.44 Gbps IPS
- 4 Gbps of firewall throughput

### Ideal Testing Conditions

- 4 Gbps of UDP 1518 byte packet firewall throughput
- 48,000 connections per second, 64 byte response³
- 3.2M concurrent connections, 64 byte response³

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.
2: Includes Firewall, Application Control and IPS. 3: Tested with R80.10.

### Additional Features Highlights

- 1x CPUs, 4x physical cores (total)
- 1x 240GB SSD storage
- 8 GB memory

### Content Security

#### First Time Prevention Capabilities

- CPU-level, OS-level and static file analysis
- File disarm and reconstruction via Threat Extraction
- Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds
- Maximal file size for Emulation is 100 MB
- Emulation OS Support: Windows XP, 7, 8.1, 10

### Applications

- End user and data owner incident handling
- Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3rd parties via a Web API 
- Enforce consistent policy for local and remote users on Data Loss Prevention
- Use 8,000+ pre-defined or customize your own applications
- Accept, prevent, schedule, and apply traffic-shaping

### Network

- Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)

### Network Connectivity

- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode

### High Availability

- Active/Active L2, Active/Passive L2 and L3
- Session failover for routing change, device and link failure

### IPv6

- ClusterXL or VRRP
- PIM- SM, PIM- SSM, PIM- DM, IGMP v2, and v3
- NAT66, NAT64, NAT46
- CoreXL, SecureXL, HA with VRRPv3
- Policy-based routing
- OSPFv2 and v3, BGP, RIP
- Static routes, Multicast routes

### Physical

- Single Power Supply rating: 40W
- AC power input: 90 to 264V (47-63Hz)
- Power consumption max: 29.5W
- Maximum thermal output: 100.7 BTU/hr.

### Dimensions

- Enclosure: 1RU
- Dimensions (WxDxH): 8.3x8.3x1.65 in. (210x210x41.9mm)

### Environmental Conditions

- Operating: 0° to 40°C, humidity 5% to 95% 
- Environmental: RoHS, WEEE, REACH, ISO14001.
