5400 SECURITY GATEWAY

! !

Check Point’s 5400 Next Generation Firewall offers a fully integrated, unified solution tuned to deliver
maximum security against 5th generation threats without compromising performance. 5400 Security
Gateway provides the most advanced threat prevention security for demanding enterprise networks.

The Most Advanced

Threat Prevention

Equipped with our SandBlast
technology, protecting against
unknown threats and zero-day attacks

Full Security

Uncompromising Performance

Highly optimized with up to 1.46 Gbps of
threat prevention throughput

Designed to Secure

Encrypted Traffic

Powerful platforms for inspection
of SSL traffic

PERFORMANCE HIGHLIGHTS

Performance measured with enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control,
and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

5400

Enterprise-grade security, performance and reliability

The Check Point 5400 Next Generation Security Gateway combines the most comprehensive
security protections to safeguard your small enterprise.

The 5400 is a 1U Next Generation Security Gateway with one I/O expansion slot for higher port
capacity, an AC or DC power supply, a 1TB (HDD) or 240GB (SSD) disk, and optional Lights-Out
Management (LOM) for remote management. This powerful Next Generation Security Gateway is
optimized to deliver real-world threat prevention to secure your critical assets and environments.

Key Features & Benefits

Advanced Threat Prevention ….… 1 time prevention of known and zero-day threats
! !

! ! Uncompromising Performance .… Achieve up to 1.46 Gbps of threat prevention throughput
! !

! ! Secure Encrypted Traffic ………... Consolidate SSL inspection into one integrated security platform
! ! ! !

!

SPOTLIGHT

5400 SECURITY GATEWAY

! 1 Sync 10/100/1000Base-T RJ45 port
! 2 RJ45/micro USB console port
! 3 One network card expansion slot
! 4 8x 10/100/1000Base-T RJ45 ports
! 5 Management 10/100/1000Base-T RJ45 port
!

! 6 2x USB ports for ISO installation
! 7 Lights-Out Management port

Prevent Known and Zero-day Threats
Zero-day protection offering network
security with evasion-resistant malware
detection and complete protection from
the most advanced attacks, ensuring
quick delivery of safe content to users.

All-inclusive Security Solutions

Check Point 5400 Next Generation
Security Gateway offers a complete and
consolidated security solution available
in two complete packages:

v Threat Prevention

v Threat Prevention + SandBlast

Integrated Security Management

5400 Security Appliances with the HDD
option can manage itself and one
adjacent appliance in a high availability
deployment. Or manage the gateways
via central unified management.

Remote Management and Monitoring

A Lights-Out-Management (LOM) card
provides out-of-band remote
management to remotely diagnose,
start, restart and manage the appliance
from a remote location. Also use the
LOM web interface to remotely install
an OS image from an ISO file.

!

ENTERPRISE-GRADE PLATFORM

WELCOME TO THE FUTURE OF CYBER SECURITY

Performance

Enterprise Testing Conditions

• 1.46 Gbps of Threat Prevention¹

• 3.4 Gbps of NGFW

• 3.9 Gbps IPS

• 11.4 Gbps of firewall throughput

Ideal Testing Conditions

• 20 Gbps of UDP 1518 byte packet firewall throughput

• 2.16 Gbps of AES-128 VPN throughput

• 150,000 connections per second, 64 byte response³

• 3.2/6.4/12.8M concurrent connections, 64 byte response³

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast
Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance
measured with default/HPP/maximum memory with R80.10.

Additional Features

Highlights

• 1x 1TB HDD or 240GB SSD storage

• 8, 16 and 32 GB memory options

• 1x AC or DC power supply

• Lights-Out-Management card is optional

• Virtual Systems (base/HPP/max mem): 10/20/20

Network Expansion Slot Options (1 of 1 slots open)

• 8x 10/100/1000Base-T RJ45 port card, up to 18 ports

• 4x 1000Base-F SFP port card, up to 4 ports

Fail-Open/Bypass Network Options

• 4x 10/100/1000Base-T RJ45 port card

Content Security

First Time Prevention Capabilities

• CPU-level, OS-level and static file analysis

• File disarm and reconstruction via Threat Extraction

• Average emulation time for unknown files that require full
sandbox evaluation is under 100 seconds

• Maximal file size for Emulation is 100 MB

• Emulation OS Support: Windows XP, 7, 8.1, 10

Applications

• Use 8.000+ pre-defined or customize your own applications

Data Loss Prevention

• Accept, prevent, schedule, and apply traffic-shaping

• Classify 700+ pre-defined data types

• End user and data owner incident handling

Content Security (continued)

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid,
Terminal Servers and with 3^rd parties via a Web API

Dynamic User-based Policy

$$ 3^{\mathrm{r d}} $$

• Enforce consistent policy for local and remote users on
Windows, macOS, Linux, Android and Apple iOS platforms

Network

Network Connectivity

• Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)

• 802.3ad passive and active link aggregation

• Layer 2 (transparent) and Layer 3 (routing) mode

High Availability

• Active/Active L2, Active/Passive L2 and L3

• Session failover for routing change, device and link failure

• ClusterXL or VRRP

IPv6

• NAT66, NAT64, NAT46

• CoreXL, SecureXL, HA with VRRPv3

Unicast and Multicast Routing (see SK98226)

• OSPFv2 and v3, BGP, RIP

• Static routes, Multicast routes

• Policy-based routing

• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

Physical

Physical Fail-Open/Bypass Network Options

Power Requirements

• Single Power Supply rating: 250W/300W

• AC power input: 90 to 264V (47-63Hz)

• Power consumption max: 76.5W

• Maximum thermal output: 261 BTU/hr.

Dimensions

• Enclosure: 1RU

• Dimensions (WxDxH): 17.2x16x1.73 in. (438x406.5x44mm)

• Weight: 14 lbs. (6.37 kg)

Environmental Conditions

• Operating: 0° to 40°C, humidity 5% to 95%

• Storage: –20° to 70°C, humidity 5% to 95% at 60°C

Certifications

• Safety: UL, CB, CE, TUV GS

• Emissions: FCC, CE, VCCI, RCM/C-Tick

1 • Environmental: RoHS, WEEE, REACH¹, ISO14001

1. factory certificate

ORDERING 5400 SECURITY GATEWAYS

¹ 2 and 3 year, Virtual Systems packages and DC power options also available in the online product catalog

Accessories

INTERFACE CARDS AND TRANSCEIVERS

Note: for returns of existing security gateways via the RMA process, a 500GB HDD is available.