Check Point 6500 Security Gateway Datasheet
QUANTUM 6500 SECURITY GATEWAY
!
Check Point Quantum 6500 Next Generation Firewalls enables enterprises to deploy the industry’s leading threat prevention capabilities at all points of their infrastructure, scaling security almost infinitely according to their changing business needs. It also dramatically accelerates the efficiency of their security operations. This enables enterprises to prevent and block even the most advanced attacks, before they can disrupt business.
Always Protected against Gen V
Highest caliber prevention
! with unified security
Security at Hyperscale
On-demand expansion
! with hyperscalability
Efficient Operations
Cut operation management
! time by up to 80%
PERFORMANCE HIGHLIGHTS
| Gen II Security: Firewall | Gen III Security: NGFW¹ | Gen V Security: Threat Prevention+SandBlast² |
|---|---|---|
| 20.6 Gbps | 6.8 Gbps | 3.4 Gbps |
Performance measured with an enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.
SPOTLIGHT
6500 SECURITY GATEWAY
!
- Sync 10/100/1000 Base-T port
- Management 10/100/1000 Base-T port
- RJ45 console port
- 2x USB 3.0 ports
- USB Type-C console port
- Lights-out Management port
- 1 network card expansion slot
- Redundant hot-swap power supplies
- 8x 10/100/1000 Base-T ports
Prevent Known and Zero-day Threats
Check Point SandBlast Network is an evasion-resistant sandbox that provides zero-day protection from advanced and unknown threats. SandBlast Threat Extraction (CDR) ensures quick delivery of safe email and web content to users.
Flexible I/O Options
The 6500 Turbo configuration includes 10 on-board 1 GbE copper ports. Add additional I/O as you like in the one expansion slot; 8x 1GbE copper, 4x 1GbE fiber, 4x 10GbE SFP+ or one of two Bypass (Fail-open) options.
| NGFW | NGTP | SNBT | |
|---|---|---|---|
| Firewall, VPN, Mobile Access | √ | √ | √ |
| Content Awareness | √ | √ | √ |
| Application Control | √ | √ | √ |
| Intrusion Prevention System | √ | √ | √ |
| URL Filtering | √ | √ | |
| Antivirus and Anti-Bot | √ | √ | |
| Threat Emulation(sandboxing) | √ | ||
| Threat Extraction(CDR) | √ |
!
Next Generation Firewall, Next Generation Threat Prevention and
!Threat Prevention + SandBlast packages
All-inclusive Security Solutions
Check Point 6500 security gateways include all security technologies including the SandBlast (sandboxing) software package for one year. Purchase a renewal for NGFW, NGTP or SandBlast (SNBT) for subsequent years as you like.
Remote Management and Monitoring
A Lights-Out Management (LOM) card provides out-of-band remote management to remotely diagnose, start, restart and manage the appliance from a remote location. Also use LOM for remote installs of the GAiA OS.
ENTERPRISE-GRADE PLATFORM
| 1 GbE(copper) | 1 GbE(fiber) | 10 GbE | Memory | Redundant Power | LOM | |
|---|---|---|---|---|---|---|
| Turbo model | 10 | 0 | 0 | 16GB | ● | ● |
| Maximum capacity | 18 | 4 | 4 | 32GB | ● | ● |
SPECIFICATIONS
Performance
Enterprise Test Conditions
| Turbo | |
|---|---|
| Threat Prevention 1(Gbps) | 3.4 |
| NGFW 2(Gbps) | 6.8 |
| IPS(Gbps) | 7.8 |
| Firewall(Gbps) | 20.6 |
RFC 3511, 2544, 2647, 1242 PERFORMANCE (LAB)
| Firewall 1518B UDP (Gbps) | 22.8 |
|---|---|
| VPN AES-128(Gbps) | 4.3 |
| Connections/sec | 140,000 |
| Concurrent connections$^{3}$ | 4/8M |
1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance measured with default/maximum memory.
Additional Features
Highlights
• 1x CPU, 4x physical cores, 8x virtual cores (total)
• 1x 240 GB SSD storage
• 2 redundant AC power supplies, DC PSU option
• 16 GB memory, 32 GB option
• Lights-Out Management card
• Virtual Systems (default/max mem): 20/20
Network Expansion Slot Options (1 of 1 slots open)
• 8x 10/100/1000Base-T RJ45 port card, up to 18 ports
• 4x 1000Base-F SFP port card, up to 4 ports
• 4x 10GBase-F SFP+ port card, up to 4 ports
Content Security
First Time Prevention Capabilities
• CPU-level, OS-level and static file analysis
• File disarm and reconstruction via Threat Extraction
• Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds
Applications
• Emulation OS Support: Windows XP, 7, 8.1, 10
• Maximal file size for Emulation is 100 MB
• Use 8,000+ pre-defined or customize your own applications
Data Loss Prevention
• Accept, prevent, schedule, and apply traffic-shaping
• Classify 700+ pre-defined data types
Content Security (continued)
• End user and data owner incident handling
• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3rd parties via a Web API
Dynamic User-based Policy
• Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android and Apple iOS platforms
Network
Network Connectivity
• Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)
• 802.3ad passive and active link aggregation
• Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
• Active/Active L2, Active/Passive L2 and L3
• Session failover for routing change, device and link failure
• ClusterXL or VRRP
IPv6
• NAT66, NAT64, NAT46
• CoreXL, SecureXL, VRRPv3
Unicast and Multicast Routing (see sk98226)
• OSPFv2 and v3, BGP, RIP
• Static routes, Multicast routes
• Policy-based routing
• PIM-SM, PIM-SSM, PIM-DM, IGMP v2 and v3
Power Requirements
• Single Power Supply rating: 275W
• Single Power Supply rating: 275W Content Security
• AC power input: 100 to 240V (47-63Hz)
• Power consumption max: 88.4W
• Maximum thermal output: 301.65 BTU/hr.
Dimensions
• Enclosure: 1RU
• Dimensions (WxDxH): 17.24 x 20 x 1.73 in. (437.9 x 508 x 44mm)
• Weight: 17.53 lbs. (7.95 kg)
Environmental Conditions
• Operating: 0° to 40°C, humidity 5% to 95%
• Storage: –20° to 70°C, humidity 5% to 95% at 60°C
Certifications
Certifications Data Loss Prevention
• Safety: UL, CB, CE, TUV GS
• Emissions: FCC, IC, CE, VCCI, RCM/C-Tick
• Environmental: RoHS, WEEE, REACH , ISO14001
ORDERING 6500 SECURITY GATEWAYS
SECURITY APPLIANCE 1
1 SECURITY APPLIANCE
| 6500 Turbo configuration: includes 10x 1GbE copper ports, 16 GB RAM, 240GB SSD, 2x AC PSUs, Lights-Out Management (LOM), SandBlast(SNBT) Security Subscription Package for 1 Year. | CPAP-SG6500-TURBO-SNBT |
|---|
1 Renewal NGFW, NGTP and SandBlast (SNBT) packages are available in the online product catalog.
Accessories
| INTERFACE CARDS AND TRANSCEIVERS | |
|---|---|
| 8 Port 10/100/1000 Base-T RJ45 interface card | CPAC-8-1C-C |
| 4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers | CPAC-4-1F-C |
| SFP transceiver module for 1G fiber ports - long range(1000Base-LX) | CPAC-TR-1LX-C |
| SFP transceiver module for 1G fiber ports - short range(1000Base-SX) | CPAC-TR-1SX-C |
| SFP transceiver to 1000 Base-T RJ45(Copper) | CPAC-TR-1T-C |
| 4 Port 10GBase-F SFP+ interface card | CPAC-4-10F-6500/6800-C |
| SFP+ transceiver module for 10G fiber ports - long range(10GBase-LR) | CPAC-TR-10LR-C |
| SFP+ transceiver module for 10G fiber ports - short range(10GBase-SR) | CPAC-TR-10SR-C |
| MEMORY | SKU |
| --- | --- |
| Memory upgrade kit from 16GB to 32GB for 6500 Security Gateways | CPAC-RAM16GB-6500 |
| SPARES AND MISCELLANEOUS | SKU |
| --- | --- |
| AC power supply for 6500 Security Gateways | CPAC-PSU-AC-6500 |
| DC power supply for 6500 Security Gateways | CPAC-PSU-DC-6500 |
| Lights-Out Management module | CPAC-LOM-6500/6800-C |
| Slide rails for 6000 and 7000 Security Gateways(22”-32”) | CPAC-RAILS-6000/7000 |
| Extended slide rails for 6000 and 7000 Security Gateways(24”-36”) | CPAC-RAILS-EXT-6000/7000 |
Virtual Systems packages also available in the online product catalog.