Check Point 6200 Security Gateway Datasheet
QUANTUM 6200 SECURITY GATEWAY
Top Security Effectiveness Leader with 99.7% malware block rate in Miercom NGFW Security Benchmark [2023]
AI ML powered Threat Prevention Protect networks and users from zero-days, phishing, DNS, and ransomware attacks.
Industry Recognition
- Named a Leader for the Gartner Magic Quadrant Firewalls
- Named a Leader in the Enterprise Firewalls Q4
- Awarded the Frost & Sullivan Company of the Year
- 23rd time in the Forrester Wave™ 2022 Alivan Firewall
Unified Management and Ops Efficiency
Increase protection and reduce TCO with a consolidated security architecture. AI Deep Learning powered threat prevention to secure enterprises.
Check Point Quantum 6200 Next Generation Firewalls enable enterprises to deploy the industry's leading threat prevention capabilities at all points of their infrastructure, scaling security according to their changing business needs. This enables enterprises to prevent and block even the most advanced attacks before they can disrupt business, greatly increasing the efficiency of their security operations.
PERFORMANCE HIGHLIGHTS
| Firewall | Next Gen Firewall | Threat Prevention |
|---|---|---|
| 9 Gbps | 3.72 Gbps | 1.8 Gbps |
Performance measured with enterprise testing conditions. Additional performance details on page 3.1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot, and SandBlast Zero-Day Protection.
SPOTLIGHT
- Sync 10/100/1000 Base -T port
- RJ45 console port
- 1 network expansion slot
- 8x 10/100/1000 Base -T ports
- Management 10/100/1000 Base -T port
- 2x USB 3.0 ports
- Lights-out Management port
- USB Type-C console port
- Redundant power supplies
AI Deep Learning Threat Prevention
The speed and sophistication of evasive zero-day DNS and phishing attacks requires AI Deep Learning to predict and block malicious behavior without human intervention. Quantum firewalls use Check Point’s threat intelligence cloud with 40+ AI/ML engines to block emerging threats that haven’t been seen before.
High Performance Options
Purchase the affordable Plus package
| NGFW | NGTP | SNBT | |
|---|---|---|---|
| Firewall, VPN, Mobile Access | √ | √ | √ |
| Content Awareness | √ | √ | √ |
| Application Control | √ | √ | √ |
| Intrusion Prevention System | √ | √ | √ |
| URL Filtering | √ | √ | |
| Antivirus and Anti-Bot | √ | √ | |
| DNS Security | √ | √ | |
| Threat Emulation (sandboxing) | √ | ||
| Threat Extraction(CDR) | √ | ||
| Zero Phishing | √ |
Purchase the affordable Plus package and get a base system plus 4x 1 GbE fiber ports with transceivers, 2x AC power supplies, Lights-out Management, and 16 GB of memory for high connection capacity.
Next Generation Firewall, Next Generation Threat Prevention and SandBlast packages
| 1 GbE(copper) | 1 GbE(fiber) | 10 GbE | Memory | Redundant Power | LOM | |
|---|---|---|---|---|---|---|
| Base model | 10 | 0 | 0 | 8GB | - | ○ |
| Plus model | 10 | 4 | 0 | 16GB | ● | ● |
| Max capacity | 18 | 4 | 4 | 32GB | ● | ● |
IoT Security
Quantum IoT Protect now provides autonomous threat prevention. Quantum Firewalls discover IoT assets, feed those to the IoT Cloud Service to automatically map IoT devices to profiles, and then applies a zero-trust policy on the firewalls to prevent IoT threats in 5 minutes.
Integrated SD-WAN
Security protects you when you’re connected. SD-WAN ensures you’re always connected, and the connection offers the best user experience for the lowest cost. Quantum SD-WAN in Quantum firewalls keeps you secure and connected.
SPECIFICATIONS
Performance
| Threat Prevention (Gbps) | 1.8 |
|---|---|
| NGFW (Gbps) | 3.72 |
| IPS (Gbps) | 4.65 |
| Firewall (Gbps) | 9 |
Enterprise Test Conditions. Performance measured with default/Plus/maximum memory.
Additional Features
Highlights
- 1x CPUs, 2 physical cores, 4 virtual cores
- 1x 240 GB SSD storage
- 1 AC power supply (2x in Plus)
- Lights-Out-Management (included in Plus)
- Virtual Systems (Base/Plus/max mem): 10/20/20
Network Expansion Slot Options (1 of 1 slots open)
- 4x 1000Base-F SFP port card, up to 4 ports
- 4x 10GBase-F SFP+ port card, up to 4 ports
Content Security First Time Prevention Capabilities
- CPU-level, OS-level and static file analysis
- File disarm and reconstruction via Threat Extraction
- Use 10,000+ pre-defined or customize your own applications
- Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds
Dynamic User-based Policy
- Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid
- Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android, and Apple iOS platforms
Network Connectivity
- Integrated SD-WAN network optimization and resilience
- Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)
- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
- Active/Active L2, Active/Passive L2, and L3
- Session failover for routing change, device and link failure
- ClusterXL or VRRP
IPv6
- NAT66, NAT64, NAT46
- Unicast and Multicast Routing
- Static routes, Multicast routes
- Policy-based routing
Power Specifications
- AC power input: 100 to 240V (50-60Hz)
- Power consumption avg/max: 83W/113W
- Operating: 0° to 40°C, humidity 5 to 95%
- Enclosure: 1RU
- Maximum thermal output: 385.6 BTU/hr.
ORDERING QUANTUM 6200 SECURITY GATEWAY
BASE CONFIGURATION
| BASE CONFIGURATION | SKU |
|---|---|
| 6200 Security Gateway Base Configuration, includes 10x 1GbE copper ports, 8 GB RAM, 1 SSD, 1 AC Power Unit, fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG6200-SNBT |
| 6200 Security Gateway Plus Configuration, includes 10x 1GbE copper ports, 4x 1GbE SFP ports, 4x SFP SX transceivers, 16GB RAM, 1 SSD, 2x AC PSU, Lights-out Management, fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG6200-PLUS-SNBT |
| Quantum IoT Network Protection for 1 year for 6200 appliances | CPSB-IOTP-6200-1Y |
| Quantum IoT Network Protection for 1 year for 6200 PLUS appliances | CPSB-IOTP-6200-PLUS-1Y |
| Quantum SD-WAN subscription for 1 year for 6200 appliances | CPSB-SDWAN-6200-1Y |
| Quantum SD-WAN subscription for 1 year for 6200 PLUS appliances | CPSB-SDWAN-6200-PLUS-1Y |
The Base and Plus packages include 2 virtual systems (VS) - one management VS and one production/data VS. These are not additive or counted when adding additional VS licenses.
Accessories
INTERFACE CARDS AND TRANSCEIVERS
| INTERFACE CARDS AND TRANSCEIVERS | SKU |
|---|---|
| 8 Port 10/100/1000 Base-T RJ45 interface card | CPAC-8-1C-C |
| 4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers | CPAC-4-1F-C |
| SFP transceiver module for 1G fiber ports - long range (1000Base-LX) | CPAC-TR-1LX-C |
| SFP transceiver module for 1G fiber ports - short range (1000Base-SX) | CPAC-TR-1SX-C |
| SFP transceiver to 1000 Base-T RJ45(Copper) | CPAC-TR-1T-C |
| 4 Port 10GBase-F SFP+ interface card | CPAC-4-10F-C |
| SFP+ transceiver module for 10G fiber ports - for links up to 40km (10GBASE-ER) | CPAC-TR-10ER-C |
| SFP+ transceiver module for 10G fiber ports - long range up to 10km (10GBase-LR) | CPAC-TR-10LR-C |
| SFP+ transceiver module for 10G fiber ports - short range (10GBase-SR) | CPAC-TR-10SR-C |
| SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7 | CPAC-TR-10T-C |
| 10G SFP+ Direct Attach Copper (DAC) cable, 3 meters | CPAC-DAC-10G-3M |
| 4 Port 1GE copper Bypass (Fail-Open) Network interface card (10/100/1000 Base-T) | CPAC-4-1C-BP-C |
| 2 Port 10GE Short-range Fiber Bypass (Fail-Open) Network interface card (10GBase-SR) | CPAC-2-10FSR-BP-C |
MEMORY
| MEMORY | SKU |
|---|---|
| Memory upgrade kit from 8GB to 16GB for 6200 appliances | CPAC-RAM8GB-6200 |
| Memory upgrade kit from 8GB to 32GB for 6200 appliances | CPAC-RAM24GB-6200 |
| Memory upgrade kit from 16GB to 32GB for 6200 appliances | CPAC-RAM16GB-6200 |
SPARES AND MISCELLANEOUS
| SPARES AND MISCELLANEOUS | SKU |
|---|---|
| Lights Out Management module | CPAC-NLOM-C |
| Slide rails for 6000 and 7000 Security Appliances (22"-32") | CPAC-RAILS-6000/7000 |
| Telescopic slide rails for 6000 and 7000 Security Appliances (24"-36") | CPAC-RAILS-EXT-6000/7000 |
ORDERING QUANTUM 6200 (Continued)
All-inclusive Security
| NGFW | NGTP | SNBT (SandBlast) | |
|---|---|---|---|
| Basic access control plus IPS | Prevent known threats | Prevent known and zero-day attacks | |
| Firewall | √ | √ | √ |
| VPN (IPsec) | √ | √ | √ |
| Mobile Access | √ | √ | √ |
| Identity Awareness | √ | √ | √ |
| Application Control | √ | √ | √ |
| Content Awareness | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering | √ | √ | |
| Anti-Bot | √ | √ | |
| Anti-Virus | √ | √ | |
| Anti-Spam | √ | √ | |
| DNS Security | √ | √ | |
| SandBlast Threat Emulation | √ | ||
| SandBlast Threat Extraction | √ | ||
| Zero Phishing | √ | ||
| IoT Network Protection | optional | optional | optional |
| SD-WAN Network Optimization | optional | optional | optional |
The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP, and SNBT are available for subsequent years. Optional security capabilities can be ordered a-la-carte or separately.