# 5900 SECURITY GATEWAY

!
!

**Check Point’s 5900 Next Generation Firewall offers a fully integrated, unified solution tuned to deliver**  
**maximum security against 5th generation threats without compromising performance. 5900 Security**  
**Gateway provides the most advanced threat prevention security for demanding enterprise networks.**

## The Most Advanced

## Threat Prevention

Protection from unknown threats and  
zero-day attacks

## Full Security

## Uncompromising Performance

Highly optimized with up to 6.1 Gbps of  
threat prevention throughput

## Designed to Secure

## Encrypted Traffic

Powerful platforms for inspection  
of SSL traffic

## PERFORMANCE HIGHLIGHTS

| Gen II Security Firewall | Gen III Security NGFW1 | Gen V Security Threat Prevention+SandBlast2 |
| --- | --- | --- |
| 29.4Gbps | 7.25Gbps | 6.1Gbps |

Performance measured with enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control,  
and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

---

**5900**

## Enterprise-grade security, performance and reliability

The Check Point 5900 Next Generation Security Gateway combines the most comprehensive  
security protections to safeguard your mid-size enterprise.

The 5900 is a 1U Next Generation Security Gateway with two I/O expansion slots for higher port  
capacity, redundant fans, redundant AC or DC power supply options, a 2x 480GB SSD drive array  
option, and Lights-Out Management (LOM) for remote management. This powerful Next Generation  
Security Gateway is optimized to deliver real-world threat prevention to secure your critical assets  
and environments.

## Key Features & Benefits

st  
Advanced Threat Prevention ….… 1 time prevention of known and zero-day threats  
! !

! !  
Uncompromising Performance .… Achieve up to 6.1 Gbps of threat prevention throughput  
! !  
!

! !
Secure Encrypted Traffic ………... Consolidate SSL inspection into one integrated security platform  
! ! !  
!

!

---

## SPOTLIGHT

## 5900 SECURITY GATEWAY

! **1** Sync 10/100/1000Base-T RJ45 port

! **2** RJ45/micro USB console port

! **3** Two network card expansion slots

! **4** 8x 10/100/1000Base-T RJ45 ports

! **5** Management 10/100/1000Base-T RJ45 port

!

! 6 2x USB 3.0 ports for ISO installation

! **7** Lights-Out Management port

! **8** Graphic LCD display

## Prevent Known and Zero-day Threats

Zero-day protection offering network  
security with evasion-resistant malware  
detection and complete protection from  
the most advanced attacks, ensuring  
quick delivery of safe content to users.

## All-inclusive Security Solutions

Check Point 5900 Next Generation  
Security Gateway offers a complete and  
consolidated security solution available  
in two complete packages:

* v Threat Prevention
* v Threat Prevention + SandBlast

## Inclusive High Performance Package

Purchase the affordable High  
Performance Package (HPP) and get a  
base system plus one 4x 10Gb SFP+  
interface card, transceivers, redundant  
AC or DC power supplies, 2x 480GB  
SSD drives and 16 GB of memory for  
high connection capacity.

## Remote Management and Monitoring

A Lights-Out-Management (LOM) card  
provides out-of-band remote  
management to remotely diagnose,  
start, restart and manage the appliance  
from a remote location. Also use the  
LOM web interface to remotely install  
an OS image from an ISO file.

**ENTERPRISE-GRADE PLATFORM**

|  |  | 1GbE(copper) | 1GbE(fiber) | 10GbE | 40GbE | Memory | RedundantStorage | RedundantPower | LOM |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| 5900 | Base | 10 | 0 | 0 | 0 | 8GB | ○ | ○ | ● |
| 5900 | HPP | 10 | 0 | 4 | 0 | 16GB | ● | ● | ● |
| 5900 | Maximums | 26 | 8 | 8 | 4 | 32GB | ● | ● | ● |

this is optional

---

## WELCOME TO THE FUTURE OF CYBER SECURITY

## Performance

## Enterprise Testing Conditions

• 6.1 Gbps of Threat Prevention¹  
• 7.25 Gbps of NGFW  
• 7.6 Gbps IPS  
• 29.4 Gbps of firewall throughput

## Ideal Testing Conditions

• 52 Gbps of UDP 1518 byte packet firewall throughput  
• 10.2 Gbps of AES-128 VPN throughput  
• 210,000 connections per second, 64 byte response³  
• 3.2/6.4/12.8M concurrent connections, 64 byte response³

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast  
Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance  
measured with default/HPP/maximum memory with R80.10.

## Additional Features

## Highlights

• 1x CPUs, 8x physical cores, 16x virtual cores (total)  
• 1x 480GB SSD storage (2x RAID1 option)  
• 1 AC or DC power supply (2 redundant PSU option)  
• 8, 16 and 32 GB memory options  
• Lights-Out-Management card is Included  
• Virtual Systems (base/HPP/max mem): 10/20/20

## Network Expansion Slot Options (2 of 2 slots open)

• 8x 10/100/1000Base-T RJ45 port card, up to 26 ports  
• 4x 1000Base-F SFP port card, up to 8 ports  
• 4x 10GBase-F SFP+ port card, up to 8 ports  
• 2x 40G QSFP+ port card, up to 4 ports

**Fail-Open/Bypass Network Options**

• 4x 10/100/1000Base-T RJ45 port card  
• 2x 10GBase-F SFP+ port card

## Content Security

## First Time Prevention Capabilities

• CPU-level, OS-level and static file analysis  
• File disarm and reconstruction via Threat Extraction  
• Average emulation time for unknown files that require full  
sandbox evaluation is under 100 seconds  
• Maximal file size for Emulation is 100 MB

## Applications

• Emulation OS Support: Windows XP, 7, 8.1, 10  
• Use 8,000+ pre-defined or customize your own  
applications  
• Accept, prevent, schedule, and apply traffic-shaping

## Data Loss Prevention

• Classify 700+ pre-defined data types  
• End user and data owner incident handling

## Content Security (continued)

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco  
pxGrid, Terminal Servers and with 3rd   
parties via a Web  
API

## Dynamic User-based Policy

• Enforce consistent policy for local and remote users on  
Windows, macOS, Linux, Android and Apple iOS platforms

## Network

## Network Connectivity

• Total physical and virtual (VLAN) interfaces per appliance:  
1024/4096 (single gateway/with virtual systems)  
• 802.3ad passive and active link aggregation  
• Layer 2 (transparent) and Layer 3 (routing) mode

## High Availability

• Active/Active L2, Active/Passive L2 and L3  
• Session failover for routing change, device and link failure  
• ClusterXL or VRRP

## IPv6

• NAT66, NAT64, NAT46  
• CoreXL, SecureXL, HA with VRRPv3

## Unicast and Multicast Routing (see SK98226)

• OSPFv2 and v3, BGP, RIP  
• Static routes, Multicast routes  
• Policy-based routing  
• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

## Physical

## Power Requirements

## Power Requirements Fail-Open/Bypass Network Options

• Single Power Supply rating: 500W  
• AC power input: 90 to 264V (47-63Hz)  
• Power consumption max: 165W  
• Maximum thermal output: 563 BTU/hr.

## Dimensions

• Enclosure: 1RU  
• Dimensions (WxDxH): 17.2x20x1.73 in. (438x508x44mm)  
• Weight: 22.05 lbs. (10 kg)

## Environmental Conditions

• Operating: 0° to 40°C, humidity 5% to 95%  
• Storage: –20° to 70°C, humidity 5% to 95% at 60°C

## Certifications

• Safety: UL, CB, CE, TUV GS  
• Emissions: FCC, CE, VCCI, RCM/C-Tick  
• Environmental: RoHS, WEEE, REACH¹, ISO14001

---

## ORDERING 5900 SECURITY GATEWAYS

| BASE CONFIGURATION1 | SKU |
| --- | --- |
| 5900 Next Generation Security Gateway Base Configuration, includes 10x1GbE copper ports, 8GB RAM, 1SSD, 1 AC Power Unit, Lights Out Management(LOM),Next Generation Threat Prevention(NGTP)Security Subscription Package for 1 Year | CPAP-SG5900-NGTP-SSD |
| 5900 SandBlast Next Generation Security Gateway Base Configuration, includes 10x1GbE copper ports, 8GBRAM,1 SSD,1 AC Power Unit,Lights Out Management(LOM),SandBlast(NGTX)Security SubscriptionPackage for 1Year | CPAP-SG5900-NGTX-SSD |
| HPP CONFIGURATION1 | SKU |
| 5900 Next Generation Security Gateway with High Performance Package,includes10x1GbE copper ports,4x10Gb SFP+ports,4SR transceivers,16GB RAM,2SSD,2ACPowerUnits,Lights Out Management(LOM),Next Generation Threat Prevention(NGTX)Security Subscription Package for1Year | CPAP-SG5900-NGTP-HPP-SSD |
| 5900 Next Generation Security Gateway with High Performance Package,includes10x1GbE copper ports,4x10Gb SFP+ports,4SR transceivers,16GB RAM,2SSD,2ACPowerUnits,Lights Out Management(LOM),Next Generation Threat Extraction(SandBlast)Security Subscription Package for1Year | CPAP-SG5900-NGTX-HPP-SSD |

<sup>1</sup>2 and 3 year and Virtual Systems packages also available in the online product catalog

## Accessories

| INTERFACE CARDS AND TRANSCEIVERS |  |
| --- | --- |
| 8 Port 10/100/1000 Base-T RJ45 interface card | CPAC-8-1C-B |
| 4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers | CPAC-4-1F-B |
| SFP transceiver module for 1G fiber ports - long range (1000Base-LX) | CPAC-TR-1LX-B |
| SFP transceiver module for 1G fiber ports - short range (1000Base-SX) | CPAC-TR-1SX-B |
| SFP transceiver to 1000 Base-T RJ45(Copper) | CPAC-TR-1T-B |
| 4 Port 10GBase-F SFP+ interface card | CPAC-4-10F-B |
| SFP+ transceiver module for 10G fiber ports - long range(10GBase-LR) | CPAC-TR-10LR-B |
| SFP+ transceiver module for 10G fiber ports - short range(10GBase-SR) | CPAC-TR-10SR-B |
| 2 Port 40G QSFP+ interface card | CPAC-2-40F-B |
| QSFP+ transceiver module for 40G fiber ports - short range(40GBase-SR) | CPAC-TR-40SR-QSFP-300m |
| QSFP+ transceiver module for 40G fiber ports - long range(40GBase-LR) | CPAC-TR-40LR-QSFP-10K |
| Bi-directional QSFP+ transceiver for 40G fiber ports - short range(40GBase-SR-BiDi) | CPAC-TR-40SR-QSFP-BiDi |
| 4 Port 1GE copper Bypass(Fail-Open) network interface card(10/100/1000 Base-T) | CPAC-4-1C-BP-B |
| 2 Port 10GE short-range Fiber Bypass(Fail-Open) network interface card(10GBase-SR) | CPAC-2-10-FSR-BP-B |
| MEMORY | SKU |
| Memory upgrade kit from 8GB to 16GB for 5900 appliance | CPAC-RAM8GB-5900 |
| Memory upgrade kit from 8GB to 32GB for 5900 appliance | CPAC-RAM24GB-5900 |
| Memory upgrade kit from 16GB to 32GB for 5900 appliance | CPAC-RAM16GB-5900 |
| SPARES AND MISCELLANEOUS | SKU |
| SSD for 5900 Security Gateway | CPAC-SSD-480G-5900 |
| Additional/Replacement AC Power Supply for 5600 and 5900 appliances | CPAC-PSU-5600/5900 |
| Additional/Replacement DC power supply unit for 5600 and 5900 | CPAC-PSU-DC-5600/5900 |
| Slide rails for 5000 Appliances(22"-32") | CPAC-RAILS-5000 |
| Extended slide rails for 5000 Appliances(24"-36") | CPAC-RAILS-EXT-5000 |

Note: RMA units are available with the 480GB SSD only