Check Point 3800 Security Gateway Datasheet
QUANTUM 3800 SECURITY GATEWAY
Top Security Effectiveness
Leader with 99.7% malware block rate in Miercom NGFW Security Benchmark (2023)
Unified Management and Ops Efficiency
Increase protection and reduce TCO with a consolidated security architecture
Industry Recognition
- Named a Leader for the 23rd time in the Gartner® Magic Quadrant™ for Network Firewalls
- Named a Leader in the Forrester Wave™
AI Deep Learning powered threat prevention to secure branch offices
Check Point Quantum 3800 Next Generation Firewalls enables enterprises to deploy the industry’s leading threat prevention capabilities at all points of their infrastructure, including remote branch offices.
This enables enterprises to prevent and block even the most advanced attacks before they can disrupt business — greatly increasing the efficiency of their security operations.
PERFORMANCE HIGHLIGHTS
Firewall Next Gen Firewall
| Firewall | Next Gen Firewall | Threat Prevention |
|---|---|---|
| 3.6 Gbps | 3 Gbps | 1.5 Gbps |
SPOTLIGHT
38 00 SECURITY GATEWAY
- 5x 10/100/1000 Base-T ports
- Management 10/100/1000 Base-T port
- 2x USB 3.0 ports
- RJ45 console port
- USB Type-C console port
- 2x connectors to external power supply adaptors
The speed and sophistication of evasive zero-day DNS and phishing attacks requires AI Deep Learning to predict and block malicious behavior without human intervention. Quantum Firewalls use Check Point’s threat intelligence cloud 40+ AI/ML engines to block emerging threats that haven’t been seen before.
ENTERPRISE-GRADE PLATFORM
Best-in-class Security Management
Unified management across networks
| NGFW | NGTP | SNBT | |
|---|---|---|---|
| Firewall, VPN, Mobile Access | √ | √ | √ |
| Content Awareness | √ | √ | √ |
| Application Control | √ | √ | √ |
| Intrusion Prevention System | √ | √ | √ |
| URL Filtering | √ | √ | |
| Antivirus and Anti-Bot | √ | √ | |
| DNS Security | √ | √ | |
| Threat Emulation (sandboxing) | √ | ||
| Threat Extraction(CDR) | √ | ||
| Zero Phishing | √ |
| 1GbE(copper) | Memory | Redundant Power |
|---|---|---|
| 6 | 16GB |
Next Generation Firewall, Next Generation Threat Prevention and SandBlast packages
IoT Security
Quantum IoT Protect now provides autonomous threat prevention. Quantum Firewalls discover IoT assets, feed those to the IoT Cloud Service to automatically map IoT devices to profiles and then apply a zero-trust policy on the firewalls to prevent IoT threats in 5 minutes.
Security protects you when you’re connected. SD-WAN ensures you’re always connected, and the connection offers the best user experience for the lowest cost. Quantum SD-WAN in Quantum firewalls keeps you secure and connected.
SPECIFICATIONS
Performance
Enterprise Test Conditions
| Threat Prevention (“Gbps) | 1.5 |
|---|---|
| NGFW (“Gbps) | 3 |
| IPS (Gbps) | 3.3 |
| Firewall (Gbps) | 3.6 |
RFC 3511, 2544, 2647, 1242 Performance (Lab)
| Firewall 1518B UDP (Gbps) | 4 |
|---|---|
| VPN AES-128 (Gbps) | 2.75 |
| Connections/sec | 60,000 |
| Concurrent connections | 4M |
1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast
Zero-Day Protection with logging enabled. 2: Includes Firewall, Application Control and IPS with logging enabled.
Additional Features
Highlights
- 1x CPUs, 8 physical cores
- 1x 240 GB SSD storage
- 16 GB memory
- Virtual Systems (maximum): 10
Content Security
First Time Prevention Capabilities
- CPU-level, OS-level and static file analysis
- File disarm and reconstruction via Threat Extraction
- Maximal file size for Emulation is 100 MB
- Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds
Dynamic User-based Policy
- Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3 parties via a Web API
- Accept, prevent, schedule, and apply traffic shaping
Data Loss Prevention
Network Connectivity
- Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android and Apple iOS platforms
- Integrated SD-WAN network optimization and resilience
- Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)
- 802.3ad passive and active link aggregation
High Availability
- Active/Active L2, Active/Passive L2 and L3
- Session failover for routing change, device and link failure
- ClusterXL or VRRP
IPv6
- NAT66, NAT64, NAT46
- CoreXL, SecureXL, HA with VRRPv3
Unicast and Multicast Routing (see SK98226)
- Static routes, Multicast routes
- OSPFv2 and v3, BGP, RIP
- Policy-based routing
- PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
Physical
- Single Power Supply rating: 40W
Power Requirements
- Maximum thermal output: 123 BTU/hr.
- Power consumption avg/max: 30W/36W
- Maximum thermal output: 123 BTU/hr.
- Dimensions (WxDxH): 8.3 x 8.3 x 1.65 in. (210 x 210 x 42mm)
Environmental Conditions
- Emissions: FCC, CE, VCCI, RCM/C-Tick
- Safety: UL, CB, CE, TUV GS
- Storage: −20 to 70°C, humidity 5 to 95%
ORDERING QUANTUM 3800 SECURITY GATEWAYS
BASE CONFIGURATION
| BASE CONFIGURATION $^{1}$ | SKU |
|---|---|
| 3800 Security Gateway Configuration, includes 6x 1GbE copper ports, 16 GB RAM, 1 240 GB SSD, 1 external AC power adaptor, SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG3800-SNBT |
| Quantum IoT Network Protection for 1 year for 3800 appliances | CPSB-IOTP-3800-1Y |
| Quantum SD-WAN subscription for 1 year for 3800 appliances | CPSB-SDWAN-3800-1Y |
Includes 2 virtual systems (VS) - one management VS and one production/data VS. These are not additive or counted when adding additional VS licenses.
1 Renewal NGFW, NGTP and SandBlast (SNBT) packages are available in the online product catalog.
SPARES AND MISCELLANEOUS
| SPARES AND MISCELLANEOUS | SKU |
|---|---|
| Replacement/Additional Power Supply for 3600 and 3800 Security Gateways | CPAC-PSU-3600/3800 |
| Rack Mount kit for the 1500, 3600 and 3800 Security Gateways | CPAC-1500/3600/3800-RM-DUAL |
All-inclusive Security
| NGFW | NGTP | SNBT(SandBlast) | |
|---|---|---|---|
| Basic access control plus IPS | Prevent known threats | Prevent known and zero-day attacks | |
| Firewall | √ | √ | √ |
| VPN(IPsec) | √ | √ | √ |
| Mobile Access | √ | √ | √ |
| Identity Awareness | √ | √ | √ |
| Application Control | √ | √ | √ |
| Content Awareness | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering | √ | √ | |
| Anti-Bot | √ | √ | |
| Anti-Virus | √ | √ | |
| Anti-Spam | √ | √ | |
| DNS Security | √ | √ | |
| SandBlast Threat Emulation | √ | ||
| SandBlast Threat Extraction | √ | ||
| Zero Phishing | √ | ||
| IoT Network Protection | optional | optional | optional |
| SD-WAN Network Optimization | optional | optional | optional |
The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years. Optional security capabilities can be ordered a-la-carte or separately.