23900 SECURITY GATEWAY

!

Ready to battle any threat, from small to the fifth generation large scale and multi-vector attacks, our
security gateways provide superior threat prevention and a unified security management. Check Point
23900 Next Generation Firewall combines the most comprehensive protections with data center-grade
security and hardware to maximize uptime and performance for securing large enterprise and data
center environments.

The Most Advanced

Threat Prevention

Protection from unknown threats and
zero-day attacks

Full Security

Uncompromising Performance

Highly optimized with up to 20 Gbps of
threat prevention throughput

! Designed to Secure Encrypted Traffic

Powerful platforms for inspection
of SSL traffic

PERFORMANCE HIGHLIGHTS

Performance measured with enterprise testing conditions. Additional performance details on page 4. 1. Includes Firewall, Application Control,
and IPS. 2. Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

WELCOME TO THE FUTURE OF CYBER SECURITY

23900

Data center grade security, performance and reliability

The Check Point 23900 Next Generation Security Gateway combines the most comprehensive
security protections with data center grade hardware to maximize uptime while safeguarding
enterprise and data center networks.

The 23900 is a 2U Next Generation Security Gateways with five I/O expansion slots for high port
capacity, redundant AC or DC power supplies and fans, a 2x 1TB (HDD) or 2x 480GB (SSD) RAID1
disk array, and Lights-Out Management (LOM) for remote management. If you’re ready for 25, 40 or
100 GbE, so is the 23900 Next Generation Security Gateway - with its 40 and 100/25 GbE IO card
options.

Key Features & Benefits

• Advanced Threat Prevention ….… 1 time prevention of known and zero-day threats
  ! !
• Uncompromising Performance .… Achieve up to 20 Gbps of threat prevention throughput
  ! ! !
• Secure Encrypted Traffic ………! Consolidate SSL inspection into one integrated security platform
  ! !
  !

SPOTLIGHT

23900 SECURITY GATEWAY

!1 Graphic LCD display
!2 2 x 1TB (HDD) or 2x 480GB (SSD) RAID1 !
!3 Five network card expansion slots
!4 USB ports for ISO installation
!5 Console port
!6 Lights-Out Management port
!7 Sync 10/100/1000Base-T RJ45
!8 Management 10/100/1000Base-T RJ45

Prevent Known and Zero-day Threats
Zero-day protection offering network
security with evasion-resistant malware
detection and complete protection from
the most advanced attacks, ensuring
quick delivery of safe content to users.

All-inclusive Security Solutions
Check Point 23900 Next Generation
Security Gateway offers a complete and
consolidated security solution available
in two complete packages:

• Threat Prevention
• Threat Prevention + SandBlast

Inclusive High Performance Package
Purchase the affordable High
Performance Package (HPP). This
includes the base system plus three 4x
10GbE SFP+ interface cards,
transceivers and added memory for
high connection capacity.

100, 40 and 25 GbE Connectivity
If you’re ready to move from 10 to 25,
40 or 100 GbE, so is the 23900 Next
Generation Security Gateway. The
23900 Security Gateway lets you
connect your 10 GbE server uplinks to
your core network.

DATA CENTER GRADE PLATFORM

WELCOME TO THE FUTURE OF CYBER SECURITY

Performance

EnterpriseTesting Conditions

1 • 20 Gbps of Threat Prevention 2 • 24 Gbps of NGFW • 26 Gbps IPS • 77.9 Gbps of firewall throughput

Ideal Testing Conditions

• 128 Gbps of UDP 1518 byte packet firewall throughput • 26 Gbps of AES-128 VPN throughput • 400,000 connections per second, 64 byte response³ • 18.3/25.6/51.2M concurrent connections, 64 byte response³

1. Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast
   Zero-Day Protection. 2. Includes Firewall, Application Control and IPS. 3. Performance
   measured with default/HPP/maximum memory with R80.10.

Additional Features

Highlights

• 2x CPUs, 36x physical cores, 72x virtual cores (total)
• 2x 1TB HDD or 480GB SSD RAID1 storage
• 48, 64 and 128 GB memory options
• Lights-Out-Management card is Included
• Virtual Systems (base/HPP/max mem): 125/250/250

Network Expansion Slot Options (3 of 5 slots open)

• 8x 10/100/1000Base-T RJ45 port card, up to 40 ports
• 4x 1000Base-F SFP port card, up to 20 ports
• 4x 10GBase-F SFP+ port card, up to 20 ports
• 2x 40G QSFP+ port card, up to 10 ports
• 2x 100/25G QSFP28 port card, up to 10 ports

Fail-Open/Bypass Network Options

• 4x 10/100/1000Base-T RJ45 port card
• 2x 10GBase-F SFP+ port card

Content Security

First Time Prevention Capabilities

• CPU-level, OS-level and static file analysis
• File disarm and reconstruction via Threat Extraction
• Average emulation time for unknown files that require full
  sandbox evaluation is under 100 seconds
• Emulation OS Support: Windows XP, 7, 8.1, 10
• Maximal file size for Emulation is 100 MB

Applications

• Use 8,000+ pre-defined or customize your own applications
• Accept, prevent, schedule, and apply traffic-shaping

Data Loss Prevention

• Classify 700+ pre-defined data types
• End user and data owner incident handling

Content Security (continued)

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid,
  Terminal Servers and with 3 parties via a Web API

Dynamic User-based Policy

$$3^{ ext{rd}}$$

• Enforce consistent policy for local and remote users on
  Windows, macOS, Linux, Android and Apple iOS platforms

Network

Network Connectivity

• Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)
• 802.3ad passive and active link aggregation
• Layer 2 (transparent) and Layer 3 (routing) mode

High Availability

• Active/Active L2, Active/Passive L2 and L3
• Session failover for routing change, device and link failure
• ClusterXL or VRRP

IPv6

• NAT66, NAT64, NAT46
• CoreXL, SecureXL, HA with VRRPv3

Unicast and Multicast Routing (see SK98226)

• OSPFv2 and v3, BGP, RIP
• Static routes, Multicast routes
• Policy-based routing
• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

Physical

Power Requirements

• Single Power Supply rating: 800W
• AC power input: 90 to 264V (47-63Hz)
• DC input current: -40.5V/24A -48V/19.2A, -60V/16.0A
• Power consumption avg/max: AC253/399W, DC343.6/394W
• Maximum thermal output: 1361.4 BTU/hr.

Dimensions

• Enclosure: 2RU
• Dimensions (WxDxH): 17.4x20.84x3.5 in. (442x529x88mm)
• Weight: 34.8 lbs. (15.8 kg)

Environmental Conditions

• Operating: 0° to 40°C, humidity 5% to 95%
  $$40^{ ext{C}}$$
• Storage: –20° to 70°C, humidity 5% to 95% at 60°C

Certifications

• Safety: UL, CB, CE, TUV GS
• Emissions: FCC, CE, VCCI, RCM/C-Tick
• Environmental: RoHS, WEEE, REACH¹, ISO14001

1. factory certificate

ORDERING 23900 SECURITY GATEWAYS