QUANTUM FORCE 3970 SECURITY GATEWAY Check Point ACCESSORIES GUIDE
Quantum Force 3970
Security Gateway
Optimized for SD-WAN
Quantum Network Security
Top Security Effectiveness
Check Point has been ranked #1 for the third consecutive year, achieving a 99.9% malware block rate, 99.7% phishing prevention and 98% high and critical exploit prevention in the
GigaOm Radar for Enterprise Firewalls 2025
Check Point Recognized as a Leader and Outperformer for Enterprise Firewalls
Named a Leader by Top Analyst Firms Forrester Wave $ ^{\mathrm{TM}} $ for Enterprise Firewalls 2024
Quantum Force 3970 branch office firewalls deliver up to 40 Gbps of firewall throughput and 4.25 Gbps of Threat Prevention throughput. It includes Check Point's comprehensive AI-powered security and real-time threat intelligence, in a compact 1U rack mount size. The 3970 is optimized for SD-WAN, high-speed connectivity to support the demanding requirements of today's hybrid mesh branch office networks.
Quantum Force 3970 Performance Highlights
| Firewall | Next Gen Firewall | Threat Prevention |
|---|---|---|
| 40 Gbps | 12.5 Gbps | 4.25 Gbps |
Productivity Loss and Cyber Risks in Branch Offices
Today's branch offices are on the frontline, directly interacting with customers and the public. They directly connect the public cloud and internet which expose them to cyber threats. This often makes branch offices a weak link in enterprise network security.
As employees return to the office, they experience downgraded network performance compared to their high-speed home internet. Suddenly, the same bandwidth-hungry SaaS and enterprise apps become frustrating to use at the office due to lag, choppiness, and freeze ups.
Industry-Leading Security
- Next Generation Firewall
- Site-to-Site and Remote Access VPN
- Application and Web Filtering
- Intrusion Prevention
- Antivirus and Anti-Bot
- Advanced DNS Security
- Sandboxing
- HTTPS Inspection (Layer 1-7)
- Zero-phishing (no agent required)
- SD-WAN
- Malware Prevention
Frontline Defense for the Branch
Secure, Blazing Fast SaaS Apps
The 3970 delivers 4x higher threat prevention throughput compared to previous models. This ensures secure, blazing fast network performance for SaaS productivity apps like Zoom, Teams, Salesforce, etc.
High Speed Connectivity & SD-WAN
While commonly used for good, HTTPS web traffic can also hide illegal user activity and malicious traffic. Enterprises need the ability to inspect a broad range of encrypted TLS 1.3 and HTTPS channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.
High Performance HTTPS Inspection
Quantum Force 3970 Specifications
Cooling Fans
Performance
| Enterprise Test Conditions1 | |
|---|---|
| Threat Prevention2[Gbps] | 4.25 |
| Next Generation Firewall3[Gbps] | 12.5 |
| IPS Throughput[Gbps] | 17 |
| Firewall Throughput[Gbps] | 40 |
| RFC 3511,2544,2647,1242 Performance(Lab) | |
| Firewall 1518 bytes UDP[Gbps] | 40 |
| Firewall Latency(μSec) | 19 |
| VPN AES-GCM 1452B[Gbps] | 13 |
| Connections/Sec | 140,000 |
| Concurrent Connections(M) | 7.2 |
| TLS Inspection Performance | |
| Threat Prevention1,2[Gbps] | 1.4 |
| Threat Prevention2web mix4[Gbps] | 0.85 |
| IPS web mix4[Gbps] | 1.15 |
Additional Features
- 480 GB NVME SSD M.2
- 1 CPU,8 Physical Cores
- 2x AC internal PSUs
- 1U Rack Mount
Network
Network Connectivity
- Optimized for SD-WAN, network efficiency and resilience
- Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)
- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
- Active/Active L2, Active/Passive L2 and L3
- ClusterXL or VRRP
- NAT66, NAT64, NAT46
IPv6
- CoreXL, SecureXL, HA with VRRPv3
Unicast and Multicast Routing (see SK98226)
- OSPFv2 and v3, BGP, RIP
- Static routes, Multicast routes
Power Requirements
- Dual Internal PSUs
- Policy-based routing
- Single PSU ratings: 135W
- Power input: 100 to 240VAC (50-60Hz)
- Power consumption avg/max: 64W/76W
- Maximum thermal output avg/max: 160.73 BTU/hr. / 191.07 BTU/hr.
Dimensions
- Enclosure: 1U Rack Mount
- Dimensions (WxDxH): 16.93 x 11.81 x 1.74 in. (430.0 x 300.0 x 44.2mm)
- Box Weight: 12.963 lbs / 5.880 kg
- Weight: 9.328 lbs / 4.231 kg
VIRTUAL SYSTEM
- Box Dimensions: 22.4 in(L) x 18.11 in(W) x 6.57 in(H) 57 cm(L) x 46 cm(W) x 16.7 cm(H)
Environmental Conditions
- Operating: 32°F - 104°F 0ºC - 40ºC, humidity 5% to 95%
- Storage: -4°F - 158°F –20° - 70°C, humidity 5% to 95%
| Firewall VS | Firewall + IPS VS | Next Gen Threat Prevention VS | |
|---|---|---|---|
| # of VS | 28 | 14 | 7 |
MTBF
- 158918 hrs @ 25°C / 85659 hrs @ 40°C
Safety
- CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
Noise Level
- 43dB
Certifications
- Emissions: CE, FCC IC, VCCI, ASNZS ACMA
- Environmental: ROHS, REACH, WEEE, ISO14001
| Hardware | QF 3970 |
|---|---|
| RJ-45(1GbE) | 16x1GbE |
| RJ-45(2.5GbE) | 2x2.5GbE |
| SFP | 8x1GbE |
| SFP+ | 4x10GbE |
| Console | USB Type C & RJ-45 |
| USB | 2xUSB 3.0Type A |
| Memory | 32GB |
| Storage | 480GB NVME SSDM.2 |
| PS | Dual(internal) |
| Dimensions | |
| Dimensions(WxDxH) | 16.93x11.81x1.74in.(430.0x300.0x44.2mm) |
| Weight | 9.328lbs./4.231kg. |
| Shipping Carton size(WxDxH) | 22.4in x 18.1x 6.5in.(570x460x167mm) |
| Shipping Carton Weight | 12.963lbs./5.880kg |
| Environment | |
| Operating/Storage | 32°F-104°F0℃-40℃/-4°F-158°F-20°-70℃ |
| MTBF | 158918hrs@25℃/86659hrs@40℃ |
| Power Requirements | |
| AC Input | 100-240VAC(50-60Hz) |
| Power Consumption(Max/Avg) | 76.18W/63.76W |
| Heat Dissipation Max/Avg.(BTU/hr.) | 259.926/217.549 |
| Certifications | |
| Safety | CBIEC62368-1,CELVDEN62368-1,UL62368-1,ASNZS62368.1 |
| Emissions | CE,FCCIC,VCCI,ASNZSACMA |
| Environmental | ROHS,REACH,WEEE,ISO14001 |
ORDERING QUANTUM FORCE 3970 SECURITY GATEWAY
The 3970 includes 1x1GbE copper GbE management port plus an additional 16x 1GbE ports for synchronization when using the 3970 in a cluster. With the 8 network I/O ports, to meet your networking requirements.
| Security Appliance | SKU |
|---|---|
| 3970 configuration:1x1GbE RJ45 management port&1x1GbE RJ45 sync port,on-board16x1GbE RJ45 ports,2x2.5GbE RJ45 ports,8x1GbE SFP ports,4x10GbE SFP+ ports,32GB RAM,1x480GB SSDSATA,2xAC internalPSUs,fixed rails,SandBlast(SNBT)Security Subscription Package for1Year | CPAP-SG3970-SNBT |
| Next Generation Threat Prevention&SandBlast package for1yearforQuantumForce3970 appliance | CPSB-SNBT-3970-1Y |
| Next Generation Threat Prevention package for1yearforQuantumForce3970 appliance | CPSB-NGTP-3970-1Y |
| Next Generation Firewall Package for1yearforQuantumForce3970 appliance | CPSB-NGFW-3970-1Y |
| QuantumIoT Network Protection for1yearforQuantumForce3970appliances | CPSB-IOTP-3970-1Y |
| QuantumSD-WAN subscription for1yearforQuantumForce3970appliances | CPSB-SDWAN-3970-1Y |
| Data Loss Prevention(DLP)blade for1yearforQuantumForce3970appliances | CPSB-DLP-3970-1Y |
| Transceiver Type | Supported Ports | Supported Rate | SKU |
|---|---|---|---|
| 1000BASE-LX SFP | SFP Ports SFP+Ports | 1GbE | CPAC-TR-1LX-D |
| 1000BASE-SX SFP | SFP Ports SFP+Ports | 1GbE | CPAC-TR-1SX-D |
| 1000BASE-T SFP | SFP Ports SFP+Ports | 1GbE | CPAC-TR-1T-D |
| 10GBASE-LR SFP+ | SFP+Ports | 10GbE | CPAC-TR-10LR-D |
| 10GBASE-SR SFP+ | SFP+Ports | 10GbE | CPAC-TR-10SR-D |
| 10GBASE-T SFP+ | SFP+Ports | 10GbE | CPAC-TR-10T-D |
| SUBSCRIPTION SERVICES | NGFW | NGTP | SNBT(Sandblast) |
|---|---|---|---|
| Application Control | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering | √ | √ | |
| Anti-Bot | √ | √ | |
| Anti-Virus | √ | √ | |
| Anti-Spam | √ | √ | |
| DNS Security | √ | √ | |
| SandBlast Threat Emulation(sandboxing) | √ | ||
| SandBlast Threat Extraction(CDR) | √ | ||
| Zero Phishing | √ | ||
| DLP | Optional | Optional | Optional |
| IoT | Optional | Optional | Optional |
| SD-WAN | Optional | Optional | Optional |