Check Point 6800 Security Gateway Datasheet

QUANTUM 6800 SECURITY GATEWAY

!

Check Point Quantum 6800 Next Generation Firewalls enables enterprises to deploy the industry’s leading threat prevention capabilities at all points of their infrastructure, scaling security almost infinitely according to their changing business needs. It also dramatically accelerates the efficiency of their security operations. This enables enterprises to prevent and block even the most advanced attacks, before they can disrupt business.

Always Protected against Gen V

Highest caliber prevention !with unified security

Security at Hyperscale

On-demand expansion !with hyperscalability

Efficient Operations

Cut operation management !time by up to 80%

PERFORMANCE HIGHLIGHTS

Gen II Security Firewall Gen III Security NGFW1 Gen V Security Threat Prevention+SandBlast2
42Gbps 15Gbps 8.9Gbps

Performance measured with an enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control, and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.


SPOTLIGHT

6800 SECURITY GATEWAY

  1. Sync 10/100/1000 Base-T port
  2. RJ45 console port
  3. 2x network card expansion slots
  4. 8x 10/100/1000 Base-T ports
  5. Management 10/100/1000 Base-T port
  6. 2x USB 3.0 ports
  7. Lights-out Management port
  8. USB Type-C console port
  9. Redundant hot-swap power supplies
  10. 2x 480GB SSD RAID1

Prevent Known and Zero-day Threats
Check Point SandBlast Network is an evasion-resistant sandbox that provides zero-day protection from advanced and unknown threats. SandBlast Threat Extraction (CDR) ensures quick delivery of safe email and web content to users.

Flexible I/O Options

NGFW NGTP SNBT
Firewall, VPN, Mobile Access √ √ √
Content Awareness √ √ √
Application Control √ √ √
Intrusion Prevention System √ √ √
URL Filtering √ √
Antivirus and Anti-Bot √ √
Threat Emulation(sandboxing) √
Threat Extraction(CDR) √

!
Next Generation Firewall, Next Generation Threat Prevention and
!Threat Prevention + SandBlast packages

The 6800 Turbo configuration includes 10 on-board 1 GbE copper ports and one 4x 10 Gb SFP+ interface card. Or add additional I/O as you like in the two expansion slots; 8x 1GbE copper, 4x 1GbE fiber or 4x 10GbE SFP+.

All-inclusive Security Solutions

Check Point 6800 security gateways include all security technologies including the SandBlast (sandboxing) software package for one year. Purchase a renewal for NGFW, NGTP or SandBlast (SNBT) for subsequent years as you like.

Remote Management and Monitoring

A Lights-Out Management (LOM) card provides out-of-band management to remotely diagnose, start, restart and manage the appliance from a remote location. Also use LOM for remote installs of the GAiA OS.

ENTERPRISE-GRADE PLATFORM

1 GbE(copper) 1 GbE(fiber) 10GbE 40GbE Memory RedundantStorage RedundantPower LOM
Turbo model 10 0 4 0 32GB ● ● ●
Maximum capacity 26 8 8 4 64GB ● ● ●

SPECIFICATIONS

Performance

Enterprise Test Conditions

Turbo
Threat Prevention¹(Gbps) 8.9
NGFW²(Gbps) 15
IPS(Gbps) 20
Firewall(Gbps) 42

RFC 3511, 2544, 2647, 1242 PERFORMANCE (LAB)

Firewall 1518B UDP (Gbps) 50
VPN AES-128(Gbps) 10.4
Connections/sec 300,000
Concurrent connections$^{3}$ 8/16M

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance measured with default/maximum memory.

Additional Features

• 1x CPU, 10x physical cores, 20x virtual cores (total)

Highlights

• 2x 480 GB SSD RAID1 storage
• 2 redundant AC power supplies, DC PSU option
• 32 GB memory, 64 GB option
• Lights-Out Management card is Included
• Virtual Systems (default/max mem): 20/30

Network Expansion Slot Options (2 of 2 slots open)

• 8x 10/100/1000Base-T RJ45 port card, up to 26 ports
• 4x 1000Base-F SFP port card, up to 8 ports
• 4x 10GBase-F SFP+ port card, up to 8 ports
• 2x 40GBase-F QSFP+ port card, up to 4 ports

First Time Prevention Capabilities

• CPU-level, OS-level and static file analysis
• File disarm and reconstruction via Threat Extraction
• Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds
• Maximal file size for Emulation is 100 MB

Applications

• Emulation OS Support: Windows XP, 7, 8.1, 10
• Use 8,000+ pre-defined or customize your own applications
• Accept, prevent, schedule, and apply traffic-shaping

Data Loss Prevention

• Classify 700+ pre-defined data types
• End user and data owner incident handling

Content Security (continued)

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco rd pxGrid, Terminal Servers and with 3 parties via a Web API

Dynamic User-based Policy

• Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android and Apple iOS platforms

Network

Network Connectivity

• Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)
• 802.3ad passive and active link aggregation
• Layer 2 (transparent) and Layer 3 (routing) mode

High Availability

• Active/Active L2, Active/Passive L2 and L3
• Session failover for routing change, device and link failure
• ClusterXL or VRRP

IPv6

• NAT66, NAT64, NAT46
• CoreXL, SecureXL, VRRPv3

Unicast and Multicast Routing (see sk98226)

• OSPFv2 and v3, BGP, RIP
• Static routes, Multicast routes
• Policy-based routing
• PIM-SM, PIM-SSM, PIM-DM, IGMP v2 and v3

Physical

Power Requirements

• Single Power Supply rating: 500W
• AC power input: 100 to 240V (47-63Hz)
• Power consumption max: 160.1W
• Maximum thermal output: 546.19 BTU/hr.

Dimensions

• Enclosure: 1RU
• Dimensions (WxDxH): 17.24 x 20 x 1.73 in. (438 x 508 x 44mm)
• Weight: 22.05 lbs. (10 kg)

Environmental Conditions

• Operating: 0° to 40°C, humidity 5% to 95%
• Storage: –20° to 70°C, humidity 5% to 95% at 60°C

Certifications

• Safety: UL, CB, CE, TUV GS
• Emissions: FCC, IC, CE, VCCI, RCM/C-Tick
• Environmental: RoHS, WEEE, REACH¹, ISO14001


ORDERING 6800 SECURITY GATEWAYS

SECURITY APPLIANCE 1

1 SECURITY APPLIANCE

6800 Turbo configuration: includes 10x 1GbE copper ports, 4x 10GbE SFP+ ports, 4x SR transceivers, CPAP-SG6800-TURBO-SNBT
32 GB RAM, 2x 480GB SSD, 2x AC PSUs, Lights-Out Management (LOM), SandBlast (SNBT) Security Subscription Package for 1 Year.

1 Renewal NGFW, NGTP and SandBlast (SNBT) packages are available in the online product catalog.

Accessories

INTERFACE CARDS AND TRANSCEIVERS
8 Port 10/100/1000 Base-T RJ45 interface card CPAC-8-1C-C
4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers CPAC-4-1F-C
SFP transceiver module for 1G fiber ports - long range (1000Base-LX) CPAC-TR-1LX-C
SFP transceiver module for 1G fiber ports - short range (1000Base-SX) CPAC-TR-1SX-C
SFP transceiver to 1000 Base-T RJ45(Copper) CPAC-TR-1T-C
4 Port 10GBase-F SFP+ interface card CPAC-4-10F-6500/6800-C
SFP+ transceiver module for 10G fiber ports - long range(10GBase-LR) CPAC-TR-10LR-C
SFP+ transceiver module for 10G fiber ports - short range(10GBase-SR) CPAC-TR-10SR-C
2 Port 40GBase-F QSFP+ interface card CPAC-2-40F-C
QSFP+ transceiver module for 40G fiber ports - long range(40GBase-LR) CPAC-TR-40SR-QSFP-300m
QSFP+ transceiver module for 40G fiber ports - short range(40GBase-SR) CPAC-TR-40LR-QSFP-10Km
40G Direct Attach Copper Cable, one meter(40BASE-CR4) CPAC-DAC-40G-1M
40G Direct Attach Copper Cable, three meters(40BASE-CR4) CPAC-DAC-40G-3M
Bi-directional QSFP transceiver for 40G fiber Ports - short range(40GBase-SR-BD) CPAC-TR-40SR-QSFP-BiDi
MEMORY SKU
Memory upgrade kit from 32GB to 64GB for 6800 Security Gateways CPAC-RAM32GB-6800
SPARES AND MISCELLANEOUS SKU
480 GB SSD for 6800 Security Gateways CPAC-SSD-480G-6800
AC power supply for 6800 Security Gateways CPAC-PSU-AC-6800
DC power supply for 6800 Security Gateways CPAC-PSU-DC-6800
Replacement Lights-Out Management Module CPAC-LOM-6500/6800-C
Slide rails for 6000 and 7000 Security Gateways(22"-32") CPAC-RAILS-6000/7000
Extended slide rails for 6000 and 7000 Security Gateways(24"-36") CPAC-RAILS-EXT-6000/7000