Check Point MLS200 Lightspeed Firewall Datasheet
QUANTUM MLS200 MAESTRO LIGHTSPEED
Check Point Quantum MLS200 Lightspeed Next Generation Firewalls and Quantum Maestro Hyperscale Network Security enables enterprises to deploy security that performs at the speed of business to accelerate large file transfers, provides low latency for high frequency applications, and dynamically scales security on-demand as their business grows.
Secure Hi-speed Data Transfers
! 200 Gbps line-rate in a single firewall
Protect Hi-frequency Trading Apps
! Sub 3μSec ultra low latency
Scalable Throughput for Hyper-growth
! Scale up to 3 Tbps of firewall throughput
QUANTUM SECURITY PLATFORM
MLS200 LIGHTSPEED FIREWALL
- RJ45 console port
- USB Type-C console port
- ConnectX NIC: 2x 100G QSFP28 ports
- 8x 10/100/1000M Base-T ports
- 2x USB 3.0 ports
- Lights-out Management port
- 2x 480GB SSD RAID1
- Redundant hot-swap power supplies
NVIDIA ConnectX
Quantum Lightspeed firewalls are equipped with one or more NVIDIA ConnectX network interface cards (NIC), each with 2x 100G QSFP28 ports. NVIDIA ConnectX NICs offload network processing from the host CPUs, freeing them to manage security. This provides substantial performance gains for trusted traffic that has long sessions, ensuring low 3μSec latency at nearly line rate.
Maestro Hyperscale Lightspeed
Check Point Maestro brings scale, agility, and elasticity of the cloud on-premise with efficient N+1 clustering based on Check Point HyperSync clustering technology, maximizing the capabilities of Lightspeed firewalls.
Create up to 8 Security Groups, with up to 31 firewalls in a group sharing the same security feature set, policy, and assets they protect.
When a gateway is added to the system, it gets all the configurations, the policy, even the software version, updated and aligned with the existing deployment, sharing the load within 6 minutes.
All-inclusive, Resilient Security Solutions
! ! Maestro with Lightspeed Firewalls
SCALABLE, RESILIENT FIREWALL CLUSTERS WITH MAESTRO
The MLS200 Maestro package includes the Hyperscale Orchestrator 140 model with 48x 10GbE, 8x 100GbE ports and a total fabric capacity of 1.2 Tbps. For redundancy, deploy two Orchestrators of the same model together.
MLS200 firewalls connect to the Orchestrator via 100 GbE Direct Attached Copper (DAC) cables. The Orchestrator’s 300-nanosecond port-to-port latency delivers predictable wire speed performance with no packet loss for any packet size.
Or, customers can purchase MLS200 security appliances and the MHO175 Hyperscale Orchestrator a la carte to scale up to 3 Tbps of firewall throughput.
| MHO 140 | |
|---|---|
| Fabric Capacity | 1.28 Tbps |
| Latency | 300 nsec port to port |
| Ports | 48x 10GbE and 8x 100GbE |
| Enclosure | 1RU |
| Dimensions(W x D x H) | 17.24' x 17' x 1.72",438x436x43.8mm |
| Weight | 18.8lb(8.52kg) |
| Power Input | 100-127VAC,200-240VAC,50-60Hz |
| Single Power Supply Rating | 165W |
| Dual Power Supplies | Included |
| Airflow | Front to Back |
| Certifications | UL60950-1,CB IEC60950-1,CE LVD EN60950-1/FCC,IC,CE,VCCI,RCM/C-Tick/RoHS,WEEE,REACH,*ISO14001 |
LIGHTSPEED SECURITY USE CASES
Any Enterprise with a Data Center, Hybrid Cloud, or Distributed Data Centers
Secure High-Speed Transfers of Large Data Sets: Networks converge at the data center core and in high-speed interconnects between data centers and the hybrid cloud. Businesses transfer large data sets across these networks for data analysis and disaster recovery planning.
Quantum Lightspeed 100 gigabit network interfaces enable enterprises to accelerate these transfers of large data sets across data center core and data center interconnects — supporting up to 200 and 400 Gbps of single firewall throughput in the MLS200 and MLS400 respectively.
Banking and Financial Services
Secure Financial Transactions with Micro-second Latency: In the world of finance, a fraction of a second can make a huge difference. The Quantum Lightspeed NGFW series enables firms to securely increase transaction capacity for high-frequency applications with low 3μSec latency.
Any Enterprise Requiring Investment Security
Support Hyper-growth with Scalable Security Throughput: The Quantum MLS200 and MLS400 lightspeed firewalls support up to 200 and 400 Gbps of firewall throughput in a single firewall. When used with Maestro, enterprises can scale up to 3 Tbps of firewall throughput.
Telco Networks
Support Hyper-growth with Scalable Security Throughput: The demand for improved speeds and low latency is driving the adoption of 5G networks. Quantum Maestro ensures service continuity and availability for mobile operators.
SPECIFICATIONS
Performance
| Firewall 1518B UDP (Gbps) | 200 |
|---|---|
| Firewall latency(avg) | 3μSec |
| IPS(Gbps) | 55.2 |
| NGFW(Gbps) | 43.1 |
| Threat Prevention(Gbps) | 12.4 |
| VPN AES-128(Gbps) | 34.4 |
| Connections/sec | 392,100 |
| Concurrent connections | 23M |
Additional Features
Highlights
• 1x CPUs, 16 physical cores, 32 virtual cores
• 2x 480 GB SSD storage
• 2x AC power supplies
• 64 GB memory
• Lights-Out-Management
• Virtual Systems (maximum): 20
Content Security
First Time Prevention Capabilities
• CPU-level, OS-level and static file analysis
• File disarm and reconstruction via Threat Extraction
Applications
• Use 10,000+ pre-defined or customize your own applications
Data Loss Prevention
• Accept, prevent, schedule, and apply traffic-shaping
Dynamic User-based Policy
• Integrates with Microsoft AD, LDAP, RADIUS, and more
Network
• Total physical and virtual (VLAN) interfaces per appliance: 1024/4096
Physical
Power Requirements
• Single Power Supply rating: 500W
• Power consumption avg/max: 144W/190W
Dimensions
• Enclosure: 1RU
• Dimensions (WxDxH): 17.2 x 22.83 x 1.73 in.
Environmental Conditions
• Operating: 0° to 40°C, humidity 5 to 95%
Certifications
• Safety: UL, CB, CE, TUV GS
ORDERING QUANTUM MLS200
DEFAULT CONFIGURATION
| DEFAULT CONFIGURATION | SKU |
|---|---|
| Maestro Solution with 2x MLS200 firewalls with one MHO-140 Orchestrator. | CPAP-SG-MLS202-MHS |
| Maestro Solution with 3x MLS200 firewalls with one MHO-140 Orchestrator. | CPAP-SG-MLS203-MHS |
| MLS200 Lightspeed firewall includes 2x 100G QSFP28 ConnectX ports. | CPAP-SG-MLS200-MHS |
MLS200 Accessories
| MLS200 SPARES AND MISCELLANEOUS | SKU |
|---|---|
| Additional/Replacement AC Power Supply | CPAC-PSU-AC-7000/MLS200 |
| Lights Out Management module | CPAC-NLOM-C |
MAESTRO HYPERSCALE ORCHESTRATORS
| MAESTRO HYPERSCALE ORCHESTRATORS | SKU |
|---|---|
| Maestro Hyperscale Orchestrator 140 with 8x100 GbE and 48x10 GbE ports. | CPAP-MHO-140 |
MHO-140 TRANSCEIVERS
| 100G CWDM4, LC connector | CPAC-TR-100CWDM4 |
|---|---|
| 100G SWDM4, LC connector | CPAC-TR-100SWDM4 |
All-inclusive Security
| FW | NGFW | NGTP | SNBT | |
|---|---|---|---|---|
| Firewall | √ | √ | √ | √ |
| VPN(IPsec) | √ | √ | √ | √ |
| Mobile Access | √ | √ | √ | √ |
| Identity Awareness | √ | √ | √ | √ |
| Content Awareness | √ | √ | √ | √ |
| Application Control | √ | √ | √ | |
| IPS | √ | √ | √ | |
| URL Filtering | √ | √ | ||
| Anti-Bot | √ | √ | ||
| Anti-Virus | √ | √ | ||
| Anti-Spam | √ | √ | ||
| DNS Security | √ | √ | ||
| SandBlast Threat Emulation | √ | |||
| SandBlast Threat Extraction | √ | |||
| Zero Phishing | √ |