Quantum Force 9700 Datasheet

Quantum Force 9700

Security Gateway

Unified Management and Ops Efficiency

Top Security Effectiveness

Check Point #1 the 2nd year in a row with 99.8%
Named a Leader by Top Analyst Firms

Forrester Wave™ for Zero Trust Platform

Providers, Q3 2023
Gartner® Firewall Magic Quadrant™ (2022)

AI/ML powered Threat Prevention

Increase protection and reduce TCO with a consolidated security architecture
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks
Quantum 9700 firewalls deliver up to 129 Gbps of firewall and 20 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency and space savings in a modular 1 RU platform.
Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.

Fastest AI-Powered Threat Prevention

Network Resilience & Power Efficiency

9700 Performance Highlights

Firewall Next Gen Firewall Threat Prevention
129 Gbps 57.6 Gbps 20 Gbps

AI-Powered advanced security and uncompromising performance, built for perimeter applications and data centers
Quantum Force 9700 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. Two network I/O slots can be configured to fit your network with a high port density of up to 8x1/10G, 4x10/25G and 2x40/100G with acceleration.

Comprehensive and Industry-Leading Security

With the 9700, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 20 Gbps of threat prevention throughput or up to 400 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.

Highest Performance Threat Prevention

With the 9700, organizations can inspect
Miercom
Check Point is #1 in Miercom 2024 Security Benchmark Highest Threat Prevention Scores for 2nd year in a row

Modular, High Port Density 1RU Chassis

The 9700 offers the flexibility to fit your changing network requirements. Populate two network I/O slots with your choice of network cards: 8x1/10G, 4x10/25G or 2x40/100G. In addition, the 40/100 card benefits from ASIC based firewall acceleration.

Power Efficient, Resilient Design

While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Businesses need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.

Flexible, High Performance HTTPS Inspection

While commonly used for good, HTTPS traffic


Specifications

Performance

Enterprise Test Conditions1
Threat Prevention2.5[Gbps] 20
NGFW3[Gbps] 57.6
IPS[Gbps] 73.7
Firewall[Gbps] 129
RFC 3511,2544,2647,1242 Performance(Lab)
Firewall 1518B UDP[Gbps] 400
Firewall Latency(avg) 1.85μSec
VPN AES-GCM 1452B[Gbps] 75
Connections/sec 535,000
Concurrent connections(Base/Plus/Max) 6.5M/15M/29M
TLS Inspection Performance
Threat Prevention1.2[Gbps] 9.6
Threat Prevention2web mix4[Gbps] 5.8
IPS web mix4[Gbps] 7.3

1 Enterprise traffic profile measured with maximum memory
2 Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast with logging enabled
3 Includes Firewall, App Control and IPS with logging enabled
4 Web traffic mix is based on NetSecOpen web traffic profile
5 Based on Quantum Firewall Software Release R82 take #25

Additional Features

Highlights

Network Expansion Slot Options


Network

Network Connectivity

High Availability

Power Requirements

IPv6

Physical

Environmental Conditions

Certifications

Maximum Virtual System Capacity

On Board RJ451 1/10 GbE Fiber 10/25 GbE Fiber 40/100 GbE Fiber Memory Redundant Power Redundant Storage LOM
Base model 6 4 0 0 32 GB ○ ○ ○
Plus model 6 12 0 0 64 GB ● ● ●
Max capacity 6 20 8 4 128 GB ● ● ●
Maestro/MHS 6 4 4 0 64 GB ● ● ●

SECURITY APPLIANCE1 SKU
9700 Base configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board4xRJ45 network ports,on-board4x1/10GbE SFP+ports,32GB RAM,1x960GB SSDNVMe,1xAC PSUs,telescopic rails,SandBlast(SNBT)Security Subscription Package for1Year CPAP-SG9700-SNBT
9700 Plus configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board4xRJ45 network ports,on-board4x1/10GbE SFP+ports,8x1/10GbE SFP+ports,64GB RAM,4x960GB SSDNVMe,2xAC PSUs,Lights-Out Management(LOM),telescopic rails,SandBlast(SNBT)Security Subscription Package for1Year CPAP-SG9700-PLUS-SNBT
Quantum Force9700Maestro/MHSHyperScaleconfiguration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board4xRJ45 network ports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,64GB RAM,2x960GB SSDNVMe,2xACPSU,Lights-OutManagement(LOM),2x25GbE DAC3M,telescopic rails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year CPAP-SG9700-PLUS-MHS-SNBT
QuantumForce9700Maestro/MHSHyperScaleconfigurationwith1MHO-140orchestrator and2QuantumForce9700appliances,each appliance includes1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) syncport,on-board4xRJ45network ports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,64GBRAM,2x960GBSSDNVMe,2xACPSU,Lights-OutManagement(LOM),2x25GbE DAC3M,telescopic rails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year CPAP-SG9702-PLUS-MHS-SNBT
QuantumForce9700Maestro/MHSHyperScaleconfigurationwith1MHO-140orchestrator and3QuantumForce9700appliances,each appliance includes1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) syncport,on-board4xRJ45network ports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,64GBRAM,2x960GBSSDNVMe,2xACPSU,Lights-OutManagement(LOM),2x25GbE DAC3M,telescopic rails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year CPAP-SG9703-PLUS-MHS-SNBT
NextGenerationThreatPrevention&SandBlastpackagefor1yearforQuantumForce9700appliance CPSB-SNBT-9700-1Y
NextGenerationThreatPrevention packagefor1yearforQuantumForce9700appliance CPSB-NGTP-9700-1Y
NextGenerationFirewallPackagefor1yearforQuantumForce9700appliance CPSB-NGFW-9700-1Y
QuantumIoTNetworkProtectionfor1yearforQuantumForce9700appliances CPSB-IOTP-9700-1Y
QuantumSD-WANsubscriptionfor1yearforQuantumForce9700appliances CPSB-SDWAN-9700-1Y
DataLossPrevention(DLP)bladefor1yearforQuantumForce9700appliances CPSB-DLP-9700-1Y

ACCESSORIES

1The Base & Plus package includes 2 virtual systems (VS)—one management VS and one production/data VS which are not additive or counted when adding additional VS licenses.


TRANSCEIVERS SKU
Compatible with the CPAC-8-1/10F-D and CPAC-4-10/25F-D, Interface Cards
SFP transceiver module for 1000 BASE fiber ports - long range (1000BASE-LX), SM Fiber, LC CPAC-TR-1LX-D
SFP transceiver module for 1000 BASE fiber ports - short range (1000BASE-SX), MM Fiber, LC CPAC-TR-1SX-D
SFP transceiver to 1000 BASE-T RJ45(Copper), CU,RJ45 CPAC-TR-1T-D
SFP+ transceiver module for 10GbE fiber ports - long range(10GBASE-LR),SM Fiber,LC CPAC-TR-1QLD
SFP+ transceiver module for 10GbE fiber ports - short range(10GBASE-SR),MM Fiber,LC CPAC-TR-10SR-D
SFP+ transceiver module for 10GbE fiber ports - for links up to40km(10GBASE-ER),SM Fiber,LC CPAC-TR-10ER-D
SFP+ transceiver 10GBASE-T RJ45(Copper)-for links up to30m overCAT6a/CAT7,CU,RJ45 CPAC-TR-10T-D
Compatible with the CPAC-4-10/25F-D Interface Cards
SFP28 transceiver module for 25GbE fiber ports - short range(25GBASE-SR),MM Fiber,LC CPAC-TR-25SR-D
Compatible with the CPAC-2-40/100F-D Interface Card
SFP+ transceiver module for 10GbE fiber ports - long range(10GBASE-LR),SM Fiber,LC withQSFP28 Adapter CPAC-TR-10LR-D-ADP
SFP+ transceiver module for 10GbE fiber ports - short range(10GBASE-SR)MM Fiber,LC withQSFP28 Adapter CPAC-TR-10SR-D-ADP
SFP+ transceiver module for 10GbE fiber ports - for links up to40km(10GBASE-ER)SM Fiber,LC withQSFP28 Adapter CPAC-TR-10ER-D-ADP
SFP+ transceiver 10GBASE-T RJ45(Copper)-for links up to30m overCAT6a/CAT7 withQSFP28 Adapter CPAC-TR-10T-D-ADP
SFP28 transceiver module for 25GbE fiber ports - short range(25GBASE-SR)MM Fiber,LC withQSFP28 Adapter CPAC-TR-25SR-D-ADP
QSFP+ transceiver for 40GbE fiber Ports - short range(40GBASE-SR4),MM Fiber,MPO-12 CPAC-TR-40SR-QSFP-100m-D
QSFP+ transceiver module for 40GbE fiber ports - short range(40GBASE-eSR4),MM Fiber,MPO-12 CPAC-TR-40SR-QSFP-300m-D
QSFP Bi-directional transceiver for 40GbE fiber ports - short range(40GBASE-SR-BD),MM Fiber,LC CPAC-TR-40SR-QSFP-BiDi-D
QSFP+ transceiver module for 40GbE fiber ports for links up to75m(40GBASE-SWDM4)MM Fiber,LS CPAC-TR-40SWDM4
QSFP+ transceiver module for 40GbE fiber ports - long range(40GBASE-LR5),SM Fiber,LC CPAC-TR-40LR-QSFP-10Km-D
QSFP28 transceiver module for 100GbE fiber ports - long range(100GBASE-LR4),SM Fiber,LC CPAC-TR-100LR-D
QSFP28 transceiver module for 100GbE fiber ports - short range(100GBASE-SR4),MM Fiber,MPO-12 CPAC-TR-100SR-D
QSFP28 Bi-directional transceiver for 100GbE fiber Ports - short range(100GBase-SR1.2BiDi),MM Fiber,LC CPAC-TR-100SR-BiDi
QSFP28 transceiver module for 100GbE fiber ports - for links up to75m(100GBASE-SWDM4)MM Fiber,LC CPAC-TR-100SWDM4-D
QSFP28 transceiver module for 100GbE fiber ports - for links up to2km(100GBASE-CWDM4)SM Fiber,LC CPAC-TR-100CWDM4-D
QSFP28 transceiver module for 100GbE fiber ports,- for links up to40km(100GBASE-ER4)SM Fiber,LC CPAC-TR-100ERL4

MEMORY SKU
32GB Memory upgrade kit for 9700-9800 appliances CPAC-RAM32GB-9700/9800
64GB Memory upgrade kit for 9700-9800 appliances CPAC-RAM64GB-9700/9800
128GB Memory upgrade kit for 9700-9800 appliances CPAC-RAM128GB-9700/9800
SPARES AND MISCELLANEOUS SKU
960GB SSD for 9000/19000/29000 security gateways CPAC-SSD-960G-D
AC PSU for 9700-9800 CPAC-PSU-AC-9700/9800
Dual DC Power Supply for 9700/9800 series appliances CPAC-PSU-DUAL-DC-9700/9800
Lights-Out Management Module for 9000/19000/29000 appliances CPAC-NLOM-D
Slide rails for 9000 Security Gateways(22"-32") CPAC-Rails-9000
Telescopic slide rails for 9000 Security Gateways(24"-36") CPAC-RAILS-EXT-9000
Blank NIC cover for 9000/19000/29000 appliances CPAC-NIC-COVER-D

SUBSCRIPTION SERVICES

NGFW NGTP SNBT(SandBlast)
Application Control √ √ √
IPS √ √ √
URL Filtering √ √
Anti-Bot √ √
Anti-Virus √ √
Anti-Spam √ √
DNS Security √ √
SandBlast Threat Emulation(sandboxing) √
SandBlast Threat Extraction(CDR) √
Zero Phishing √
IoT Network Protection optional optional optional
SD-WAN Network Optimization optional optional optional

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years.