Quantum Force 9200 Datasheet
Quantum Force 9200
Security Gateway
Top Security Effectiveness
Check Point #1 for the 2nd year in a row
Unified Management and Ops Efficiency
Increase protection and reduce TCO with Check Point #1 for the 2nd year in a row with 99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024)
Named a Leader by Top Analyst Firms
Forrester Wave™ for Zero Trust Platform
Increase protection and reduce TCO with a consolidated security architecture
Forrester Wave™ for Zero Trust Platform Providers, Q3 2023
Gartner® Firewall Magic Quadrant™ (2022)
AI/ML powered Threat Prevention
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks.
Quantum 9200 firewalls deliver up to 60 Gbps of firewall and 8 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency, and space savings in a modular 1 RU platform.
Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.
Fastest AI-Powered Threat Prevention
Network Resilience & Power Efficiency
Unified Security Management
9200 Performance Highlights
AI-Powered advanced security and uncompromising performance, built for perimeter applications. Quantum Force 9200 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. One network I/O slot can be configured to fit your network with a high port density of up to 8x1/10G or 4x10/25G with acceleration.
Comprehensive and Industry-Leading Security
- Site-to-Site and Remote Access VPN
- Application and Web Filtering
- Intrusion Prevention
- Advanced DNS Security
- Antivirus and Anti-Bot
- Sandboxing with file sanitization
- Zero-phishing (no agent required)
Highest Performance Threat Prevention
With the 9200, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 8 Gbps of threat prevention throughput or up to 80 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.
Miercom
Check Point is #1 in Miercom 2024 Security Benchmark Highest Threat Prevention Scores for 2nd year in a row.
Modular, High Port Density 1RU Chassis
The 9200 offers the flexibility to fit your changing network requirements. Populate the network I/O slot with your choice of network cards: 8x1/10G, 4x10/25G.
Power Efficient, Resilient Design
With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors.
Flexible, High-Performance HTTPS Inspection
While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Businesses need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.
Specifications
| Enterprise Test Conditions1 | |
|---|---|
| Threat Prevention2.5[Gbps] | 8 |
| NGFW3[Gbps] | 19 |
| IPS[Gbps] | 31 |
| Firewall[Gbps] | 60 |
| RFC 3511,2544,2647,1242 Performance(Lab) | |
| Firewall 1518B UDP[Gbps] | 80 |
| Firewall Latency(avg) | 9μSec |
| VPN AES-GCM 1452B[Gbps] | 28.6 |
| Connections/sec | 250,000 |
| Concurrent connections(Base/Plus/Max) | 2.75M/7.27M/16.2 |
| TLS Inspection Performance | |
| Threat Prevention1.2[Gbps] | 3.6 |
| Threat Prevention2web mix4[Gbps] | 2 |
| IPS web mix4[Gbps] | 2.9 |
1 Enterprise traffic profile measured with maximum memory
2 Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast (Incl. DNS Security & Zero Phishing) with logging enabled
3 Includes Firewall, App Control and IPS with logging enabled
Additional Features
Includes Firewall, App Control and IPS with logging enabled
4 Web traffic mix is based on RFC 9411 (NetSecOpen) web traffic profile
5 Based on Quantum Firewall Software Release R82 take #25
Highlights
- CPU: 4 physical cores, total of 8 logical cores
- Storage: 1 SSD 480GB SATA
- 2x Internal AC power supply
- 16 to 64 GB memory options
- Lights-Out-Management card – optional (included in Plus package)
- 8 x 1/10GBASE-F SFP+ port card
- 4 x 10/25GBASE-F SFP28 port card
Network
Network Connectivity
- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
- Active/Active L2, Active/Passive L2 and L3
- Session failover for routing change, device and link failure
- ClusterXL or VRRP
- NAT66, NAT64, NAT46
- CoreXL, SecureXL, HA with VRRPv3
IPv6
- Power input: 100 to 240VAC (47-63Hz)
- Power consumption avg/max: 84.4W/140.8W
Physical
- Dimensions: (WxDxH): 17.2 x 20 x 1.73 in.(438 x 508 x 44mm)
- Weight: (gross; Kg): 14.8
Environmental Conditions
- Operating: 0° to 40°C, humidity 5% to 95
- Storing: –20° to 70°C, humidity 5% to 95% at 60°C
- MTBF: > 10 years
Certifications
- Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
- Emissions: CE, FCC IC, VCCI, ASNZS ACMA
- Environmental: ROHS, REACH, WEEE, ISO14001
Maximum Virtual System Capacity
| On-Board1RJ45 | 1/10GbE fiber | 10/25GbE Fiber | Memory | Redundant Power | Redundant Storage | LOM | |
|---|---|---|---|---|---|---|---|
| Base model | 10 | 0 | 0 | 16GB | ● | ○ | ○ |
| Plus model | 10 | 8 | 0 | 32GB | ● | ○ | ● |
| Max capacity | 10 | 8 | 4 | 64GB | ● | ○ | ● |
| Maestro/MHS | 10 | 0 | 4 | 32GB | ● | ○ | ● |
The 9200 includes 1x RJ45 (1 GbE copper) management port plus an additional 1x RJ45 (1 GbE copper) port for synchronization when using the 9200 PLUS in a cluster. With one network I/O slot, modify the base or plus configuration to meet your networking requirements.
The RJ45 port count includes the Management & Sync ports.
SUBSCRIPTION SERVICES
| NGFW | NGTP | SNBT(SandBlast) | |
|---|---|---|---|
| Application Control | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering | √ | √ | |
| Anti-Bot | √ | √ | |
| Anti-Virus | √ | √ | |
| Anti-Spam | √ | √ | |
| DNS Security | √ | √ | |
| SandBlast Threat Emulation(sandboxing) | √ | ||
| SandBlast Threat Extraction(CDR) | √ | ||
| Zero Phishing | √ | ||
| IoT Network Protection | optional | optional | optional |
| SD-WAN Network Optimization | optional | optional | optional |
The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP, and SNBT are available for subsequent years.