CHECK POINT

41000 AND 61000 SECURITY SYSTEMS

CHECK POINT

SECURITY SYSTEMS

Scalable performance, advanced security

Product Benefits

• Scalable platform that grows with your business
• High port density with 40GbE and 10GbE fiber ports
• Full redundancy (N+N, N+1) eliminates down-time
• Designed for ease of management and fast deployment

Product Features

• Scalable security solution from 3,200 up to 33,000 SecurityPower units
• High raw firewall performance of up to 80 Gbps in the 41000 and 400 Gbps in the 61000
• High port density with up to 30x10GbE, 4x40GbE in the 41000 and 60x10GbE, 8x40GbE in the 61000
• Real-world IPS performance up to 25 Gbps in the 41000 and 70 Gbps in the 61000
• Intra/Dual-Chassis redundancy
• Carrier grade ATCA compliant chassis

INSIGHTS

Large data centers have uncompromising needs for performance, uptime and scalability. High end security gateway solutions must perform network access control within the unique requirements of these environments —ultra-high throughput, connection capacity, session and logging rate —while supporting the latest networking standards like IPv6. With the increase in sophisticated attacks, additional security layers such as IPS, Application Control, URL Filtering, Antivirus and others are also required. In addition to their vast performance and security needs, data center environments are characterized by rigid requirements for high reliability of its various systems. All of these requirements drive the need for redundant, serviceable and highly available components and systems.

SOLUTION

The Check Point 41000 and 61000 Security Systems are built for these demanding environments and are based on proven technologies used by Fortune 100 companies and telecommunication vendors all over the world. The Check Point Firewall, IPS, Application Control and Identity Awareness technologies have been awarded the highest 3rd-party certifications possible including NATO Information Product Catalog; US Government penetration testing; Department of Defense Information Systems Agency, ISO-IEC 15408 and more.

The ATCA compliant, carrier grade design offers unsurpassed scalability, availability and serviceability with high performance and high port density. Redundant Security Switch Modules (SSM) provide switching fabric, physical interface, and routing functions. Redundant Chassis Management Modules (CMM) continuously check and monitor the health of the chassis including fans, power supplies and Security Gateway Modules (SGM). For optimal reliability, Check Point ClusterXL Load Sharing distributes the load between Security Gateway Modules in one chassis and ClusterXL High Availability operates between chassis. Check Point SyncXL provides for highly efficient synchronization of system and security information between components in order to ensure high system performance. Deploy two chassis in high availability mode to eliminate down-time.

These two platforms improve security, protect business continuity and reduce operational costs in complex, mission critical security environments such as data centers, Managed Service Providers and telecommunication companies. By adding more SGMs companies get more security and performance. Because SGMs are hot-swappable, customers can add SGMs, boosting performance to new or existing 41000 and 61000 systems even when those systems are in production.

1 Fan Trays

1 41000 and 61000

41000 and 61000

2 Security Gateway Modules (SGM)

The Check Point 61000 Security System is the industry’s fastest security system, achieving up to 400 Gbps of throughput in a single firewall instance. Even more, the ability to support 210 million concurrent connections and 3 million sessions per second brings unparalleled performance to multi-transaction environments.

3 Security Switch Modules (SSM)

4 Power Supplies

5 Chassis Management Modules (CMM)

61000 SECURITY SYSTEM

This ATCA compliant, scalable system contains up to 12 Security Gateway Modules (SGM) and 2 or 4 Security Switch Modules (SSM). The SSMs distribute the load evenly across the 1.2 Tbps chassis backplane fabric to the SGMs ensuring near linear scalability from 80 up to 400 Gbps as SGMs are added to the chassis. The 61000 Security System delivers a SecurityPower range starting at 3,200 units with 1 SGM and scales up to 33,000 units with 12 SGMs and 2 SSMs.

The 61000 Security System has been designed from the ground up to support the unique service requirements of Telcos and data centers. This includes system level redundancy and chassis level redundancy of the components that comprise the 61000 such as power-supplies, fans and the various hardware modules.

41000 SECURITY SYSTEM

The Check Point 41000 Security System is a compact 6U ATCA compliant chassis that can contain up to 4 Security Gateway Modules (SGM) and 2 Security Switch Modules (SSM). The 41000 chassis distributes the load evenly among the SGMs ensuring near linear scalability from 20 up to 80 Gbps of firewall throughput as SGMs are added to the chassis.

The 41000 Security System delivers a SecurityPower range starting at 3,200 SecurityPower Units (SPU) with 1 SGM and scales to 11,000 SPUs with 4 SGMs. The shared design, components, and the flexibility to add additional security controls facilitates future expansion and growth of the network infrastructure, providing excellent investment protection.

VIRTUAL SYSTEMS

Check Point Virtual Systems (VS) enable organizations to create virtualized security gateways to consolidate infrastructure and segment the network while reducing costs and offering customized per-Virtual System Software Blade security. The solution supports seamless performance scale-up by adding more Virtual Systems and hardware blades, with traffic evenly balanced across the entire chassis.

✓ supported, û not supported

EASE OF MANAGEMENT

Our renowned security management software centrally manages the 41000 and 61000 from anywhere in the network. With our intuitive configuration wizard, the first SGM can be deployed in less than 30 minutes and additional SGMs can be added seamlessly.

INTEGRATED SECURITY ARCHITECTURE

Each 41000 and 61000 Security System is packaged with a group of preselected Check Point Software Blades including Firewall, IPsec VPN, Identity Awareness, Advanced Networking, and Acceleration and Clustering. Enable additional Software Blades to further extend and customize your protection. This lowers total cost of ownership and meets any need, today and in the future.

PERFORMANCE

¹Performance measured with real-world traffic blend and content, a typical rule base, updated recommended signatures, NAT and logging enabled. Find the right appliance for your performance and security requirements using the Appliance Selection Tool.

HARDWARE

NETWORK

SOFTWARE BLADE PACKAGES

1 Two and three year SKUS are also available. See the online Product Catalog

ACCESSORIES