Check Point 6400 Security Gateway Datasheet

QUANTUM 6400 SECURITY GATEWAY

Top Security Effectiveness

AI ML powered Threat Prevention

Unified Management and Ops Efficiency

Recognition

AI Deep Learning powered threat prevention to secure enterprises

Check Point Quantum 6400 Next Generation Firewalls enable enterprises to deploy the industry’s leading threat prevention capabilities at all points of their infrastructure, scaling security according to their changing business needs. This enables enterprises to prevent and block even the most advanced attacks before they can disrupt business — greatly increasing the efficiency of their security operations.

PERFORMANCE HIGHLIGHTS

Firewall Next Gen Firewall Threat Prevention
12 Gbps 5.5 Gbps 2.5 Gbps

Performance measured with enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.


SPOTLIGHT

6400 SECURITY GATEWAY

  1. Sync 10/100/1000 Base -T port
  2. RJ45 console port
  3. 1 network expansion slot
  4. 8x 10/100/1000 Base -T ports
  5. Management 10/100/1000 Base -T port
  6. 2x USB 3.0 ports
  7. Lights-out Management port
  8. USB Type-C console port
  9. Redundant power supplies

High Performance Options

Purchase the affordable Plus package

NGFW NGTP SNBT
Firewall, VPN, Mobile Access √ √ √
Content Awareness √ √ √
Application Control √ √ √
Intrusion Prevention System √ √ √
URL Filtering √ √
Antivirus and Anti-Bot √ √
DNS Security √ √
Threat Emulation(sandboxing) √
Threat Extraction(CDR) √
Zero Phishing √

Next Generation Firewall, Next Generation Threat Prevention and SandBlast packages

1 GbE(copper) 1 GbE(fiber) 10 GbE Memory Redundant Power LOM
Base model 10 0 0 8GB ● ○
Plus model 10 4 0 16GB ● ●
Max capacity 18 4 4 32GB ● ●

IoT Security

Quantum IoT Protect now provides autonomous threat prevention. Quantum Firewalls discover IoT assets, feed those to the IoT Cloud Service to automatically map IoT devices to profiles and then applies a zero-trust policy on the firewalls to prevent IoT threats in 5 minutes.

Integrated SD-WAN

Security protects you when you’re connected. SD-WAN ensures you’re always connected, and the connection offers the best user experience for the lowest cost. Quantum SD-WAN in Quantum firewalls keeps you secure and connected.


SPECIFICATIONS

Performance

Threat Prevention$ ^{11}$ (Gbps) 2.5
NGFW$ ^{2}$ (Gbps) 5.5
IPS (Gbps) 6.5
Firewall (Gbps) 12

RFC 3511, 2544, 2647, 1242 Performance (Lab)

Firewall 1518B UDP (Gbps) 30
VPN AES-128(Gbps) 2.73
Connections/sec 90,000
Concurrent connections $ ^{3}$ 2/4/8M

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection with logging enabled.
2: Includes Firewall, Application Control and IPS with logging enabled.
3: Performance measured with default/Plus/maximum memory.

Additional Features

Highlights

Network Expansion Slot Options (1 of 1 slots open)

First Time Prevention Capabilities

Dynamic User-based Policy

Network Connectivity

High Availability

IPv6

Physical

Certifications


ORDERING QUANTUM 6400 SECURITY GATEWAY S

BASE CONFIGURATION

BASE CONFIGURATION SKU
6400 Security Gateway Base Configuration, includes 10x 1GbE copper ports, 8 GB RAM, 1 SSD, 2x AC PSUs, fixed rails,SandBlast (SNBT) Security Subscription Package for 1 Year. CPAP-SG6400-SNBT
6400 Security Gateway Plus Configuration, includes 10x 1GbE copper ports, 4x 1GbE SFP ports, 4x SFP SX transceivers,16GB RAM,1 SSD,2x AC PSUs,Lights-out Management,fixed rails,SandBlast(SNBT)Security Subscription Package for1Year. CPAP-SG6400-PLUS-SNBT
Quantum IoT Network Protection for 1 year for 6400 appliances CPSB-IOTP-6400-1Y
Quantum IoT Network Protection for 1 year for 6400 PLUS appliances CPSB-IOTP-6400-PLUS-1Y
Quantum SD-WAN subscription for 1 year for 6400 appliances CPSB-SDWAN-6400-1Y
Quantum SD-WAN subscription for 1 year for 6400 PLUS appliances CPSB-SDWAN-6400-PLUS-1Y

The Base and Plus packages include 2 virtual systems (VS) - one management VS and one production/data VS. These are not additive or counted when adding additional VS licenses.

  1. Renewal NGFW, NGTP and SandBlast (SNBT) packages are available in the online product catalog.

Accessories

INTERFACE CARDS AND TRANSCEIVERS

INTERFACE CARDS AND TRANSCEIVERS SKU
8 Port 10/100/1000 Base-T RJ45 interface card CPAC-8-1C-C
4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers CPAC-4-1F-C
SFP transceiver module for 1G fiber ports - long range (1000Base-LX) CPAC-TR-1LX-C
SFP transceiver module for 1G fiber ports - short range (1000Base-SX) CPAC-TR-1SX-C
SFP transceiver to 1000 Base-T RJ45(Copper) CPAC-TR-1T-C
4 Port 10GBase-F SFP+ interface card CPAC-4-10F-C
SFP+ transceiver module for 10G fiber ports - for links up to 40km(10GBASE-ER) CPAC-TR-10ER-C
SFP+ transceiver module for 10G fiber ports - long range up to 10km(10GBase-LR) CPAC-TR-10LR-C
SFP+ transceiver module for 10G fiber ports - short range(10GBase-SR) CPAC-TR-10SR-C
SFP+ transceiver 10GBASE-T RJ45(Copper)-for links up to 30m over CAT6a/CAT7 CPAC-TR-10T-C
10G SFP+ Direct Attach Copper(DAC) cable,3 meters CPAC-DAC-10G-3M
4 Port 1GE copper Bypass(Fail-Open) Network interface card(10/100/1000 Base-T) CPAC-4-1C-BP-C
2 Port 10GE Short-range Fiber Bypass(Fail-Open) Network interface card(10GBase-SR) CPAC-2-10FSR-BP-C
SPARES AND MISCELLANEOUS SKU
Lights Out Management module CPAC-NLOM-C
Slide rails for 6000 and 7000 Security Appliances(22"-32") CPAC-RAILS-6000/7000
Telescopic slide rails for 6000 and 7000 Security Appliances(24"-36") CPAC-RAILS-EXT-6000/7000

ORDERING QUANTUM 6400 ( Continued)

All-inclusive Security

NGFW NGTP SNBT(SandBlast)
Basic access control plus IPS √ √ √
Prevent known threats √ √ √
Prevent known and zero-day attacks √ √ √
VPN(IPsec) √ √ √
Mobile Access √ √ √
Identity Awareness √ √ √
Application Control √ √ √
Content Awareness √ √ √
IPS √ √ √
URL Filtering √ √
Anti-Bot √ √
Anti-Virus √ √
Anti-Spam √ √
DNS Security √ √
SandBlast Threat Emulation √
SandBlast Threat Extraction √
Zero Phishing √
IoT Network Protection optional optional optional
SD-WAN Network Optimization optional optional optional

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years. Optional security capabilities can be ordered a-la-carte or separately.