Quantum Force 19100
Unified Management and Ops Efficiency
Increase protection and reduce TCO with a consolidated security architecture
YOU DESERVE THE BEST SECURITY
Check Point #1 for the 2nd year in a row with 99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024)
Forrester Wave™ for Zero Trust Platform Providers, Q3 2023
Gartner® Firewall Magic Quadrant™ (2022)
AI/ML powered Threat Prevention
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks.
Quantum 19100 firewalls deliver up to 200 Gbps of firewall and 35 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency and space savings in a modular 2 RU platform.
Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.
Fastest AI-Powered Threat Prevention
Network Resilience & Power Efficiency
19100 Performance Highlights
| Firewall | Next Gen Firewall | Threat Prevention |
|---|---|---|
| 200 Gbps | 90 Gbps | 35 Gbps |
AI-Powered advanced security and uncompromising performance, built for data centers.
Quantum Force 19100 data center firewalls deliver high threat prevention performance in a small 2 RU form factor to protect employees, networks, and data from cyber-theft. Four network I/O slots can be configured to fit your network with a high port density of up to 8x1/10GbE, 4x10/25GbE or 2x40/100GbE with acceleration.
Comprehensive and Industry-Leading Security
- Next Generation Firewall
- Site-to-Site and Remote Access VPN
- Application and Web Filtering
- Intrusion Prevention
- Antivirus and Anti-Bot
- Sandboxing with file sanitization
- Zero-phishing (no agent required)
Highest Performance Threat Prevention
With the 19100, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 35 Gbps of threat prevention throughput or up to 800 Gbps of UDP 1518B firewall throughput with a single 2RU firewall.
!
!
Power Efficient, Resilient Design
With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors. Dual, redundant hot-swap power supplies and dual 960 GB RAID-1 NVMe storage provides complete redundancy.
Flexible, High Performance HTTPS Inspection
While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Enterprises need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.
Performance
Specifications
| Enterprise Test Conditions1 | |
|---|---|
| Threat Prevention2.5[Gbps] | 35 |
| NGFW3[Gbps] | 90 |
| IPS[Gbps] | 130 |
| Firewall[Gbps] | 200 |
| RFC 3511,2544,2647,1242 Performance(Lab) | |
| Firewall 1518B UDP[Gbps] | 800 |
| Firewall Latency(avg) | 1.85μSec |
| VPN AES-GCM 1452B[Gbps] | 75.3 |
| Connections/sec | 750,000 |
| Concurrent connections(Base/Plus) | 12.4M/20M/31M |
| HTTP/TLS Inspection Performance | |
| Threat Prevention1.2[Gbps] | 14.1 |
| Threat Prevention2web mix4[Gbps] | 10.2 |
| IPS web mix4[Gbps] | 12.9 |
RFC 3511, 2544, 2647, 1242 Performance (Lab)
Firewall 1518B UDP [Gbps]
1 Enterprise traffic profile measured with maximum memory
2 Includes Firewall, App Control, URLF, IPS, Anti Malware (Bot, Virus & Spam), DNS Security, Zero-Phishing and SandBlast Threat Emulation & Extraction with logging enabled
3 Based on Quantum Firewall Software Release R82 take #25
Additional Features
- Storage: BASE x 1 SSD 960GB NVMe, PLUS x 2 SSD 960GB NVMe
- 2x AC power supplies
App Control and IPS with logging enabled
4 Web traffic mix is based on RFC 9411 (NetSecOpen) web traffic profile
5 Based on Quantum Firewall Software Release R82 take #25
- 8 x 1/10GBASE-F SFP+ port card, up to 32 ports
- 4 x 10/25GBASE-F SFP28 port card, up to 18 ports
Network Expansion Slot Options
- 8 x 1/10GBASE-F SFP+ port card, up to 32 ports
- 2 x 40/100GBASE-F QSFP28 port card, up to 8 ports
Web traffic mix is based on RFC 9411 (NetSecOpen) web traffic profile
5 Based on Quantum Firewall Software Release R82 take #25
CHECK POINT
Network Connectivity
- Integrated SD-WAN network optimization and resilience
- Total physical and virtual (VLAN) interfaces per appliance: 1024/4096
- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
- Active/Active L2, Active/Passive L2 and L3
- Session failover for routing change, device and link failure
- ClusterXL or VRRP
Power Requirements
- Single Power Supply rating AC: 850W, DC: 1600W
- Power input: 100 to 240VAC (47-63Hz), -36~-70VDC
- Power consumption 110VAC avg/max: 360W/600W
- Maximum thermal output AC: 2047BTU/hr
Physical
IPv6
- NAT66, NAT64, NAT46
- CoreXL, SecureXL, HA with VRRPv3
Unicast and Multicast Routing (see SK98226)
- OSPFv2 and v3, BGP, RIP
- Static routes, Multicast routes
Dimensions
- Enclosure: 2RU
- Weight: 35.4 lbs. (16.1 kg)
- Shipping Carton size (WxDxH mm): 830 x 600 x 260
Environmental Conditions
- Operating: 0° to 40°C, humidity 5% to 95%
- Storage: –20° to 70°C, humidity 5% to 95% at 60°C
- MTBF: > 10 years
Certifications
- Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
- Emissions: CE, FCC IC, VCCI, ASNZS ACMA
- Environmental: ROHS, REACH, WEEE, ISO14001
| 1/10 GbE Copper | 1/10 GbE Fiber | 10/25 GbE Fiber | 40/100* GbE Fiber | Memory | Redundant Power | Redundant Storage | LOM | |
|---|---|---|---|---|---|---|---|---|
| Base model | 2 | 8 | 0 | 0 | 64 GB | ● | ○ | ○ |
| Plus model | 2 | 8 | 4 | 0 | 96 GB | ● | ● | ● |
| Max capacity | 2 | 32 | 16 | 8 | 128 GB | ● | ● | ● |
| Maestro/MHS | 2 | 0 | 0 | 4 | 96 GB | ● | ● | ● |
Maximum Virtual System Capacity
Ordering Quantum Force 19100 Security Gateway
The 19100 includes 2x 1/10 copper GbE management ports plus an additional 2x 1/10/25 SFP28 ports for synchronization when using the 19100 in a cluster. With the four network I/O slots, modify the base or plus configuration to meet your networking requirements. The 40/100G ports enable firewall traffic acceleration at line-rate.
Available
Unavailable
| SECURITY APPLIANCE¹ | SKU |
|---|---|
| 19100 Base configuration: 2x1/10GbE copper management ports,2x1/10/25GbE SFP28 fiber sync ports,8x1/10GbE SFP+ ports,64 GB RAM,1x960 GB NVMe,2x10 GbE Short Range Transceivers,2xAC PSUs,telescopic rails,Sand-Blast(SNBT)Security Subscription Package for 1 Year | CPAP-SG19100-SNBT |
| 19100 Plus configuration: 2x1/10GbE copper management ports,2x1/10/25GbE SFP28 fiber sync ports,8x1/10GbE SFP+ ports,4x10/25GbE SFP28 fibers,96GB RAM,2x960GB NVMe,2x10GbE Short Range Transceivers,2xAC PSUs,Lights-Out Management(LOM),telescopic rails,5 Virtual Systems,Sand-Blast(SNBT) Security Subscription Package for 1 Year | CPAP-SG19100-PLUS-SNBT |
| Quantum Force 19100 Maestro/MHS HyperScale configuration: 2x1/10GbE copper management ports,2x2x40/100GbE QSFP fiber ports,96GB RAM,2x960GB NVMe,2x100GbE DAC3m transceivers,2xAC PSUs,Lights-Out Management(LOM),telescopic rails,5 Virtual Systems,Sand-Blast(SNBT) Security Subscription Package for 1 Year | CPAP-SG19100-PLUS-MHS-SNBT |
| Quantum Force 19100 Maestro/MHS HyperScale configuration with 1MHO-175 orchestrator and 2 Quantum Force 19100 appliances, each appliance includes 2x1/10GbE copper management ports,2x2x40/100GbE QSFP fiber ports,96GB RAM,2x960GB NVMe,2x100GbE DAC3m transceivers,2xAC PSUs,Lights-Out Management(LOM),telescopic rails,5 Virtual Systems,Sand-Blast(SNBT) Security Subscription Package for 1 Year | CPAP-MHS-19102-PLUS-SNBT |
| Quantum Force 19100 Maestro/MHS HyperScale configuration with 1MHO-175 orchestrator and 3 Quantum Force 19100 appliances, each appliance includes 2x1/10GbE copper management ports,2x2x40/100GbE QSFP fiber ports,96GB RAM,2x960GB NVMe,2x100GbE DAC3m transceivers,2xAC PSUs,Lights-Out Management(LOM),telescopic rails,5 Virtual Systems,Sand-Blast(SNBT) Security Subscription Package for 1 Year | CPAP-MHS-19103-PLUS-SNBT |
| Next Generation Threat Prevention & SandBlast package for 1 year for Quantum Force 19100 appliance | CPSB-SNBT-19100-1Y |
| Next Generation Threat Prevention package for 1 year for Quantum Force 19100 appliance | CPSB-NGTP-19100-1Y |
| Next Generation Firewall Package for 1 year for Quantum Force 19100 appliance | CPSB-NGFW-19100-1Y |
| Quantum IoT Network Protection for 1 year for Quantum Force 19100 appliances | CPSB-IOTP-19100-1Y |
| Quantum SD-WAN subscription for 1 year for Quantum Force 19100 appliances | CPSB-SDWAN-19100-1Y |
| Data Loss Prevention (DLP) blade for 1 year for Quantum Force 19100 appliances | CPSB-DLP-19100-1Y |
ACCESSORIES
| INTERFACE CARDS | SKU |
|---|---|
| 8 Port 1/10 G Base-F SFP+ interface card for 19000/29000 appliances | CPAC-8-1/10F-D |
| 4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card for 9000/19000/29000 appliances | CPAC-4-10/25F-D |
| 4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card for 9000/19000/29000 appliances with acceleration | CPAC-4-10/25F-DA |
| 2 Port 10/25/40/100G Base-F QSFP28 interface card for 19000/29000 appliances with acceleration | CPAC-2-40/100F-D |
| TRANSCEIVERS | SKU |
|---|---|
| Compatible with the CPAC-8-1/10F-D Interface Card | |
| SFP transceiver module for 1000 BASE fiber ports - long range [1000BASE-LX), SM Fiber, LC | CPAC-TR-1LX-D |
| SFP transceiver module for 1000 BASE fiber ports - short range [1000BASE-SX), MM Fiber, LC | CPAC-TR-1SX-D |
| SFP transceiver to 1000 BASE-T RJ45 (Copper), CU, RJ45 | CPAC-TR-1T-D |
| Compatible with the CPAC-8-1/10F-D and CPAC-4-10/25F-D, Interface Cards | |
| SFP+ transceiver module for 10GbE fiber ports - long range [10GBASE-LR), SM Fiber, LC | CPAC-TR-10LR-D |
| SFP+ transceiver module for 10GbE fiber ports - short range [10GBASE-SR), MM Fiber, LC | CPAC-TR-10SR-D |
| SFP+ transceiver module for 10GbE fiber ports - for links up to 40km [10GBASE-ER), SM Fiber, LC | CPAC-TR-10ER-D |
| SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7, CU, RJ45 | CPAC-TR-10T-D |
| Compatible with the CPAC-4-10/25F-D Interface Cards | |
| SFP28 transceiver module for 25GbE fiber ports - short range [25GBASE-SR), MM Fiber, LC | CPAC-TR-25SR-D |
| SFP28 transceiver module for 25GbE fiber ports - long range [25GBASE-LR), SM Fiber, LC | CPAC-TR-25LR-D |
| Compatible with the CPAC-2-40/100F-D Interface Card | |
| SFP+ transceiver module for 10GbE fiber ports - long range [10GBASE-LR), SM Fiber, LC with QSFP28 Adapter | CPAC-TR-10LR-D-ADP |
| SFP+ transceiver module for 10GbE fiber ports - short range [10GBASE-SR) MM Fiber, LC with QSFP28 Adapter | CPAC-TR-10SR-D-ADP |
| SFP+ transceiver module for 10GbE fiber ports - for links up to 40km [10GBASE-ER) SM Fiber, LC with QSFP28 Adapter | CPAC-TR-10ER-D-ADP |
| SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7 with QSFP28 Adapter | CPAC-TR-10T-D-ADP |
| SFP28 transceiver module for 25GbE fiber ports - long range [25GBASE-LR), SM Fiber, LC with QSFP28 Adapter | CPAC-TR-25LR-D-ADP |
| SFP28 transceiver module for 25GbE fiber ports - short range [25GBASE-SR) MM Fiber, LC with QSFP28 Adapter | CPAC-TR-25SR-D-ADP |
| QSFP+ transceiver for 40GbE fiber Ports - short range [40GBASE-SR4] MM Fiber, MPO-12 | CPAC-TR-40SR-QSFP-100m-D |
| QSFP+ transceiver module for 40GbE fiber ports - short range [40GBASE-eSR4], MM Fiber, MPO-12 | CPAC-TR-40SR-QSFP-300m-D |
| QSFP Bi-directional transceiver for 40GbE fiber ports - for links up to 2km [40GBASE-SR-BD], MM Fiber, LC | CPAC-TR-40SR-QSFP-BIDi-D |
| QSFP+ transceiver module for 40GbE fiber ports - long range [40GBASE-LR4], MM Fiber, LC | CPAC-TR-40LR-QSFP-10Km-D |
| QSFP+ transceiver module for 40GbE fiber ports for links up to 75m [40GBASE-SWDM4] MM Fiber, LC | CPAC-TR-40SWDM4 |
| QSFP+ transceiver module for 40GbE fiber ports - for links up to 40km [40GBAGE-ER4], MM Fiber, LC | CPAC-TR-40ER4 |
| QSFP28 transceiver module for 100GbE fiber ports - long range [100GBASE-LR4], MM Fiber, LC | CPAC-TR-100LR-D |
| QSFP28 transceiver module for 100GbE fiber ports - short range [100GBASE-SR4], MM Fiber, MPO-12 | CPAC-TR-100SR-D |
| QSFP28 transceiver module for 100GbE fiber ports - for links up to 75m [100GBASE-SWDM4] MM Fiber, LC | CPAC-TR-100SWDM4-D |
| QSFP28 transceiver module for 100GbE fiber ports - for links up to 2km [100GBAGE-CWDM4], MM Fiber, LC | CPAC-TR-100CWDM4-D |
| QSFP28 Bi-directional transceiver for 100GbE fiber Ports - short range [100Gbase-SR1.2 Bidi], MM Fiber, LC | CPAC-TR-100SR-BidiD |
| QSFP28 transceiver module for 100GbE fiber ports, - for links up to 40km [100GBAGE-ERL4], MM Fiber, LC | CPAC-TR-100ERL4 |
| DIRECT ATTACH CABLES(DAC) | SKU |
|---|---|
| 10GbE Direct Attach Cable(DAC), 3m length for CPAC-8-1/10F-D, CPAC-4-10/25F-D, and CPAC-2-40/100F-D | CPAC-DAC-10G-3M-D |
| 25GbE Direct Attach Cable(DAC), 3m length for CPAC-4-10/25F-D, and CPAC-2-40/100F-D | CPAC-DAC-25G-3M-D |
| 40GbE Direct Attach Cable(DAC), 3m length for CPAC-2-40/100F-D | CPAC-DAC-40G-3M-D |
| 100GbE Direct Attach Cable(DAC), 3m length for CPAC-2-40/100F-D | CPAC-DAC-100G-3M-D |
COMPATIBLE WITH SYNC PORT INTERFACE
| COMPATIBLE WITH SYNC PORT INTERFACE | SKU |
|---|---|
| SFP transceiver module for 1000 BASE fiber ports - short range (1000BASE-SX), MM Fiber, LC | CPAC-TR-1SX-D |
| SFP transceiver module for 1000 BASE fiber ports - long range(1000BASE-LX), MM Fiber, LC | CPAC-TR-1LX-D |
| SFP transceiver to 1000 BASE-T RJ45(Copper), CU, RJ45 | CPAC-TR-1T-D |
| SFP+ transceiver module for 10GbE fiber ports - short range(10GBASE-SR), MM Fiber, LC | CPAC-TR-10SR-D |
| SFP+ transceiver module for 10GbE fiber ports - long range(10GBASE-LR), SM Fiber, LC | CPAC-TR-10LR-D |
| SFP+ transceiver 10GBASE-T RJ45(Copper)-for links up to 30m over CAT6a/CAT7 | CPAC-TR-10T-D |
| 10GbE Direct Attach Cable(DAC),3m length | CPAC-DAC-10G-3M-D |
| SFP28 transceiver module for 25GbE fiber ports - short range(25GBASE-SR), MM Fiber, LC | CPAC-TR-25SR-D |
| 25GbE Direct Attach Cable(DAC), 3m length | CPAC-DAC-25G-3M-D |
| MEMORY | SKU |
|---|---|
| 32GB Memory upgrade kit for 19000 appliances | CPAC-RAM32GB-19000 |
| 64GB Memory upgrade kit for 19000 appliances | CPAC-RAM64GB-19000 |
| SPARES AND MISCELLANEOUS | SKU |
|---|---|
| 960GB SSD for 19000/29000 security gateways | CPAC-SSD-960G-D |
| Replacement AC Power Supply for 19000 appliances | CPAC-PSU-AC-19000 |
| Dual DC Power Supply for 19000/29000 series appliances | CPAC-PSU-DUAL-DC-19000/29000 |
| Lights-Out Management Module for 19000/29000 appliances | CPAC-NLOM-D |
| Slide rails for 19000/29000 Security Gateways(22"-32") | CPAC-RAIL-L |
| Telescopic slide rails for 19000/29000 Security Gateways(24"-36") | CPAC-RAIL-EXT-L |
SUBSCRIPTION SERVICES
| NGFW | NGTP | SNBT(SandBlast) | |
|---|---|---|---|
| Application Control | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering | √ | √ | |
| Anti-Bot | √ | √ | |
| Anti-Virus | √ | √ | |
| Anti-Spam | √ | √ | |
| DNS Security | √ | √ | |
| SandBlast Threat Emulation(sandboxing) | √ | ||
| SandBlast Threat Extraction(CDR) | √ | ||
| Zero Phishing | √ | ||
| IoT Network Protection | optional | optional | optional |
| SD-WAN Network Optimization | optional | optional | optional |
The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years.
Worldwide Headquarters
5 Shlomo Kaplan Street, Tel Aviv 6789159, Israel | Tel: +972-3-753-4599
U.S. Headquarters
100 Oracle Parkway, Suite 800 Redwood City, CA 94065 | Tel: 1-800-429-4391