Check Point 5100 Security Gateway Datasheet

5100 SECURITY GATEWAY

End Of Sale December 31st 2020

Check Point’s 5100 Next Generation Firewall offers a fully integrated, unified solution tuned to deliver maximum security against 5th generation threats without compromising performance. 5100 Security Gateway provides the most advanced threat prevention security for demanding enterprise networks.

The Most Advanced Threat Prevention

Equipped with our SandBlast technology, protecting against unknown threats and zero-day attacks.

Full Security Uncompromising Performance

Gen II Security Firewall	Gen III Security NGFW¹	Gen V Security Threat Prevention + SandBlast²
6.45Gbps	2.1Gbps	1.01Gbps

PERFORMANCE HIGHLIGHTS

Designed to Secure Encrypted Traffic

Performance measured with enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

Powerful platforms for inspection of SSL traffic

5100 Security Gateway | Datasheet

5100

Enterprise-grade security, performance and reliability The Check Point 5100 Next Generation Security Gateway combines the most comprehensive security protections to safeguard your small enterprise and branch office deployments.

The 5100 is a 1U Next Generation Security Gateway with one I/O expansion slot for higher port capacity, an AC or DC power supply, a 1TB (HDD) or 240GB (SSD) disk, and optional Lights-Out Management (LOM) for remote management. This powerful Next Generation Security Gateway is optimized to deliver real-world threat prevention to secure your critical assets and environments.

Key Features & Benefits

Advanced Threat Prevention

1st time prevention of known and zero-day threats

Uncompromising Performance

Achieve up to 1.01 Gbps of threat prevention throughput

Secure Encrypted Traffic

Consolidate SSL inspection into one integrated security platform.

5100 SECURITY GATEWAY

Management 10/100/1000Base-T RJ45 port
RJ45/micro USB console port
One network card expansion slot
5x 10/100/1000Base-T RJ45 ports
2x USB ports for ISO installation
Lights-Out Management port

Prevent Known and Zero-day Threats Zero-day protection offering network security with evasion-resistant malware detection and complete protection from the most advanced attacks, ensuring quick delivery of safe content to users.

NETWORK

All-inclusive Security Solutions

Check Point 5100 Next Generation Security Gateway offers a complete and consolidated security solution available in two complete packages:

Threat Prevention
Threat Prevention + SandBlast

Integrated Security Management

5100 Security Appliances with the HDD option can manage itself and one adjacent appliance in a high availability deployment. Or manage the gateways via central unified management.

		1GbE(copper)	1GbE(fiber)	Memory	LOM
5100	Base	6	0	8GB	○
HPP	6	4	16GB	●
Maximums	14	4	16GB	●

ENTERPRISE-GRADE PLATFORM

Remote Management and Monitoring

A Lights-Out-Management (LOM) card provides out-of-band remote management to remotely diagnose, start, restart and manage the appliance from a remote location. Also use the LOM web interface to remotely install an OS image from an ISO file.

Performance

Enterprise Testing Conditions

2.1 Gbps of NGFW
2.45 Gbps IPS
1.01 Gbps of Threat Prevention¹

Ideal Testing Conditions

14.5 Gbps of UDP 1518 byte packet firewall throughput
1.6 Gbps of AES-128 VPN throughput
110,000 connections per second, 64 byte response³
3.2/6.4M concurrent connections, 64 byte response³

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance measured with default/maximum memory with R80.10.

Additional Features

1x CPUs, 2x physical cores (total)
Highlights
1x 1TB HDD or 240GB SSD storage
8 and 16 GB memory options
1x AC or DC power supply
Lights-Out-Management card is optional

Network Expansion Slot Options (1 of 1 slots open)

4x 1000Base-F SFP port card, up to 4 ports

Fail-Open/Bypass Network Options

4x 10/100/1000Base-T RJ45 port card
CPU-level, OS-level and static file analysis
Use 8,000+ pre-defined or customize your own applications
Maximal file size for Emulation is 100 MB
Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds

Content Security (continued)

File disarm and reconstruction via Threat Extraction
Dynamic User-based Policy
Classify 700+ pre-defined data types
Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3rd parties via a Web API

Applications

Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android and Apple iOS platforms

Network Connectivity

Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)
802.3ad passive and active link aggregation
Layer 2 (transparent) and Layer 3 (routing) mode

High Availability

Active/Active L2, Active/Passive L2 and L3
Session failover for routing change, device and link failure
ClusterXL or VRRP

IPv6

CoreXL, SecureXL, HA with VRRPv3
Unicast and Multicast Routing (see SK98226)
NAT66, NAT64, NAT46
OSPFv2 and v3, BGP, RIP
Static routes, Multicast routes
Policy-based routing
PIM- SM, PIM- SSM, PIM- DM, IGMP v2, and v3

Physical

Power Requirements

Single Power Supply rating: 250W/300W
AC power input: 90 to 264V (47-63Hz)
Maximum thermal output: 214.6 BTU/hr.

Dimensions

Dimensions (WxDxH): 17.2x16x1.73 in.(438x406.5x44mm)
Emissions: FCC, CE, VCCI, RCM/C-Tick

Safety

Safety: UL, CB, CE, TUV GS

Certifications

Environmental: RoHS, WEEE, REACH¹, ISO14001

ORDERING 5100 SECURITY GATEWAYS

BASE CONFIGURATION

BASE CONFIGURATION1	SKU
5100 Next Generation Security Gateway Base Configuration, includes 6x1GbE copper ports,8GB RAM,1 HDD,1 AC Power Unit,Next Generation Threat Prevention(NGTP)Security Subscription Package for1 Year	CPAP-SG5100-NGTP
5100 SandBlast Next Generation Security Gateway Base Configuration,includes 6x1GbE copper ports,8GBRAM,1 HDD,1 AC Power Unit,SandBlast(NGTX)Security Subscription Package for1Year	CPAP-SG5100-NGTX
HPP CONFIGURATION1	SKU
5100 Next Generation Security Gateway with High Performance Package,includes 6x1GbE copper ports,4x1Gb SFP ports,4 SR transceivers,16 GB RAM,1 HDD,1 AC Power Unit,Lights Out Management(LOM),Next Generation Threat Prevention(NGTP)Security Subscription Package for1Year	CPAP-SG5100-NGTP-HPP
5100 Next Generation Security Gateway with High Performance Package,includes 6x1GbE copper ports,4x1Gb SFP ports,4 SR transceivers,16 GB RAM,1 HDD,1 AC Power Unit,Lights Out Management(LOM),Next Generation Threat Extraction(SandBlast)Security Subscription Package for1Year	CPAP-SG5100-NGTX-HPP

HPP CONFIGURATION

1 2 and 3 year, Virtual Systems packages and DC power options also available in the online product catalog

Accessories

INTERFACE CARDS AND TRANSCEIVERS

INTERFACE CARDS AND TRANSCEIVERS
8 Port 10/100/1000 Base-T RJ45 interface card	CPAC-8-1C-B
4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers	CPAC-4-1F-B
SFP transceiver module for 1G fiber ports - long range(1000Base-LX)	CPAC-TR-1LX-B
SFP transceiver module for 1G fiber ports - short range(1000Base-SX)	CPAC-TR-1SX-B
SFP transceiver to 1000 Base-T RJ45(Copper)	CPAC-TR-1T-B
4 Port 1GE copper Bypass(Fail-Open) network interface card(10/100/1000 Base-T)	CPAC-4-1C-BP-B
MEMORY	SKU
Memory upgrade kit from 8GB to 16GB for 5100 appliance	CPAC-RAM8GB-5000
SPARES AND MISCELLANEOUS	SKU
Lights Out Management module	CPAC-LOM-B
Slide rails for 5000 Appliances(22”-32”)	CPAC-RAILS-5000
Extended slide rails for 5000 Appliances(24”-36”)	CPAC-RAILS-EXT-5000

MEMORY

SPARES AND MISCELLANEOUS

Note: for returns of existing security gateways via the RMA process, a 500GB HDD is available.