Check Point 5200 Security Gateway Datasheet
5200 SECURITY GATEWAY
Check Point’s 5200 Next Generation Firewall offers a fully integrated, unified solution tuned to deliver maximum security against 5th generation threats without compromising performance. 5200 Security Gateway provides the most advanced threat prevention security for demanding enterprise networks.
The Most Advanced Threat Prevention
Full Security Uncompromising Performance
Equipped with our SandBlast technology, protecting against unknown threats and zero-day attacks
| Gen II Security Firewall | Gen III Security NGFW¹ | Gen V Security Threat Prevention+SandBlast² |
|---|---|---|
| 7.8Gbps | 2.52Gbps | 1.16Gbps |
PERFORMANCE HIGHLIGHTS
Designed to Secure Encrypted Traffic
Performance measured with enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.
Powerful platforms for inspection of SSL traffic.
5200 Security Gateway | Datasheet
5200
Enterprise-grade security, performance and reliability The Check Point 5200 Next Generation Security Gateway combines the most comprehensive
security protections to safeguard your small enterprise and branch office deployments.
The 5200 is a 1U Next Generation Security Gateway with one I/O expansion slot for higher port capacity, an AC or DC power supply, a 1TB (HDD) or 240GB (SSD) disk, and optional Lights-Out Management (LOM) for remote management. This powerful Next Generation Security Gateway is optimized to deliver real-world threat prevention to secure your critical assets and environments.
Key Features & Benefits
Advanced Threat Prevention ….… 1st time prevention of known and zero-day threats
Uncompromising Performance .… Achieve up to 1.16 Gbps of threat prevention throughput
Secure Encrypted Traffic ………... Consolidate SSL inspection into one integrated security platform
1 Management 10/100/1000Base-T RJ45 port
2 RJ45/micro USB console port
3 One network card expansion slot
4 5x 10/100/1000Base-T RJ45 ports
5 2x USB ports for ISO installation
6 Lights-Out Management port
Prevent Known and Zero-day Threats Zero-day protection offering network security with evasion-resistant malware detection and complete protection from the most advanced attacks, ensuring quick delivery of safe content to users.
All-inclusive Security Solutions
Check Point 5200 Next Generation Security Gateway offers a complete and consolidated security solution available in two complete packages:
- Threat Prevention
- Threat Prevention + SandBlast
Integrated Security Management
5200 Security Appliances with the HDD option can manage itself and one adjacent appliance in a high availability deployment. Or manage the gateways via central unified management.
| 1GbE(copper) | 1GbE(fiber) | Memory | LOM | ||
|---|---|---|---|---|---|
| 5200 | Base | 6 | 0 | 8GB | ○ |
| HPP | 6 | 4 | 16GB | ● | |
| Maximums | 14 | 4 | 16GB | ● |
Remote Management and Monitoring
A Lights-Out-Management (LOM) card provides out-of-band remote management to remotely diagnose, start, restart and manage the appliance from a remote location. Also use the LOM web interface to remotely install an OS image from an ISO file.
Performance
Enterprise Testing Conditions
- 1.16 Gbps of Threat Prevention1
- 2.52 Gbps of NGFW
- 3 Gbps IPS
- 7.8 Gbps of firewall throughput
Ideal Testing Conditions
- 16 Gbps of UDP 1518 byte packet firewall throughput
- 1.88 Gbps of AES-128 VPN throughput
- 125,000 connections per second, 64 byte response3
- 3.2/6.4/6.4M concurrent connections, 64 byte response3
Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance measured with default/HPP/maximum memory with R80.10.
Additional Features Highlights
- 1x CPUs, 2x physical cores (total)
- 1x 1TB HDD or 240GB SSD storage
- 1x AC or DC power supply
- 8 and 16 GB memory options
- Lights-Out-Management card is optional
- Virtual Systems (base/HPP/max mem): 10/
- Network Expansion Slot Options (1 of 1 slots open)
- 8x 10/100/1000Base-T RJ45 port card, up to 14 ports
- 4x 1000Base-F SFP port card, up to 4 ports
Fail-Open/Bypass Network Options
- 4x 10/100/1000Base-T RJ45 port card
- CPU-level, OS-level and static file analysis
Data Loss Prevention
- Emulation OS Support: Windows XP, 7, 8.1, 10
Content Security (continued)
- File disarm and reconstruction via Threat Extraction
Dynamic User-based Policy
- Classify 700+ pre-defined data types
- End user and data owner incident handling
- Maximal file size for Emulation is 100 MB
- Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers, and with 3rd parties via a Web API
- Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android, and Apple iOS platforms
Network Connectivity
- Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)
- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
- Active/Active L2, Active/Passive L2 and L3
- Session failover for routing change, device and link failure
- ClusterXL or VRRP
IPv6
- CoreXL, SecureXL, HA with VRRPv3
- Unicast and Multicast Routing
- NAT66, NAT64, NAT46
- OSPFv2 and v3, BGP, RIP
- Static routes, Multicast routes
- Policy-based routing
- PIM- SM, PIM- SSM, PIM- DM, IGMP v2, and v3
Physical
Power Requirements
- Single Power Supply rating: 250W/300W
- AC power input: 90 to 264V (47-63Hz)
- Power consumption max: 62.9W
- Maximum thermal output: 214.6 BTU/hr.
Dimensions
- Dimensions (WxDxH): 17.2x16x1.73 in.(438x406.5x44mm)
Environmental Conditions
- Safety: UL, CB, CE, TUV GS
- Environmental: RoHS, WEEE, REACH, ISO14001
ORDERING 5200 SECURITY GATEWAYS
BASE CONFIGURATION
| BASE CONFIGURATION1 | SKU |
|---|---|
| 5200 Next Generation Security Gateway Base Configuration, includes 6x1GbE copper ports,8GB RAM,1 HDD,1 AC Power Unit,Next Generation Threat Prevention(NGTP)Security Subscription Package for 1 Year | CPAP-SG5200-NGTP |
| 5200 SandBlast Next Generation Security Gateway Base Configuration, includes 6x1GbE copper ports,8GB RAM,1 HDD,1 AC Power Unit,SandBlast(NGTX)Security Subscription Package for 1 Year | CPAP-SG5200-NGTX |
HPP CONFIGURATION1
| SKU | | --- | --- | | 5200 Next Generation Security Gateway with High Performance Package, includes 6x1GbE copper ports,4x1Gb SFP ports,4 SR transceivers,16 GB RAM,1 HDD,1 AC Power Unit,Lights Out Management(LOM),Next Generation Threat Prevention(NGTP)Security Subscription Package for 1 Year | CPAP-SG5200-NGTP-HPP | | 5200 Next Generation Security Gateway with High Performance Package, includes 6x1GbE copper ports,4x1Gb SFP ports,4 SR transceivers,16 GB RAM,1 HDD,1 AC Power Unit,Lights Out Management(LOM),Next Generation Threat Extraction(SandBlast)Security Subscription Package for 1 Year | CPAP-SG5200-NGTX-HPP |
1, 2 and 3 year, Virtual Systems packages and DC power options also available in the online product catalog
Accessories
INTERFACE CARDS AND TRANSCEIVERS
| INTERFACE CARDS AND TRANSCEIVERS | |
|---|---|
| 8 Port 10/100/1000 Base-T RJ45 interface card | CPAC-8-1C-B |
| 4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers | CPAC-4-1F-B |
| SFP transceiver module for 1G fiber ports - long range(1000Base-LX) | CPAC-TR-1LX-B |
| SFP transceiver module for 1G fiber ports - short range(1000Base-SX) | CPAC-TR-1SX-B |
| SFP transceiver to 1000 Base-T RJ45(Copper) | CPAC-TR-1T-B |
| 4 Port 1GE copper Bypass(Fail-Open) network interface card(10/100/1000 Base-T) | CPAC-4-1C-BP-B |
MEMORY
| SKU | | --- | --- | | Memory upgrade kit from 8GB to 16GB for 5200 appliance | CPAC-RAM8GB-5000 |
SPARES AND MISCELLANEOUS
| SKU | | --- | --- | | Lights Out Management module | CPAC-LOM-B | | Slide rails for 5000 Appliances(22”-32”) | CPAC-RAILS-5000 | | Extended slide rails for 5000 Appliances(24”-36”) | CPAC-RAILS-EXT-5000 |
Note: for returns of existing security gateways via the RMA process, a 500GB HDD is available.