5600 SECURITY GATEWAY

Check Point’s 5600 Next Generation Firewall offers a fully integrated, unified solution tuned to deliver
maximum security against 5th generation threats without compromising performance. The 5600
Security Gateway provides the most advanced threat prevention security for demanding enterprise
networks.

The Most Advanced

Threat Prevention

Equipped with our SandBlast
technology, protecting against
unknown threats and zero-day attacks

Full Security

Uncompromising Performance

Highly optimized with up to 2.78 Gbps of
threat prevention throughput

Designed to Secure

Encrypted Traffic

Powerful platforms for inspection
of SSL traffic

PERFORMANCE HIGHLIGHTS

Performance measured with enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control,
and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

5600

Enterprise-grade security, performance and reliability

The Check Point 5600 Next Generation Security Gateway combines the most comprehensive
security protections to safeguard your mid-size enterprise.

The 5600 is a 1U Next Generation Security Gateway with one I/O expansion slot for higher port
capacity, redundant fans, redundant AC or DC power supply options, a 1TB (HDD) or 240GB (SSD)
disk, and optional Lights-Out Management (LOM) for remote management. This powerful Next
Generation Security Gateway is optimized to deliver real-world threat prevention to secure your
critical assets and environments.

Key Features & Benefits

• Advanced Threat Prevention ….… 1 time prevention of known and zero-day threats

• Uncompromising Performance .… Achieve up to 2.78 Gbps of threat prevention throughput

• Secure Encrypted Traffic ………... Consolidate SSL inspection into one integrated security platform

SPOTLIGHT

5600 SECURITY GATEWAY

1 Sync 10/100/1000Base-T RJ45 port

2 RJ45/micro USB console port

3 One network card expansion slot

4 8x 10/100/1000Base-T RJ45 ports

5 Management 10/100/1000Base-T RJ45 port

6 2x USB ports for ISO installation

7 Lights-Out Management port

Prevent Known and Zero-day Threats
Zero-day protection offering network
security with evasion-resistant malware
detection and complete protection from
the most advanced attacks, ensuring
quick delivery of safe content to users.

All-inclusive Security Solutions
Check Point 5600 Next Generation
Security Gateway offers a complete and
consolidated security solution available
in two complete packages:

• v Threat Prevention
• v Threat Prevention + SandBlast

Inclusive High Performance Package
Purchase the affordable High
Performance Package (HPP) and get a
base system plus one 4x 1Gb SFP
interface card, transceivers, redundant
AC or DC power supplies, Lights-Out-
Management and 16 GB of memory for
high connection capacity.

Remote Management and Monitoring
A Lights-Out-Management (LOM) card
provides out-of-band remote
management to remotely diagnose,
start, restart and manage the appliance
from a remote location. Also use the
LOM web interface to remotely install
an OS image from an ISO file.

ENTERPRISE-GRADE PLATFORM

WELCOME TO THE FUTURE OF CYBER SECURITY

Performance

Enterprise Testing Conditions

• 2.78 Gbps of Threat Prevention¹
• 5.1 Gbps of NGFW
• 5.5 Gbps IPS
• 20.4 Gbps of firewall throughput

Ideal Testing Conditions

• 23 Gbps of UDP 1518 byte packet firewall throughput
• 6.5 Gbps of AES-128 VPN throughput
• 185,000 connections per second, 64 byte response³
• 3.2/6.4/12.8M concurrent connections, 64 byte response³

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast
Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance
measured with default/HPP/maximum memory with R80.10.

Additional Features

Highlights

• 1x CPUs, 4x physical cores (total)
• 1x 1TB HDD or 240GB SSD storage
• 1 AC or DC power supply (2 redundant PSU option)
• 8, 16 and 32 GB memory options
• Lights-Out-Management card is optional
• Virtual Systems (base/HPP/max mem): 10/20/20

Network Expansion Slot Options (1 of 1 slots open)

• 8x 10/100/1000Base-T RJ45 port card, up to 18 ports
• 4x 1000Base-F SFP port card, up to 4 ports
• 4x 10GBase-F SFP+ port card, up to 4 ports

Fail-Open/Bypass Network Options

• 4x 10/100/1000Base-T RJ45 port card
• 2x 10GBase-F SFP+ port card

Content Security

First Time Prevention Capabilities

• CPU-level, OS-level and static file analysis
• File disarm and reconstruction via Threat Extraction
• Average emulation time for unknown files that require full
  sandbox evaluation is under 100 seconds
• Maximal file size for Emulation is 100 MB
• Emulation OS Support: Windows XP, 7, 8.1, 10

Applications

• Use 8,000+ pre-defined or customize your own applications
• Accept, prevent, schedule, and apply traffic-shaping

Data Loss Prevention

• Classify 700+ pre-defined data types
• End user and data owner incident handling

Content Security (continued)

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid,
  Terminal Servers and with 3rd
  parties via a Web API

Dynamic User-based Policy

$$ 3^{\mathrm{r d}} $$

• Enforce consistent policy for local and remote users on
  Windows, macOS, Linux, Android and Apple iOS platforms

Network

Network Connectivity

• Total physical and virtual (VLAN) interfaces per appliance:
  1024/4096 (single gateway/with virtual systems)
• 802.3ad passive and active link aggregation
• Layer 2 (transparent) and Layer 3 (routing) mode

High Availability

• Active/Active L2, Active/Passive L2 and L3
• Session failover for routing change, device and link failure
• ClusterXL or VRRP

IPv6

• NAT66, NAT64, NAT46
• CoreXL, SecureXL, HA with VRRPv3

Unicast and Multicast Routing (see SK98226)

• OSPFv2 and v3, BGP, RIP
• Static routes, Multicast routes
• Policy-based routing
• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

Physical

Power Requirements

Power Requirements Fail-Open/Bypass Network Options

• Single Power Supply rating: 275W
• AC power input: 90 to 264V (47-63Hz)
• Power consumption max: 87.2W
• Maximum thermal output: 297.5 BTU/hr.

Dimensions

• Enclosure: 1RU
• Dimensions (WxDxH): 17.2x20x1.73 in.(437.9x508x44mm)
• Weight: 17.53 lbs. (7.95 kg)

Environmental Conditions

• Operating: 0° to 40°C, humidity 5% to 95%
  $$ 0^{ ext{°}} $$
  $$ 40^{ ext{°}} ext{C}. $$
• Storage: –20° to 70°C, humidity 5% to 95% at 60°C
  $$ 60^{ ext{°}} ext{C} $$
  $$ 70^{ ext{°}} ext{C}. $$

Certifications

• Safety: UL, CB, CE, TUV GS
• Emissions: FCC, CE, VCCI, RCM/C-Tick 1
• Environmental: RoHS, WEEE, REACH¹, ISO14001

ORDERING 5600 SECURITY GATEWAYS

¹ 2 and 3 year and Virtual Systems packages also available in the online product catalog

Accessories

INTERFACE CARDS AND TRANSCEIVERS

Note: for returns of existing security gateways via the RMA process, a 500GB HDD is available

5600 SECURITY GATEWAY

1 Redundant AC or DC power supplies 2 Cooling fans