Quantum Force 29200 Datasheet
Security Gateway
Unified Management and Ops Efficiency
Increase protection and reduce TCO with a consolidated security architecture
YOU DESERVE THE BEST SECURITY
Forrester Wave $ ^{\mathrm{TM}} $ for Zero Trust Platform Providers, Q3 2023 Gartner $ ^{\mathrm{R}} $ Firewall Magic Quadrant $ ^{\mathrm{TM}} $ [2022]
AI/ML powered Threat Prevention
Protect networks and users from zero-days phishing, DNS, and ransomware attacks
Quantum 29200 firewalls deliver up to 1.4 Tbps of firewall and 75 Gbps of threat prevention throughput with integrated AI/ML security power efficiency and space savings in a modular 2 RU platform.
Increase the efficiency of your datacenter's security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.
Fastest AI-Powered Threat Prevention
Network Resilience & Power Efficiency
29200 Performance Highlights
| Firewall | Next Gen Firewall | Threat Prevention |
|---|---|---|
| 500 Gbps | 165 Gbps | 75 Gbps |
AI-Powered advanced security and uncompromising performance, built for data centers.
Check Point Quantum Force 29200 data center firewalls deliver high threat prevention performance in a small 2 RU form factor to protect employees, networks, and data from cyber-theft. Seven network I/O slots can be configured to fit your network with a high port density of up to 56x1/10GbE, 28x10/25GbE, or 14x40/100GbE with acceleration.
Comprehensive and Industry-Leading Security
- Next Generation Firewall
- Site-to-Site and Remote Access VPN
- Application and Web Filtering
- Intrusion Prevention
- Antivirus and Anti-Bot
- Advanced DNS Security
- Zero-phishing (no agent required)
Miercom Enterprise & Hybrid Mesh Firewall Benchmark 2025
Highest Performance Threat Prevention
With the 29200, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 75 Gbps of threat prevention throughput or up to 1.4 Tbps of UDP 1518B firewall throughput with a single 2RU firewall.
Threat prevention with 99.9% block rate
Check Point ranks #1 again in
Power Efficient, Resilient Design
With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors. Dual, redundant hot-swap power supplies and dual 960 GB RAID-1 NVMe storage provides complete redundancy.
Flexible, High Performance HTTPS Inspection
While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Enterprises need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive industry traffic, such as Health Care and Financial that have special regulatory requirements. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.
Performance
Specifications
| Enterprise Test Conditions1 | |
|---|---|
| Threat Prevention25[Gbps] | 75 |
| NGFW3[Gbps] | 165 |
| IPS[Gbps] | 235 |
| Firewall[Gbps] | 500 |
| RFC 3511,2544,2647,1242 Performance(Lab) | |
| Firewall 1518B UDP[Gbps] | 1,400 |
| Firewall Latency(avg) | 1.85μSec |
| VPN AES-GCM 1452B[Gbps] | 130 |
| Connections/sec | 1,500,000 |
| Concurrent connections(Base/Plus/Max) | 30M/48M/67M |
| HTTP/TLS Inspection Performance | |
| Threat Prevention1,2[Gbps] | 28.1 |
| Threat Prevention2web mix4[Gbps] | 18.6 |
| IPS web mix4[Gbps] | 25 |
Additional Features
Highlights
- CPU: 64 physical cores, total of 128 logical cores
- Storage: BASE x 1 SSD 960GB NVMe, PLUS x 2 SSD 960GB NVMe
- 2x AC power supplies
- 128, 192 and 256 GB memory options
Network Expansion Slot Options
- 8 x 1/10GBASE-F SFP+ port card, up to 56 ports
- 4 x 10/25GBASE-F SFP28 port card, up to 30 ports
- 2 x 40/100GBASE-F QSFP28 port card, up to 14 ports
Network
Network Connectivity
- Integrated SD-WAN network optimization and resilience
- Total physical and virtual (VLAN) interfaces per appliance: 1024/4096
- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
- Active/Active L2, Active/Passive L2 and L3
- Session failover for routing change, device and link failure
- ClusterXL or VRRP
Power Requirements
- Single Power Supply rating AC: 1300W
- Power input: 100 to 240VAC (47-63Hz)
- Power consumption 110VAC avg/max: 600W/999W
- Maximum thermal output AC: 3408.7 BTU/hr.
Dimensions
- Enclosure: 2RU
- Dimensions (WxDxH): 17.25 x 24 x 3.5 in. (442 x 610 x 88mm)
- Weight: 42.1 lbs. (19.1 kg)
Environmental Conditions
- Operating: 0° to 40°C, humidity 5% to 95%
- Storage: –20° to 70°C, humidity 5% to 95% at 60°C
- MTBF: > 10 years
Certifications
- Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
- Emissions: CE, FCC IC, VCCI, ASNZS ACMA
- Environmental: ROHS, REACH, WEEE, ISO14001
Maximum Virtual System Capacity
| 1/10 GbE Copper | 1/10 GbE Fiber | 10/25 GbE Fiber | 40/100* GbE Fiber | Memory | Redundant Power | Redundant Storage | LOM | |
|---|---|---|---|---|---|---|---|---|
| Base model | 2 | 8 | 2 | 0 | 128 GB | ● | ○ | ○ |
| Plus model | 2 | 16 | 6 | 2 | 192 GB | ● | ● | ● |
| Max capacity | 2 | 56 | 30 | 14 | 256 GB | ● | ● | ● |
| Maestro/MHS | 2 | 0 | 0 | 4 | 192 GB | ● | ● | ● |
Security Appliances
| SECURITY APPLIANCE¹ | SKU |
|---|---|
| 29200 Base configuration:2x1/10GbE copper management ports,2x,1/10/25GbE SFP28 fiber sync ports,8x1/10GbE SFP+ports,128GB RAM,1x960GB NVMe,2x10GbE Short Range Transceivers,2xAC PSUs,telescopic rails,SandBlast(SNBT)Security Subscription Package for1Year | CPAP-SG29200-SNBT |
| 29200 Plus configuration:2x1/10GbE copper management ports,2x,1/10/25GbE SFP28 fiber sync ports,16x1/10GbE SFP+ports,4x10/25GbE SFP28 fiber ports,2x10GB Short Range Transceivers,2x100/40GbE QSFP28ports,192GB RAM,2x960GB NVMe,2xAC PSUs,Lights-Out Management(LOM),telescopic rails,5Virtual Systems,SandBlast(SNBT)Security Subscription Package for1Year | CPAP-SG29200-PLUS-SNBT |
| Quantum Force 29200 Maestro/MHS HyperScale configuration:2x2x40/100GbEQSFP fiber ports,2x100GbE DAC3mtransceivers,192GB RAM,2x960GBNVMe,2x10GBShort RangeTransceivers,2xACPSUs,Lights-OutManagement(LOM),Slidingrails,with SandBlast subscription package for1year | CPAP-SG29200-PLUS-MHS-SNBT |
| Next Generation Threat Prevention&SandBlast package for1yearforQuantumForce29200 appliance | CPSB-SNBT-29200-1Y |
| Next Generation Threat Prevention package for1yearforQuantumForce29200 appliance | CPSB-NGTP-29200-1Y |
| Next Generation FirewallPackage for1yearforQuantumForce29200 appliance | CPSB-NGFW-29200-1Y |
| Quantum IoT Network Protection for1yearforQuantumForce29200appliances | CPSB-IOTP-29200-1Y |
| Quantum SD-WAN subscription for1yearforQuantumForce29200appliances | CPSB-SDWAN-29200-1Y |
| Data Loss Prevention(DLP)blade for1yearforQuantumForce29200appliances | CPSB-DLP-29200-1Y |
Accessories
| INTERFACE CARDS | SKU |
|---|---|
| 8 Port 1/10 G Base-F SFP+ interface card for 19000/29000 appliances | CPAC-8-1/10F-D |
| 4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card for 9000/19000/29000 appliances | CPAC-4-10/25F-D |
| 4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card for 9000/19000/29000 appliances with acceleration | CPAC-4-10/25F-DA |
| 2 Port 10/25/40/100G Base-F QSFP28 interface card for 19000/29000 appliances with acceleration | CPAC-2-40/100F-D |
| TRANSCEIVERS | SKU |
|---|---|
| SFP transceiver module for 1000 BASE fiber ports - long range (1000BASE-LX), SM Fiber, LC | CPAC-TR-1LX-D |
| SFP transceiver module for 1000 BASE fiber ports - short range (1000BASE-SX), MM Fiber, LC | CPAC-TR-1SX-D |
| SFP transceiver to 1000 BASE-T RJ45(Copper), CU, RJ45 | CPAC-TR-1T-D |
| SFP+ transceiver module for 10GbE fiber ports - long range(10GBASE-LR), SM Fiber, LC | CPAC-TR-10LR-D |
| SFP+ transceiver module for 10GbE fiber ports - short range(10GBASE-SR), MM Fiber, LC | CPAC-TR-10SR-D |
| SFP+ transceiver module for 10GbE fiber ports - for links up to 40km(10GBASE-ER), SM Fiber, LC | CPAC-TR-10ER-D |
| SFP+ transceiver 10GBASE-T RJ45(Copper)-for links up to 30m over CAT6a/CAT7, CU, RJ45 | CPAC-TR-10T-D |
| SFP28 transceiver module for 25GbE fiber ports - short range(25GBASE-SR), MM Fiber, LC | CPAC-TR-25SR-D |
| QSFP+ transceiver for 40GbE fiber Ports - short range(40GBASE-SR4), MM Fiber, MPO-12 | CPAC-TR-40SR-QSFP-100m-D |
| QSFP28 transceiver module for 100GbE fiber ports - for links up to 2km(100GBASE-CWDM4), MM Fiber, LC | CPAC-TR-100CWDM4-D |
| DIRECT ATTACH CABLES (DAC) | SKU |
|---|---|
| 10GbE Direct Attach Cable(DAC), 3m length for CPAC-8-1/10F-D, CPAC-4-10/25F-D, and CPAC-2-40/100F-D | CPAC-DAC-10G-3M-D |
| 25GbE Direct Attach Cable(DAC), 3m length for CPAC-4-10/25F-D, and CPAC-2-40/100F-D | CPAC-DAC-25G-3M-D |
| 40GbE Direct Attach Cable(DAC), 3m length for CPAC-2-40/100F-D | CPAC-DAC-40G-3M-D |
| 100GbE Direct Attach Cable(DAC), 3m length for CPAC-2-40/100F-D | CPAC-DAC-100G-3M-D |
Subscription Services
| NGFW | NGTP | SNBT(SandBlast) | |
|---|---|---|---|
| Application Control | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering | √ | √ | |
| Anti-Bot | √ | √ | |
| Anti-Virus | √ | √ | |
| Anti-Spam | √ | √ | |
| DNS Security | √ | √ | |
| SandBlast Threat Emulation(sandboxing) | √ | ||
| SandBlast Threat Extraction(CDR) | √ | ||
| Zero Phishing | √ | ||
| IoT Network Protection | optional | optional | optional |
| SD-WAN Network Optimization | optional | optional | optional |
Worldwide Headquarters
5 Shlomo Kaplan Street, Tel Aviv 6789159, Israel
Tel: +972-3-753-4599
U.S. Headquarters
100 Oracle Parkway, Suite 800 Redwood City, CA 94065
Tel: 1-800-429-4391
www.checkpoint.com
The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years.