Quantum Force 9700 Datasheet
Quantum Force 9700
Security Gateway
Unified Management and Ops Efficiency
Top Security Effectiveness
Check Point #1 the 2nd year in a row with 99.8%
Named a Leader by Top Analyst Firms
Forrester Wave™ for Zero Trust Platform
Providers, Q3 2023
Gartner® Firewall Magic Quadrant™ (2022)
AI/ML powered Threat Prevention
Increase protection and reduce TCO with a consolidated security architecture
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks
Quantum 9700 firewalls deliver up to 129 Gbps of firewall and 20 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency and space savings in a modular 1 RU platform.
Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.
Fastest AI-Powered Threat Prevention
Network Resilience & Power Efficiency
9700 Performance Highlights
| Firewall | Next Gen Firewall | Threat Prevention |
|---|---|---|
| 129 Gbps | 57.6 Gbps | 20 Gbps |
AI-Powered advanced security and uncompromising performance, built for perimeter applications and data centers
Quantum Force 9700 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. Two network I/O slots can be configured to fit your network with a high port density of up to 8x1/10G, 4x10/25G and 2x40/100G with acceleration.
Comprehensive and Industry-Leading Security
- Next Generation Firewall
- Site-to-Site and Remote Access VPN
- Application and Web Filtering
- Intrusion Prevention
- Antivirus and Anti-Bot
- Advanced DNS Security
- Sandboxing with file sanitization
With the 9700, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 20 Gbps of threat prevention throughput or up to 400 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.
Highest Performance Threat Prevention
With the 9700, organizations can inspect
Miercom
Check Point is #1 in Miercom 2024 Security Benchmark Highest Threat Prevention Scores for 2nd year in a row
Modular, High Port Density 1RU Chassis
The 9700 offers the flexibility to fit your changing network requirements. Populate two network I/O slots with your choice of network cards: 8x1/10G, 4x10/25G or 2x40/100G. In addition, the 40/100 card benefits from ASIC based firewall acceleration.
Power Efficient, Resilient Design
While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Businesses need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.
Flexible, High Performance HTTPS Inspection
While commonly used for good, HTTPS traffic
Specifications
Performance
| Enterprise Test Conditions1 | |
|---|---|
| Threat Prevention2.5[Gbps] | 20 |
| NGFW3[Gbps] | 57.6 |
| IPS[Gbps] | 73.7 |
| Firewall[Gbps] | 129 |
| RFC 3511,2544,2647,1242 Performance(Lab) | |
| Firewall 1518B UDP[Gbps] | 400 |
| Firewall Latency(avg) | 1.85μSec |
| VPN AES-GCM 1452B[Gbps] | 75 |
| Connections/sec | 535,000 |
| Concurrent connections(Base/Plus/Max) | 6.5M/15M/29M |
| TLS Inspection Performance | |
| Threat Prevention1.2[Gbps] | 9.6 |
| Threat Prevention2web mix4[Gbps] | 5.8 |
| IPS web mix4[Gbps] | 7.3 |
1 Enterprise traffic profile measured with maximum memory
2 Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast with logging enabled
3 Includes Firewall, App Control and IPS with logging enabled
4 Web traffic mix is based on NetSecOpen web traffic profile
5 Based on Quantum Firewall Software Release R82 take #25
Additional Features
Highlights
- Storage: BASE x 1 SSD 960GB NVMe, PLUS x 2 SSD 960GB NVMe
- Power: BASE x 1 External AC PSU, PLUS x 2 External AC PSUs
- 32 (64 in PLUS model) to 128 GB memory options
- Lights-Out-Management card – optional (included in Plus package)
Network Expansion Slot Options
- 8 x 1/10GBASE-F SFP+ port card
- 4 x 10/25GBASE-F SFP28 port card
Network
Network Connectivity
- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
- Active/Active L2, Active/Passive L2 and L3
- Session failover for routing change, device and link failure
- ClusterXL or VRRP
Power Requirements
- Single Power Supply rating AC: 450W
- Power input: 100 to 240VAC (47-63Hz), -40~-70VDC
- Power consumption avg/max: 224.5W/374.3W
IPv6
- NAT66, NAT64, NAT46
- CoreXL, SecureXL, HA with VRRPv3
Physical
- Maximum thermal output AC 1277.1BTU/hr
- Dual replaceable Power Supply’s
- Enclosure: 1RU
- Dimensions: (WxDxH): 17.2 x 20 x 1.73 in.(438 x 508 x 44mm)
- Weight: (gross; Kg): 16.9
Environmental Conditions
- Operating: 0° to 40°C, humidity 5% to 95%
- Storing: –20° to 70°C, humidity 5% to 95% at 60°C
- MTBF: > 10 years
Certifications
- Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
- Emissions: CE, FCC IC, VCCI, ASNZS ACMA
- Environmental: ROHS, REACH, WEEE, ISO14001
Maximum Virtual System Capacity
| On Board RJ451 | 1/10 GbE Fiber | 10/25 GbE Fiber | 40/100 GbE Fiber | Memory | Redundant Power | Redundant Storage | LOM | |
|---|---|---|---|---|---|---|---|---|
| Base model | 6 | 4 | 0 | 0 | 32 GB | ○ | ○ | ○ |
| Plus model | 6 | 12 | 0 | 0 | 64 GB | ● | ● | ● |
| Max capacity | 6 | 20 | 8 | 4 | 128 GB | ● | ● | ● |
| Maestro/MHS | 6 | 4 | 4 | 0 | 64 GB | ● | ● | ● |
| SECURITY APPLIANCE1 | SKU | |
|---|---|---|
| 9700 Base configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board4xRJ45 network ports,on-board4x1/10GbE SFP+ports,32GB RAM,1x960GB SSDNVMe,1xAC PSUs,telescopic rails,SandBlast(SNBT)Security Subscription Package for1Year | CPAP-SG9700-SNBT | |
| 9700 Plus configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board4xRJ45 network ports,on-board4x1/10GbE SFP+ports,8x1/10GbE SFP+ports,64GB RAM,4x960GB SSDNVMe,2xAC PSUs,Lights-Out Management(LOM),telescopic rails,SandBlast(SNBT)Security Subscription Package for1Year | CPAP-SG9700-PLUS-SNBT | |
| Quantum Force9700Maestro/MHSHyperScaleconfiguration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board4xRJ45 network ports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,64GB RAM,2x960GB SSDNVMe,2xACPSU,Lights-OutManagement(LOM),2x25GbE DAC3M,telescopic rails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year | CPAP-SG9700-PLUS-MHS-SNBT | |
| QuantumForce9700Maestro/MHSHyperScaleconfigurationwith1MHO-140orchestrator and2QuantumForce9700appliances,each appliance includes1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) syncport,on-board4xRJ45network ports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,64GBRAM,2x960GBSSDNVMe,2xACPSU,Lights-OutManagement(LOM),2x25GbE DAC3M,telescopic rails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year | CPAP-SG9702-PLUS-MHS-SNBT | |
| QuantumForce9700Maestro/MHSHyperScaleconfigurationwith1MHO-140orchestrator and3QuantumForce9700appliances,each appliance includes1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) syncport,on-board4xRJ45network ports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,64GBRAM,2x960GBSSDNVMe,2xACPSU,Lights-OutManagement(LOM),2x25GbE DAC3M,telescopic rails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year | CPAP-SG9703-PLUS-MHS-SNBT | |
| NextGenerationThreatPrevention&SandBlastpackagefor1yearforQuantumForce9700appliance | CPSB-SNBT-9700-1Y | |
| NextGenerationThreatPrevention packagefor1yearforQuantumForce9700appliance | CPSB-NGTP-9700-1Y | |
| NextGenerationFirewallPackagefor1yearforQuantumForce9700appliance | CPSB-NGFW-9700-1Y | |
| QuantumIoTNetworkProtectionfor1yearforQuantumForce9700appliances | CPSB-IOTP-9700-1Y | |
| QuantumSD-WANsubscriptionfor1yearforQuantumForce9700appliances | CPSB-SDWAN-9700-1Y | |
| DataLossPrevention(DLP)bladefor1yearforQuantumForce9700appliances | CPSB-DLP-9700-1Y |
ACCESSORIES
1The Base & Plus package includes 2 virtual systems (VS)—one management VS and one production/data VS which are not additive or counted when adding additional VS licenses.
| TRANSCEIVERS | SKU |
|---|---|
| Compatible with the CPAC-8-1/10F-D and CPAC-4-10/25F-D, Interface Cards | |
| SFP transceiver module for 1000 BASE fiber ports - long range (1000BASE-LX), SM Fiber, LC | CPAC-TR-1LX-D |
| SFP transceiver module for 1000 BASE fiber ports - short range (1000BASE-SX), MM Fiber, LC | CPAC-TR-1SX-D |
| SFP transceiver to 1000 BASE-T RJ45(Copper), CU,RJ45 | CPAC-TR-1T-D |
| SFP+ transceiver module for 10GbE fiber ports - long range(10GBASE-LR),SM Fiber,LC | CPAC-TR-1QLD |
| SFP+ transceiver module for 10GbE fiber ports - short range(10GBASE-SR),MM Fiber,LC | CPAC-TR-10SR-D |
| SFP+ transceiver module for 10GbE fiber ports - for links up to40km(10GBASE-ER),SM Fiber,LC | CPAC-TR-10ER-D |
| SFP+ transceiver 10GBASE-T RJ45(Copper)-for links up to30m overCAT6a/CAT7,CU,RJ45 | CPAC-TR-10T-D |
| Compatible with the CPAC-4-10/25F-D Interface Cards | |
| SFP28 transceiver module for 25GbE fiber ports - short range(25GBASE-SR),MM Fiber,LC | CPAC-TR-25SR-D |
| Compatible with the CPAC-2-40/100F-D Interface Card | |
| SFP+ transceiver module for 10GbE fiber ports - long range(10GBASE-LR),SM Fiber,LC withQSFP28 Adapter | CPAC-TR-10LR-D-ADP |
| SFP+ transceiver module for 10GbE fiber ports - short range(10GBASE-SR)MM Fiber,LC withQSFP28 Adapter | CPAC-TR-10SR-D-ADP |
| SFP+ transceiver module for 10GbE fiber ports - for links up to40km(10GBASE-ER)SM Fiber,LC withQSFP28 Adapter | CPAC-TR-10ER-D-ADP |
| SFP+ transceiver 10GBASE-T RJ45(Copper)-for links up to30m overCAT6a/CAT7 withQSFP28 Adapter | CPAC-TR-10T-D-ADP |
| SFP28 transceiver module for 25GbE fiber ports - short range(25GBASE-SR)MM Fiber,LC withQSFP28 Adapter | CPAC-TR-25SR-D-ADP |
| QSFP+ transceiver for 40GbE fiber Ports - short range(40GBASE-SR4),MM Fiber,MPO-12 | CPAC-TR-40SR-QSFP-100m-D |
| QSFP+ transceiver module for 40GbE fiber ports - short range(40GBASE-eSR4),MM Fiber,MPO-12 | CPAC-TR-40SR-QSFP-300m-D |
| QSFP Bi-directional transceiver for 40GbE fiber ports - short range(40GBASE-SR-BD),MM Fiber,LC | CPAC-TR-40SR-QSFP-BiDi-D |
| QSFP+ transceiver module for 40GbE fiber ports for links up to75m(40GBASE-SWDM4)MM Fiber,LS | CPAC-TR-40SWDM4 |
| QSFP+ transceiver module for 40GbE fiber ports - long range(40GBASE-LR5),SM Fiber,LC | CPAC-TR-40LR-QSFP-10Km-D |
| QSFP28 transceiver module for 100GbE fiber ports - long range(100GBASE-LR4),SM Fiber,LC | CPAC-TR-100LR-D |
| QSFP28 transceiver module for 100GbE fiber ports - short range(100GBASE-SR4),MM Fiber,MPO-12 | CPAC-TR-100SR-D |
| QSFP28 Bi-directional transceiver for 100GbE fiber Ports - short range(100GBase-SR1.2BiDi),MM Fiber,LC | CPAC-TR-100SR-BiDi |
| QSFP28 transceiver module for 100GbE fiber ports - for links up to75m(100GBASE-SWDM4)MM Fiber,LC | CPAC-TR-100SWDM4-D |
| QSFP28 transceiver module for 100GbE fiber ports - for links up to2km(100GBASE-CWDM4)SM Fiber,LC | CPAC-TR-100CWDM4-D |
| QSFP28 transceiver module for 100GbE fiber ports,- for links up to40km(100GBASE-ER4)SM Fiber,LC | CPAC-TR-100ERL4 |
| MEMORY | SKU |
|---|---|
| 32GB Memory upgrade kit for 9700-9800 appliances | CPAC-RAM32GB-9700/9800 |
| 64GB Memory upgrade kit for 9700-9800 appliances | CPAC-RAM64GB-9700/9800 |
| 128GB Memory upgrade kit for 9700-9800 appliances | CPAC-RAM128GB-9700/9800 |
| SPARES AND MISCELLANEOUS | SKU |
|---|---|
| 960GB SSD for 9000/19000/29000 security gateways | CPAC-SSD-960G-D |
| AC PSU for 9700-9800 | CPAC-PSU-AC-9700/9800 |
| Dual DC Power Supply for 9700/9800 series appliances | CPAC-PSU-DUAL-DC-9700/9800 |
| Lights-Out Management Module for 9000/19000/29000 appliances | CPAC-NLOM-D |
| Slide rails for 9000 Security Gateways(22"-32") | CPAC-Rails-9000 |
| Telescopic slide rails for 9000 Security Gateways(24"-36") | CPAC-RAILS-EXT-9000 |
| Blank NIC cover for 9000/19000/29000 appliances | CPAC-NIC-COVER-D |
SUBSCRIPTION SERVICES
| NGFW | NGTP | SNBT(SandBlast) | |
|---|---|---|---|
| Application Control | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering | √ | √ | |
| Anti-Bot | √ | √ | |
| Anti-Virus | √ | √ | |
| Anti-Spam | √ | √ | |
| DNS Security | √ | √ | |
| SandBlast Threat Emulation(sandboxing) | √ | ||
| SandBlast Threat Extraction(CDR) | √ | ||
| Zero Phishing | √ | ||
| IoT Network Protection | optional | optional | optional |
| SD-WAN Network Optimization | optional | optional | optional |
The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years.