Check Point 6700 Security Gateway Datasheet

QUANTUM 6700 SECURITY GATEWAY

Top Security Effectiveness

Leader with 99.7% malware block rate in Miercom NGFW Security Benchmark (2023)

AI ML powered Threat Prevention

Protect networks and users from zero-days, phishing, DNS, and ransomware attacks

Unified Management and Ops Efficiency

Increase protection and reduce TCO with a consolidated security architecture

Industry Recognition

AI Deep Learning powered threat prevention to secure enterprises.

Check Point Quantum 6700 Next Generation Firewalls enable enterprises to deploy the industry’s leading threat prevention capabilities at all points of their infrastructure, scaling security according to their changing business needs.

This enables enterprises to prevent and block even the most advanced attacks before they can disrupt business — greatly increasing the efficiency of their security operations.

PERFORMANCE HIGHLIGHTS

Firewall Next Gen Firewall Threat Prevention
26 Gbps 13.4 Gbps 5.8 Gbps

Performance measured with enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.


SPOTLIGHT

6700 SECURITY GATEWAY

  1. Sync 10/100/1000 Base-T port
  2. RJ45 console port
  3. 1 network expansion slot
  4. 8x 10/100/1000 Base-T ports
  5. Management 10/100/1000 Base-T port
  6. 2x USB 3.0 ports
  7. Lights-out Management port
  8. USB Type-C console port
  9. Redundant hot-swap power supplies

AI Deep Learning Threat Prevention

The speed and sophistication of evasive zero-day DNS and phishing attacks requires AI Deep Learning to predict and block malicious behavior without human intervention. Quantum firewalls use Check Point’s threat intelligence cloud with 40+ AI/ML engines to block emerging threats that haven’t been seen before.

NGFW NGTP SNBT
Firewall, VPN, Mobile Access √ √ √
Content Awareness √ √ √
Application Control √ √ √
Intrusion Prevention System √ √ √
URL Filtering √ √
Antivirus and Anti-Bot √ √
DNS Security √ √
Threat Emulation(sandboxing) √
Threat Extraction(CDR) √
Zero Phishing √

ENTERPRISE-GRADE PLATFORM

Next Generation Firewall, Next Generation Threat Prevention and SandBlast packages.

Integrated SD-WAN provides out-of-band management to ensure you’re always connected, allowing remote diagnostics and management.

1 GbE(copper) 1 GbE(fiber) 10 GbE Memory Redundant Power LOM
Base model 10 0 0 8GB ○ ○
Plus model 10 0 4 16GB ● ●
Max capacity 18 4 4 32GB ● ●

IoT Security

Quantum IoT Protect now provides autonomous threat prevention. Quantum Firewalls discover IoT assets, feeding them to the IoT Cloud Service to automatically map IoT devices to profiles and then apply a zero-trust policy on the firewalls to prevent IoT threats in 5 minutes.


SPECIFICATIONS

Performance

Performance metrics:

Threat Prevention (Gbps) 5.8
NGFW (Gbps) 13.4
IPS (Gbps) 19
Firewall (Gbps) 26

Additional Features Highlights


ORDERING QUANTUM 6700 SECURITY GATEWAYS

BASE CONFIGURATION

BASE CONFIGURATION SKU
6700 Security Gateway Base Configuration, includes 10x 1GbE copper ports, 8GB RAM, 1 SSD, 1 AC PSU, telescopic rails, SandBlast (SNBT) Security Subscription Package for 1 Year. CPAP-SG6700-SNBT
6700 Security Gateway Plus Configuration, includes 10x 1GbE copper ports, 4x10GbE SFP+ ports, 4xSFP+SR transceivers, 16GB RAM, 1 SSD, 2xAC PSU, Lights-out Management, telescopic rails, SandBlast (SNBT) Security Subscription Package for 1 Year. CPAP-SG6700-PLUS-SNBT
Quantum IoT Network Protection for 1 year for 6700 appliances CPSB-IOTP-6700-1Y
Quantum IoT Network Protection for 1 year for 6700 PLUS appliances CPSB-IOTP-6700-PLUS-1Y
Quantum SD-WAN subscription for 1 year for 6700 appliances CPSB-SDWAN-6700-1Y
Quantum SD-WAN subscription for 1 year for 6700 PLUS appliances CPSB-SDWAN-6700-PLUS-1Y

The Base and Plus packages include 2 virtual systems (VS) - one management VS and one production/data VS. These are not additive or counted when adding additional VS licenses.

Accessories

INTERFACE CARDS AND TRANSCEIVERS

Interface Component SKU
8 Port 10/100/1000 Base-T RJ45 interface card CPAC-8-1C-C
4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers CPAC-4-1F-C
SFP transceiver module for 1G fiber ports - long range (1000Base-LX) CPAC-TR-1LX-C
SFP transceiver module for 1G fiber ports - short range (1000Base-SX) CPAC-TR-1SX-C
SFP transceiver to 1000 Base-T RJ45 (Copper) CPAC-TR-1T-C
4 Port 10GBase-F SFP+ interface card CPAC-4-10F-C
SFP+ transceiver module for 10G fiber ports - for links up to 40km (10GBASE-ER) CPAC-TR-10ER-C
SFP+ transceiver module for 10G fiber ports - long range up to 10km (10GBase-LR) CPAC-TR-10LR-C
SFP+ transceiver module for 10G fiber ports - short range (10GBase-SR) CPAC-TR-10SR-C
SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7 CPAC-TR-10T-C
10G SFP+ Direct Attach Copper (DAC) cable, 1 meter CPAC-DAC-10G-1M
10G SFP+ Direct Attach Copper (DAC) cable, 3 meters CPAC-DAC-10G-3M
4 Port 1GE copper Bypass (Fail-Open) Network interface card (10/100/1000 Base-T) CPAC-4-1C-BP-C
2 Port 10GE Short-range Fiber Bypass (Fail-Open) Network interface card (10GBase-SR) CPAC-2-10FSR-BP-C
SPARES AND MISCELLANEOUS SKU
Additional/Replacement AC Power Supply for 6700, 6700 and 6900 appliances CPAC-PSU-AC-6600/6700/6900
Additional/Replacement DC Power Supply for 6600, 6700, 6900 appliances CPAC-PSU-DC-6600/6700/6900
Lights Out Management module CPAC-NLOM-C
Slide rails for 6000 and 7000 Security Appliances (22”–32”) CPAC-RAILS-6000/7000
Telescopic slide rails for 6000 and 7000 Security Appliances (24”–36”) CPAC-RAILS-EXT-6000/7000

ORDERING QUANTUM 6700 (Continued)

All-inclusive Security

NGFW NGTP SNBT (SandBlast)
Basic access control plus IPS √ √ √
Prevent known threats √ √ √
Prevent known and zero-day attacks √
Firewall √ √ √
VPN (IPsec) √ √ √
Mobile Access √ √ √
Identity Awareness √ √ √
Application Control √ √ √
Content Awareness √ √ √
IPS √ √ √
URL Filtering √ √
Anti-Bot √ √
Anti-Virus √ √
Anti-Spam √ √
DNS Security √ √
SandBlast Threat Emulation √
SandBlast Threat Extraction √
Zero Phishing √
IoT Network Protection optional optional optional
SD-WAN Network Optimization optional optional optional