# 5100 SECURITY GATEWAY **End Of Sale December 31st 2020** Check Point’s 5100 Next Generation Firewall offers a fully integrated, unified solution tuned to deliver maximum security against 5th generation threats without compromising performance. 5100 Security Gateway provides the most advanced threat prevention security for demanding enterprise networks. ## The Most Advanced Threat Prevention Equipped with our SandBlast technology, protecting against unknown threats and zero-day attacks. ## Full Security Uncompromising Performance | Gen II Security Firewall | Gen III Security NGFW¹ | Gen V Security Threat Prevention + SandBlast² | | --- | --- | --- | | 6.45Gbps | 2.1Gbps | 1.01Gbps | ## PERFORMANCE HIGHLIGHTS Designed to Secure Encrypted Traffic Performance measured with enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection. ### Powerful platforms for inspection of SSL traffic --- **5100 Security Gateway | Datasheet** # 5100 **Enterprise-grade security, performance and reliability** The Check Point 5100 Next Generation Security Gateway combines the most comprehensive security protections to safeguard your small enterprise and branch office deployments. The 5100 is a 1U Next Generation Security Gateway with one I/O expansion slot for higher port capacity, an AC or DC power supply, a 1TB (HDD) or 240GB (SSD) disk, and optional Lights-Out Management (LOM) for remote management. This powerful Next Generation Security Gateway is optimized to deliver real-world threat prevention to secure your critical assets and environments. ## Key Features & Benefits ### Advanced Threat Prevention 1st time prevention of known and zero-day threats ### Uncompromising Performance Achieve up to 1.01 Gbps of threat prevention throughput ### Secure Encrypted Traffic Consolidate SSL inspection into one integrated security platform. --- ## 5100 SECURITY GATEWAY 1. Management 10/100/1000Base-T RJ45 port 2. RJ45/micro USB console port 3. One network card expansion slot 4. 5x 10/100/1000Base-T RJ45 ports 5. 2x USB ports for ISO installation 6. Lights-Out Management port Prevent Known and Zero-day Threats Zero-day protection offering network security with evasion-resistant malware detection and complete protection from the most advanced attacks, ensuring quick delivery of safe content to users. ## NETWORK ### All-inclusive Security Solutions Check Point 5100 Next Generation Security Gateway offers a complete and consolidated security solution available in two complete packages: - Threat Prevention - Threat Prevention + SandBlast ### Integrated Security Management 5100 Security Appliances with the HDD option can manage itself and one adjacent appliance in a high availability deployment. Or manage the gateways via central unified management. | | | 1GbE(copper) | 1GbE(fiber) | Memory | LOM | | --- | --- | --- | --- | --- | --- | | 5100 | Base | 6 | 0 | 8GB | ○ | | HPP | 6 | 4 | 16GB | ● | | | Maximums | 14 | 4 | 16GB | ● | | ## ENTERPRISE-GRADE PLATFORM ### Remote Management and Monitoring A Lights-Out-Management (LOM) card provides out-of-band remote management to remotely diagnose, start, restart and manage the appliance from a remote location. Also use the LOM web interface to remotely install an OS image from an ISO file. --- ## Performance ### Enterprise Testing Conditions - 2.1 Gbps of NGFW - 2.45 Gbps IPS - 1.01 Gbps of Threat Prevention¹ ### Ideal Testing Conditions - 14.5 Gbps of UDP 1518 byte packet firewall throughput - 1.6 Gbps of AES-128 VPN throughput - 110,000 connections per second, 64 byte response³ - 3.2/6.4M concurrent connections, 64 byte response³ 1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance measured with default/maximum memory with R80.10. ### Additional Features - 1x CPUs, 2x physical cores (total) - Highlights - 1x 1TB HDD or 240GB SSD storage - 8 and 16 GB memory options - 1x AC or DC power supply - Lights-Out-Management card is optional ### Network Expansion Slot Options (1 of 1 slots open) - 4x 1000Base-F SFP port card, up to 4 ports ### Fail-Open/Bypass Network Options - 4x 10/100/1000Base-T RJ45 port card - CPU-level, OS-level and static file analysis - Use 8,000+ pre-defined or customize your own applications - Maximal file size for Emulation is 100 MB - Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds ### Content Security (continued) - File disarm and reconstruction via Threat Extraction - Dynamic User-based Policy - Classify 700+ pre-defined data types - Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3rd parties via a Web API ### Applications - Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android and Apple iOS platforms ## Network Connectivity - Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems) - 802.3ad passive and active link aggregation - Layer 2 (transparent) and Layer 3 (routing) mode ### High Availability - Active/Active L2, Active/Passive L2 and L3 - Session failover for routing change, device and link failure - ClusterXL or VRRP ### IPv6 - CoreXL, SecureXL, HA with VRRPv3 - Unicast and Multicast Routing (see SK98226) - NAT66, NAT64, NAT46 - OSPFv2 and v3, BGP, RIP - Static routes, Multicast routes - Policy-based routing - PIM- SM, PIM- SSM, PIM- DM, IGMP v2, and v3 ### Physical ### Power Requirements - Single Power Supply rating: 250W/300W - AC power input: 90 to 264V (47-63Hz) - Maximum thermal output: 214.6 BTU/hr. ### Dimensions - Dimensions (WxDxH): 17.2x16x1.73 in.(438x406.5x44mm) - Emissions: FCC, CE, VCCI, RCM/C-Tick ### Safety - Safety: UL, CB, CE, TUV GS ### Certifications - Environmental: RoHS, WEEE, REACH¹, ISO14001 ## ORDERING 5100 SECURITY GATEWAYS ### BASE CONFIGURATION | BASE CONFIGURATION1 | SKU | | --- | --- | | 5100 Next Generation Security Gateway Base Configuration, includes 6x1GbE copper ports,8GB RAM,1 HDD,1 AC Power Unit,Next Generation Threat Prevention(NGTP)Security Subscription Package for1 Year | CPAP-SG5100-NGTP | | 5100 SandBlast Next Generation Security Gateway Base Configuration,includes 6x1GbE copper ports,8GBRAM,1 HDD,1 AC Power Unit,SandBlast(NGTX)Security Subscription Package for1Year | CPAP-SG5100-NGTX | | HPP CONFIGURATION1 | SKU | | 5100 Next Generation Security Gateway with High Performance Package,includes 6x1GbE copper ports,4x1Gb SFP ports,4 SR transceivers,16 GB RAM,1 HDD,1 AC Power Unit,Lights Out Management(LOM),Next Generation Threat Prevention(NGTP)Security Subscription Package for1Year | CPAP-SG5100-NGTP-HPP | | 5100 Next Generation Security Gateway with High Performance Package,includes 6x1GbE copper ports,4x1Gb SFP ports,4 SR transceivers,16 GB RAM,1 HDD,1 AC Power Unit,Lights Out Management(LOM),Next Generation Threat Extraction(SandBlast)Security Subscription Package for1Year | CPAP-SG5100-NGTX-HPP | ### HPP CONFIGURATION 1 2 and 3 year, Virtual Systems packages and DC power options also available in the online product catalog ## Accessories ### INTERFACE CARDS AND TRANSCEIVERS | INTERFACE CARDS AND TRANSCEIVERS | | | --- | --- | | 8 Port 10/100/1000 Base-T RJ45 interface card | CPAC-8-1C-B | | 4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers | CPAC-4-1F-B | | SFP transceiver module for 1G fiber ports - long range(1000Base-LX) | CPAC-TR-1LX-B | | SFP transceiver module for 1G fiber ports - short range(1000Base-SX) | CPAC-TR-1SX-B | | SFP transceiver to 1000 Base-T RJ45(Copper) | CPAC-TR-1T-B | | 4 Port 1GE copper Bypass(Fail-Open) network interface card(10/100/1000 Base-T) | CPAC-4-1C-BP-B | | MEMORY | SKU | | Memory upgrade kit from 8GB to 16GB for 5100 appliance | CPAC-RAM8GB-5000 | | SPARES AND MISCELLANEOUS | SKU | | Lights Out Management module | CPAC-LOM-B | | Slide rails for 5000 Appliances(22”-32”) | CPAC-RAILS-5000 | | Extended slide rails for 5000 Appliances(24”-36”) | CPAC-RAILS-EXT-5000 | ### MEMORY ### SPARES AND MISCELLANEOUS Note: for returns of existing security gateways via the RMA process, a 500GB HDD is available.