# 5400 SECURITY GATEWAY

!
!

**Check Point’s 5400 Next Generation Firewall offers a fully integrated, unified solution tuned to deliver**  
**maximum security against 5th generation threats without compromising performance. 5400 Security**  
**Gateway provides the most advanced threat prevention security for demanding enterprise networks.**

## The Most Advanced

## Threat Prevention

Equipped with our SandBlast  
technology, protecting against  
unknown threats and zero-day attacks

## Full Security

## Uncompromising Performance

Highly optimized with up to 1.46 Gbps of  
threat prevention throughput

## Designed to Secure

## Encrypted Traffic

Powerful platforms for inspection  
of SSL traffic

## PERFORMANCE HIGHLIGHTS

| Gen II Security Firewall | Gen III Security NGFW¹ | Gen V Security Threat Prevention+SandBlast² |
| --- | --- | --- |
| 11.4Gbps | 3.4Gbps | 1.46Gbps |

Performance measured with enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control,  
and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

---

## 5400

## Enterprise-grade security, performance and reliability

The Check Point 5400 Next Generation Security Gateway combines the most comprehensive  
security protections to safeguard your small enterprise.

The 5400 is a 1U Next Generation Security Gateway with one I/O expansion slot for higher port  
capacity, an AC or DC power supply, a 1TB (HDD) or 240GB (SSD) disk, and optional Lights-Out  
Management (LOM) for remote management. This powerful Next Generation Security Gateway is  
optimized to deliver real-world threat prevention to secure your critical assets and environments.

## Key Features & Benefits

**Advanced Threat Prevention** ….… 1 time prevention of known and zero-day threats  
! !

! !
**Uncompromising Performance** .… Achieve up to 1.46 Gbps of threat prevention throughput  
! !

! !
**Secure Encrypted Traffic** ………... Consolidate SSL inspection into one integrated security platform  
! ! ! !

!

---

## SPOTLIGHT

## 5400 SECURITY GATEWAY

! 1 Sync 10/100/1000Base-T RJ45 port  
! 2 RJ45/micro USB console port  
! 3 One network card expansion slot  
! 4 8x 10/100/1000Base-T RJ45 ports  
! 5 Management 10/100/1000Base-T RJ45 port  
!

! 6 2x USB ports for ISO installation  
! 7 Lights-Out Management port

**Prevent Known and Zero-day Threats**  
Zero-day protection offering network  
security with evasion-resistant malware  
detection and complete protection from  
the most advanced attacks, ensuring  
quick delivery of safe content to users.

## All-inclusive Security Solutions

Check Point 5400 Next Generation  
Security Gateway offers a complete and  
consolidated security solution available  
in two complete packages:

v Threat Prevention

v Threat Prevention + SandBlast

## Integrated Security Management

5400 Security Appliances with the HDD  
option can manage itself and one  
adjacent appliance in a high availability  
deployment. Or manage the gateways  
via central unified management.

## Remote Management and Monitoring

A Lights-Out-Management (LOM) card  
provides out-of-band remote  
management to remotely diagnose,  
start, restart and manage the appliance  
from a remote location. Also use the  
LOM web interface to remotely install  
an OS image from an ISO file.

!

**ENTERPRISE-GRADE PLATFORM**

|  |  | 1GbE(copper) | 1GbE(fiber) | Memory | LOM |
| --- | --- | --- | --- | --- | --- |
| 5400 | Base | 10 | 0 | 8GB | ○ |
| 5400 | HPP | 10 | 4 | 16GB | ● |
| 5400 | Maximums | 18 | 4 | 32GB | ● |

---

## WELCOME TO THE FUTURE OF CYBER SECURITY

## Performance

## Enterprise Testing Conditions

• 1.46 Gbps of Threat Prevention¹

• 3.4 Gbps of NGFW

• 3.9 Gbps IPS

• 11.4 Gbps of firewall throughput

## Ideal Testing Conditions

• 20 Gbps of UDP 1518 byte packet firewall throughput

• 2.16 Gbps of AES-128 VPN throughput

• 150,000 connections per second, 64 byte response³

• 3.2/6.4/12.8M concurrent connections, 64 byte response³

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast  
Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance  
measured with default/HPP/maximum memory with R80.10.

## Additional Features

## Highlights

• 1x 1TB HDD or 240GB SSD storage

• 8, 16 and 32 GB memory options

• 1x AC or DC power supply

• Lights-Out-Management card is optional

• Virtual Systems (base/HPP/max mem): 10/20/20

**Network Expansion Slot Options (1 of 1 slots open)**

• 8x 10/100/1000Base-T RJ45 port card, up to 18 ports

• 4x 1000Base-F SFP port card, up to 4 ports

**Fail-Open/Bypass Network Options**

• 4x 10/100/1000Base-T RJ45 port card

## Content Security

## First Time Prevention Capabilities

• CPU-level, OS-level and static file analysis

• File disarm and reconstruction via Threat Extraction

• Average emulation time for unknown files that require full  
sandbox evaluation is under 100 seconds

• Maximal file size for Emulation is 100 MB

• Emulation OS Support: Windows XP, 7, 8.1, 10

## Applications

• Use 8.000+ pre-defined or customize your own applications

## Data Loss Prevention

• Accept, prevent, schedule, and apply traffic-shaping

• Classify 700+ pre-defined data types

• End user and data owner incident handling

## Content Security (continued)

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid,  
Terminal Servers and with 3<sup>rd</sup> parties via a Web API

## Dynamic User-based Policy

$$
3^{\mathrm{r d}}
$$

• Enforce consistent policy for local and remote users on  
Windows, macOS, Linux, Android and Apple iOS platforms

## Network

## Network Connectivity

• Total physical and virtual (VLAN) interfaces per appliance:
1024/4096 (single gateway/with virtual systems)

• 802.3ad passive and active link aggregation

• Layer 2 (transparent) and Layer 3 (routing) mode

## High Availability

• Active/Active L2, Active/Passive L2 and L3

• Session failover for routing change, device and link failure

• ClusterXL or VRRP

## IPv6

• NAT66, NAT64, NAT46

• CoreXL, SecureXL, HA with VRRPv3

## Unicast and Multicast Routing (see SK98226)

• OSPFv2 and v3, BGP, RIP

• Static routes, Multicast routes

• Policy-based routing

• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

## Physical

## Physical Fail-Open/Bypass Network Options

## Power Requirements

• Single Power Supply rating: 250W/300W

• AC power input: 90 to 264V (47-63Hz)

• Power consumption max: 76.5W

• Maximum thermal output: 261 BTU/hr.

## Dimensions

• Enclosure: 1RU

• Dimensions (WxDxH): 17.2x16x1.73 in. (438x406.5x44mm)

• Weight: 14 lbs. (6.37 kg)

## Environmental Conditions

• Operating: 0° to 40°C, humidity 5% to 95%

• Storage: –20° to 70°C, humidity 5% to 95% at 60°C

## Certifications

• Safety: UL, CB, CE, TUV GS

• Emissions: FCC, CE, VCCI, RCM/C-Tick

1
• Environmental: RoHS, WEEE, REACH¹, ISO14001

1. factory certificate

---

## ORDERING 5400 SECURITY GATEWAYS

| BASE CONFIGURATION1 | SKU |
| --- | --- |
| 5400 Next Generation Security Gateway Base Configuration, includes 10x1GbE copper ports, 8GB RAM, 1 HDD, 1 AC Power Unit, Next Generation Threat Prevention (NGTP) Security Subscription Package for 1 Year | CPAP-SG5400-NGTP |
| 5400 SandBlast Next Generation Security Gateway Base Configuration, includes 10x1GbE copper ports, 8GB RAM, 1 HDD, 1 AC Power Unit, SandBlast (NGTX) Security Subscription Package for 1 Year | CPAP-SG5400-NGTX |
| HPP CONFIGURATION1 | SKU |
| 5400 Next Generation Security Gateway with High Performance Package, includes10x1GbE copper ports, 4x1Gb SFP ports, 4 SR transceivers, 16 GB RAM, 1 HDD, 1 AC Power Unit, Lights Out Management(LOM), Next Generation Threat Prevention(NGTP)Security Subscription Package for 1Year | CPAP-SG5400-NGTP-HPP |
| 5400 Next Generation Security Gateway with High Performance Package, includes10x1GbE copper ports, 4x1Gb SFP ports, 4 SR transceivers, 16 GB RAM, 1 HDD, 1 AC Power Unit, Lights Out Management(LOM), Next Generation Threat Extraction(SandBlast)Security Subscription Package for 1Year | CPAP-SG5400-NGTX-HPP |

<sup>1</sup> 2 and 3 year, Virtual Systems packages and DC power options also available in the online product catalog

## Accessories

**INTERFACE CARDS AND TRANSCEIVERS**

| INTERFACE CARDS AND TRANSCEIVERS |  |
| --- | --- |
| 8 Port 10/100/1000 Base-T RJ45 interface card | CPAC-8-1C-B |
| 4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers | CPAC-4-1F-B |
| SFP transceiver module for 1G fiber ports - long range (1000Base-LX) | CPAC-TR-1LX-B |
| SFP transceiver module for 1G fiber ports - short range (1000Base-SX) | CPAC-TR-1SX-B |
| SFP transceiver to 1000 Base-T RJ45(Copper) | CPAC-TR-1T-B |
| 4 Port 1GE copper Bypass(Fail-Open) network interface card(10/100/1000 Base-T) | CPAC-4-1C-BP-B |
| MEMORY | SKU |
| Memory upgrade kit from 8GB to 16GB for 5400 appliance | CPAC-RAM8GB-5000 |
| Memory upgrade kit from 8GB to 32GB for 5400 appliance | CPAC-RAM24GB-5000 |
| Memory upgrade kit from 16GB to 32GB for 5400 appliance | CPAC-RAM16GB-5000 |
| SPARES AND MISCELLANEOUS | SKU |
| Lights Out Management module | CPAC-LOM-B |
| Slide rails for 5000 Appliances(22”-32”) | CPAC-RAILS-5000 |
| Extended slide rails for 5000 Appliances(24”-36”) | CPAC-RAILS-EXT-5000 |

Note: for returns of existing security gateways via the RMA process, a 500GB HDD is available.