Check Point QLS800 Lightspeed Security Gateway Datasheet

QUANTUM QLS800 LIGHTSPEED FIREWALL

Check Point Quantum Lightspeed Next Generation Firewalls redefine security price performance — enabling

enterprises to deploy network security that performs at the speed of business to accelerate large file transfers

and provide low latency for high frequency applications.

Secure Hi-speed Data Protect Hi-frequency Resilient Data Center Transfers Trading Apps Security

800 Gbps line-rate in a 3μSec. Eliminate failure with a single firewall ultra low latency robust clustering technology.

QLS800


QUANTUM SECURITY PLATFORM

QLS800 LIGHTSPEED FIREWALL !

  1. RJ45 and USB Type-C console ports
  2. 2x USB 3.0 ports
  3. Lights-out Management port
  4. Sync and Management 10/100/1000 Base-T ports
  5. ESD grounding point
  6. 2x 960GB SSD RAID1
  7. 4x double-wide ConnectX NICs

3x redundant power supplies (back view not shown)

Low Latency, High Throughput Firewall Quantum QLS800 firewalls are equipped with four NVIDIA ConnectX network interface cards (NIC), each with 2x 100G QSFP28 ports. NVIDIA ConnectX NICs offload network processing from the host CPUs, providing substantial performance gains of up to nearly 800 Gbps for trusted firewall traffic. In addition, firewall latency is significantly reduced to a low 3μSec at nearly line rate ensuring access to data and higher throughput with minimal delay.

Check Point QLS800 firewalls include the Check Point stateful inspection firewall and are also available in all-inclusive security packages such as NGFW (Application Control with IPS), NGTP (NGFW with URL filtering, antivirus, and anti-bot) or SandBlast (NGTP with sandboxing and Threat Extraction, a Content Disarm & Reconstruction technology).

Remote Management and Monitoring

A Lights-Out-Management (LOM) card provides out-of-band remote management to remotely diagnose, start, restart and Check Point ClusterXL is a software-based clustering solution for firewall redundancy and load sharing which uses state synchronization to keep active connections alive and prevent data loss if a cluster member fails. This ensures critical systems are always connected and secure. In addition, each QLS800 has redundancy built-in with two SSD drives in a RAID1 array and hot-swappable redundant power supplies, ensuring continuity when one component fails.


LIGHTSPEED SECURITY USE CASES

Any Enterprise with a Data Center, Hybrid Cloud or Distributed Data Centers

Secure High Speed Transfers of Large Data Sets: Networks converge at the data center core and in high speed interconnects between data centers and the hybrid cloud. Businesses routinely transfer large data sets across these networks for data analysis, disaster recovery planning and workload migration.

Quantum Lightspeed 100 gigabit network interfaces enables enterprises to accelerate these transfers of large data sets across data center core and data center interconnects — supporting close to 250, 450, 650 and 800 Gbps of single firewall throughput in the QLS250, QLS450, QLS650 and QLS800 respectively. Add redundancy and scale even higher using the unique Maestro Active- Active load sharing solution where multiple Quantum Lightspeed MLS200 and MLS400 firewalls scale throughput nearly linearly with each additional firewall added to the cluster.

Banking and Financial Services

Secure Financial Transactions with Micro-second Latency: In the world of finance where trading and cryptocurrency algorithms generate millions of transactions, a fraction of a second makes a huge difference. In some reports 80% of trading on the stock market is done via algorithmic-based automated programs that execute software programs to buy, sell or hold assets.

High frequency trading firms need network security technology that does not introduce latency and satisfies regulatory and compliance security mandates. The Quantum Lightspeed NGFW series enables banking, insurance and investment firms to securely increase transaction capacity for high frequency applications by deploying network security that performs at the speed of business — with low 3μSec latency.

Any Enterprise Requiring Investment Security

Support Hyper-growth with Scalable Security Throughput: Some businesses such as ecommerce see wide and seasonal requirements in online traffic. In 2020 all businesses saw a boost in traffic as workers moved to a work from home model. Other scenarios requiring scalable security are business mergers, data center consolidation and migrations to cloud, hybrid cloud and hybrid data center models.

When used in the unique Maestro Hyperscale Network Security solution with the MLS200 and MLS400, enterprises can scale to up to 3 Tbps of firewall throughput. Each additional firewall added to the Maestro Active-Active load sharing cluster, scales throughput nearly linearly. Furthermore customers can group multiple firewalls into Security Groups and move firewalls manually or dynamically as needed from one group to another as needed to meet changes in traffic demands. Security Groups are logical groups of appliances where each Security Group has dedicated internal and external interfaces and may have a different configuration set and policy. The Maestro Orchestrator MHO175 has a total fabric capacity of 3.2 Tbps with 400 nsec port to port latency and supports up to 32x 100GbE or 128x 10GbE network interfaces.

Telco 5G Networks

Support Hyper-growth with Scalable Security Throughput: The demand for improved speeds, low latency, and connecting a larger number of devices has paved the path to 5G, fifth generation digital cellular networks. Telco mobile operator 5G networks are also expected to be widely used for private networks with applications in industrial IoT, enterprise networking, and critical communications. The network topology will be sliced with logical networks riding on top of the core infrastructure and previously unimaginable services will be created. These use cases require the ability for mobile operators to scale security functions with elasticity using Quantum Maestro in order to guarantee service continuity and availability.


SPECIFICATIONS

QLS800
Firewall System Performance
Firewall 1518B UDP (Gbps) 796
Firewall Latency (avg) 3μSec
Connections/sec 546,150
Concurrent Connections 48M
Accelerated 100GbE Ports 8
Additional System Performance
Firewall (Gbps)¹ 205
IPS (Gbps)¹ 140.9
NGFW (Gbps)¹ 96.1
NGTP (Gbps)¹ 33.3
VPN-AES 128 (Gbps) 45
Virtual Systems (max) 250
Additional Features
CPU Cores 2x 36 physical, 72 virtual
Storage 2x 960GB SSD RAID1 array
Redundant Power 3x AC (DC option)
Memory (RAM) Default/Max 192 GB
LOM √
Console and USB Ports RJ-45 and 1x USB-C, 2x USB 3.0 ports
Network Connectivity
Network Ports 2x 10/100/1000Base-T RJ-45 ports, 8x accelerated QSFP28 100G ports
VLAN Maximums 1024 single gateway, 4096 with virtual systems
802.3ad link Aggregation √
Deployments Layer 2 [transparent], Layer 3 [routing]
High Availability Active-Passive
Unicast and Multicast Routing OSPFv2 and v3, BGP, RIP, PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
Policy-based Routing √
User-based Policy Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3+ parties via a Web API
Physical
Enclosure 3RU
Dimensions (W x D x H) 17.4 x 24 x 5.2 in., [442 x 610 x 132mm]
Weight 46.3 lbs. [21 kg]
Power, Environments
Dual, Hot-Swappable √
Power Input AC:[100 to 240VAC, 47-63Hz], DC 40--72VDC
Power Supply Rating AC 850W, DC 1300W
Power Consumption (avg/max) AC 472W/826W
Thermal Output (max) 2818 BTU/hr.
Operating Environment Operating [0° to 40°C, humidity 5% to 95%), Storage [-20° to 70°C, humidity 5% to 95% at 60°C]
Certifications
Safety/Emissions/Environment UL, CB, CE, TUV G5 / FCC, CE, VCCI, RCM/C-Tick / RoHS, WEEE, REACH, ISO14001

ORDERING QUANTUM QLS800

  1. DEFAULT CONFIGURATION

SKU

QLS800 includes 8x100G QSFP28 ConnectX ports, 192 GB RAM, 2x 960GB SSD, 3x AC PSUs, LOM, telescopic rails CPAP-SG-QLS800 and 5 Virtual Systems

The default package includes 5 virtual system (VS) licenses which are additive when adding additional VS licenses.


QLS800 Accessories

QLS800 INTERFACE CARDS AND TRANSCEIVERS

QLS800 INTERFACE CARDS AND TRANSCEIVERS SKU
2 Port 100G QSFP28 ConnectX Transceivers
QSFP28 transceiver module for 100G fiber ports - short range [100GBase-SR4] CPAC-TR-100SR
QSFP28 transceiver module for 100G fiber ports - long range [100GBase-LR4] CPAC-TR-100LR
100G SWDM4, LC connector, 75m/OM3 fiber CPAC-TR-100SWDM4
100G CWDM4, LC connector, 2Km/single mode fiber CPAC-TR-100CWDM4
QSFP+ transceiver module for 40G fiber ports - short range [40GBase-SR] CPAC-TR-40SR-QSFP-300m
QSFP+ transceiver module for 40G fiber ports - long range [40GBase-LR] CPAC-TR-40LR-QSFP-10Km
Bi-directional QSFP transceiver for 40G fiber ports - short range [40GBase-SR-BD] CPAC-TR-40SR-QSFP-BIDI
QSFP28 to SFP28 Adapter - 10G/25G fiber adaptor CPAC-TR-QSFP28-SFP28
SFP28 transceiver module for 25G fiber ports with QSFP28 adaptor - short range [25GBase-SR] CPAC-TR-25SR-ADP
SFP28 transceiver module for 25G fiber ports with QSFP28 adaptor - long range [25GBase-LR] CPAC-TR-25LR-ADP
SFP+ transceiver module for 10G fiber with QSFP28 adaptor - for links up to 40km [10GBASE-ER] CPAC-TR-10ER-ADP
SFP+ transceiver module for 10G fiber with QSFP28 adaptor - long range up to 10km [10GBASE-LR] CPAC-TR-10LR-ADP
SFP+ transceiver module for 10G fiber with QSFP28 adaptor - short range [10GBase-SR] CPAC-TR-10SR-ADP
SFP+ transceiver 10GBASE-T RJ45 (Copper) with QSFP28 adaptor - for links up to 30m over CAT6a/CAT7 CPAC-TR-10T-ADP
100G Direct Attach Copper cable (QSFP28), 3 meters CPAC-DAC-100G-3M
40G Direct Attach Copper cable (QSFP28), 3 meters CPAC-DAC-40G-3M
25G Direct Attach Copper cable (QSFP28), 3 meters CPAC-DAC-25G-3M
10G SFP+ Direct Attach Copper (DAC) cable, 3 meters CPAC-DAC-10G-3M

QLS800 SPARES AND MISCELLANEOUS

QLS800 SPARES AND MISCELLANEOUS SKU
960GB SSD for Lightspeed Security Gateways CPAC-SSD-960G-C
AC power supply for 16600HS,26000,28000,28600HS Security Gateways CPAC-PSU-AC-26000/28000
Dual DC power supplies for 16000 and 26000 Security Gateways CPAC-PSU-DC-Dual-16000/26000/28000
DC power supply for 16000 and 26000 Security Gateways CPAC-PSU-DC-16000/26000
Replacement Lights-Out Management Module CPAC-NLOM-C
Replacement Fan CPAC-FAN-26000/28000
Slide rails for 26000 Security Gateways(22”-32”) CPAC-RAIL-L
Extended slide rails for 26000 Security Gateways(24”-36”) CPAC-RAIL-EXT-L

ORDERING QUANTUM QLS800 (Continued)

All-inclusive Security

FW NGFW NGTP SNBT(SandBlast)
Firewall Basic access control plus IPS Prevent known threats Prevent known and zero-day attacks
Firewall √ √ √ √
VPN(IPsec) √ √ √ √
Mobile Access √ √ √ √
Identity Awareness √ √ √ √
Content Awareness √ √ √ √
Application Control √ √ √
IPS √ √ √
URL Filtering √ √
Anti-Bot √ √
Anti-Virus √ √
Anti-Spam √ √
DNS Security √ √
SandBlast Threat Emulation √
SandBlast Threat Extraction √
Zero Phishing √

The base includes the firewall. Security subscription NGFW, NGTP and SNBT extensions and renewals for subsequent years are also available.