QUANTUM MLS400 MAESTRO LIGHTSPEED

Check Point Quantum MLS400 Lightspeed Next Generation Firewalls and

Quantum Maestro Hyperscale Network Security enables enterprises to deploy security that performs

at the speed of business to accelerate large file transfers, provides low latency for high frequency applications,

and dynamically scales security on-demand as their business grows.

Secure Hi-speed Data Protect Hi-frequency Scalable Throughput Transfers Trading Apps for Hyper-growth

400 Gbps line-rate in a Sub 3μSec ultra low Scale up to 3 Tbps of single firewall latency firewall throughput

MLS400

QUANTUM SECURITY PLATFORM

1. RJ45 console port
2. ConnectX NIC # 1: 2x 100G QSFP28 ports
3. ConnectX NIC # 2: 2x 100G QSFP28 ports
4. USB Type-C console port
5. Lights-out Management port
6. 2x USB 3.0 ports

NVIDIA ConnectX
Quantum Lightspeed firewalls are equipped with one or more NVIDIA ConnectX network interface cards (NIC), each with 2x 100G

7. Redundant hot-swap power supplies

Quantum Lightspeed firewalls are equipped with one or more NVIDIA ConnectX network interface cards (NIC), each with 2x 100G
QSFP28 ports. NVIDIA ConnectX NICs offload network processing from the host CPUs, freeing them to manage security. This
provides substantial performance gains for trusted traffic that has long sessions. In addition, firewall latency is significantly
reduced to a low 3μSec at nearly line rate ensuring access to data and higher throughput with minimal delay.

Check Point MLS400 firewalls include the Check Point
stateful inspection firewall and are also available in all-inclusive security packages such as NGFW (Application
Control with IPS), NGTP (NGFW with URL filtering,
antivirus, and anti-bot) or SandBlast (NGTP with
sandboxing and Threat Extraction, a Content Disarm &
Reconstruction technology). In addition, the MLS400
includes two SSD drives in a RAID1 array and hot-swappable redundant power supplies, ensuring continuity
when one unit fails.

All-inclusive, Resilient Security Solutions
Check Point MLS400 firewalls include the Check Point

Check Point Maestro brings scale, agility, and elasticity of
the cloud on premise with efficient N+1 clustering based
on Check Point HyperSync clustering technology,
maximizing the capabilities of Lightspeed firewalls.

When a gateway is added to the system, it gets all the
configurations, the policy, even the software version,
updated and aligned with the existing deployment, and is
sharing the load within 6 minutes.

Create up to 8 Security Groups, with up to 31 firewalls in
a group sharing the same security feature set, policy and
assets they protect.

SCALABLE, RESILIENT FIREWALL CLUSTERS WITH MAESTRO

Example Dual Maestro Hyperscale
Orchestrators MHO 175 and MLS400
Connections

MLS400 firewalls connect to
the Orchestrator via 100
GbE Direct Attached Copper
(DAC) cables. The
Orchestrator’s 400-
nanosecond port-to-port
latency deliver predictable
wire speed performance
with no packet loss for any
packet size.

MHO 175

LIGHTSPEED SECURITY USE CASES

Any Enterprise with a Data Center, Hybrid Cloud or Distributed Data Centers

Secure High-Speed Transfers of Large Data Sets: Networks converge at the data center core and in high-speed interconnects between data centers and the hybrid cloud. Businesses routinely transfer large data sets across these networks for data analysis, disaster recovery planning and workload migration.

Quantum Lightspeed 100 gigabit network interfaces enables enterprises to accelerate these transfers of large data sets across data center core and data center interconnects — supporting up to 200 and 400 Gbps of single firewall throughput in the MLS200 and MLS400 respectively. Add redundancy and scale even higher using the unique Maestro Active-Active load sharing solution where multiple Quantum Lightspeed firewalls scale throughput nearly linearly with each additional firewall added to the cluster.

Banking and Financial Services

Secure Financial Transactions with Micro-second Latency: In the world of finance where trading and cryptocurrency algorithms generate millions of transactions, a fraction of a second makes a huge difference. In some reports 80% of trading on the stock market is done via algorithmic-based automated programs that execute software programs to buy, sell or hold assets.

High frequency trading firms need network security technology that does not introduce latency and satisfies regulatory and compliance security mandates. The Quantum Lightspeed NGFW series enables banking, insurance and investment firms to securely increase transaction capacity for high frequency applications by deploying network security that performs at the speed of business — with low 3μSec latency.

The 100 gigabit QSFP28 network interfaces in the Quantum Lightspeed firewalls comfortably handle initial transfers of large data sets at the start of the trading day. They also support up to 100G elephant flows. These are characterized by a large, continuous flow that stays open and occupies a disproportionate share of the total bandwidth of a network link for a long duration.

Any Enterprise Requiring Investment Security

Support Hyper-growth with Scalable Security Throughput: Some businesses such as ecommerce see wide and seasonal

requirements in online traffic. In 2020 all businesses saw a boost in traffic as workers moved to a work from home model. Other scenarios requiring scalable security are business mergers, data center consolidation and migrations to cloud, hybrid cloud and hybrid data center models.

The Quantum MLS200 and MLS400 Lightspeed firewalls support up to 200 and 400 Gbps of firewall throughput in a single firewall. When used in the unique Maestro Hyperscale Network Security solution, enterprises can scale to up to 3 Tbps of firewall throughput. Each additional firewall added to the Maestro Active-Active load sharing cluster, scales throughput nearly linearly. Furthermore customers can group multiple firewalls into Security Groups and move firewalls manually or dynamically as needed from one group to another as needed to meet changes in traffic demands. Security Groups are logical groups of appliances where each Security Group has dedicated internal and external interfaces and may have a different configuration set and policy. The Maestro Orchestrator MHO175 has a total fabric capacity of 3.2 Tbps with 400 nsec port to port latency and supports up to 32x 100GbE or 128x 10GbE network interfaces.

Telco Networks

Support Hyper-growth with Scalable Security Throughput: The demand for improved speeds, low latency, and connecting a larger number of devices has paved the path to 5G, fifth generation digital cellular networks. Telco mobile operator 5G networks are also expected to be widely used for private networks with applications in industrial IoT, enterprise networking, and critical communications. The network topology will be sliced with logical networks riding on top of the core infrastructure and previously unimaginable services will be created. These use cases require the ability for mobile operators to scale security functions with elasticity using Quantum Maestro in order to guarantee service continuity and availability.

SPECIFICATIONS

Performance

1: Includes Firewall, Application Control and IPS with logging enabled. 2: Includes Firewall,

Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection with logging enabled.

Highlights

• 2x CPUs, 36 physical cores, 72 virtual cores
• 2x 960 GB SSD storage
• 2x AC power supplies
• 192 GB memory
• Lights-Out-Management
• Virtual Systems (max imu m): 250

Content Security

First Time Prevention Capabilities

• CPU-level, OS-level and static file analysis
• File disarm and reconstruction via Threat Extraction
• Average emulation time for unknown files that require full
• End user and data owner incident handling
Dynamic User-based Policy

• Maximal file size for Emulation is 100 MB
• Emulation OS Support: Windows XP, 7, 8.1, 10

• Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds

Dynamic User-based Policy

• Use 10,000+ pre-defined or customize your own
applications
• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3 parties via a Web API
• Classify 700+ pre-defined data types

Network

• Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)

Network Connectivity

• 802.3ad passive and active link aggregation
• Layer 2 (transparent) and Layer 3 (routing) mode

High Availability

• Session failover for routing change, device and link failure

IPv6

• CoreXL, SecureXL

Unicast and Multicast Routing (see SK98226)

• OSPFv2 and v3, BGP, RIP
• Static routes, Multicast routes
• PIM- SM, PIM- SSM, PIM- DM, IGMP v2, and v3

Physical

• Single Power Supply rating: 850W

Power Requirements

• AC power input: 100 to 240V (47-63Hz)
• Power consumption avg/max: 356W/696W
• Maximum thermal output: 2373 BTU/hr.

Dimensions

• Enclosure: 1RU
• Dimensions (WxDxH): 17.4 x 24 x 1.73 in. (442 x 610 x 44mm)
• Weight: 28.7 lbs. ( 13 kg)

Environmental Conditions

• Operating: 0° to 40°C, humidity 5 to 95%
• Safety: UL, CB, CE, TUV GS

ORDERING QUANTUM MLS400

1 DEFAULT CONFIGURATION

The default package includes 2 trial virtual systems (VS). These are not additive or counted when adding additional VS licenses.

1 Renewal NGFW, NGTP and SandBlast (SNBT) packages are available in the online product catalog.

MLS400 Accessories

MLS400 SPARES AND MISCELLANEOUS

Maestro Accessories

MAESTRO HYPERSCALE ORCHESTRATORS

Maestro Hyperscale Orchestrator 175 with 32x 100 GbE ports, plus 1x 100 G DAC (3m).

MAESTRO HYPERSCALE ORCHESTRATORS ACCESSORIES

ORDERING QUANTUM MLS400 (continued)

DIRECT ATTACH COPPER (DAC) CABLES

100G QSFP28 Direct Attach Copper (DAC) cable, 3 meters

SKU

40G QSFP+ Direct Attach Copper (DAC) cable, 3 meters

CPAC-DAC-100G-3M

Copper Splitter; 40G to 4x10G Direct Attach Copper (DAC) cable, 3 meters

CPAC-DAC-40G-3M

CPAC-DAC-40/10G-3M

All-inclusive Security

Each gateway requires a license for the enabled security feature. Security subscription extensions; NGFW, NGTP and SNBT are available for subsequent years.