Quantum Force 29100 Datasheet
Quantum Force 29100 Security Gateway
Unified Management and Ops Efficiency
Increase protection and reduce TCO with a consolidated security architecture.
YOU DESERVE THE BEST SECURITY
Forrester Wave $ ^{\mathrm{TM}} $ for Zero Trust Platform Providers, Q3 2023 Gartner $ ^{\mathrm{R}} $ Firewall Magic Quadrant $ ^{\mathrm{TM}} $ [2022]
AI/ML Powered Threat Prevention
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks.
Quantum 29100 firewalls deliver up to 1.4 Tbps of firewall and 60 Gbps of threat prevention throughput with integrated AI ML security power efficiency and space savings in a modular 2 RU platform.
Increase the efficiency of your datacenter's security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.
Fastest AI-Powered Threat Prevention
Network Resilience & Power Efficiency
29100 Performance Highlights
| Firewall | Next Gen Firewall | Threat Prevention |
|---|---|---|
| 365 Gbps | 130 Gbps | 60 Gbps |
AI-Powered advanced security and uncompromising performance, built for data centers. Check Point Quantum Force 29100 data center firewalls deliver high threat prevention performance in a small 2 RU form factor to protect employees, networks, and data from cyber-theft. Seven network I/O slots can be configured to fit your network with a high port density of up to 56x1/10GbE, 28x10/25GbE or 14x40/100GbE with acceleration.
Comprehensive and Industry-Leading Security
- Next Generation Firewall
- Site-to-Site and Remote Access VPN
- Application and Web Filtering
- Intrusion Prevention
- Antivirus and Anti-Bot
With the 29100, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 60 Gbps of threat prevention throughput or up to 1.4 Tbps of firewall throughput (UDP 1518B) with a single 2RU firewall.
Highest Performance Threat Prevention
With the 29100, organizations can inspect
- Zero-phishing (no agent required)
Miercom reports Check Point is #1 in Miercom 2024 Security Benchmark Highest Threat Prevention Scores for 2nd year in a row.
Power Efficient, Resilient Design
With low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors. Dual, redundant hot-swap power supplies and dual 960 GB RAID-1 NVMe storage provide complete redundancy.
Flexible, High Performance HTTPS Inspection
While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Enterprises need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive industry traffic, such as Health Care and Financial that have special regulatory requirements. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.
Specifications
Performance
| Enterprise Test Conditions | |
|---|---|
| Threat Prevention [Gbps] | 60 |
| NGFW [Gbps] | 130 |
| IPS [Gbps] | 175 |
| Firewall [Gbps] | 365 |
| RFC 3511,2544,2647,1242 Performance (Lab) | |
| Firewall 1518B UDP [Gbps] | 1,400 |
| Firewall Latency (avg) | 1.85μSec |
| VPN AES-GCM 1452B [Gbps] | 103 |
| Connections/sec | 1,250,000 |
| Concurrent connections (Base/Plus/Max) | 30M/48M/67M |
| HTTP/TLS Inspection Performance | |
| Threat Prevention 1.2 [Gbps] | 24.36 |
| Threat Prevention 2 web mix [Gbps] | 14.6 |
| IPS web mix [Gbps] | 19.3 |
Highlights
- CPU: 56 physical cores, total of 112 logical cores
- Storage: BASE x 1 SSD 960GB NVMe, PLUS x 2 SSD 960GB NVMe
Network Connectivity
- Integrated SD-WAN network optimization and resilience.
- Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)
- 802.3ad passive and active link aggregation.
- Layer 2 (transparent) and Layer 3 (routing) mode.
High Availability
- Active/Active L2, Active/Passive L2 and L3
- Session failover for routing change, device and link failure
- ClusterXL or VRRP
Power Requirements
- Single Power Supply rating AC: 1300W
- Maximum thermal output AC: 2934.4 BTU/hr.
Physical
- Enclosure: 2RU
- Dimensions (WxDxH): 17.25 x 24 x 3.5 in. (442 x 610 x 88mm)
- Weight: 41.1 lbs. (18.8 kg)
- Operating: 0° to 40°C, humidity 5% to 95%
- Storage: –20° to 70°C, humidity 5% to 95% at 60°C
- MTBF: > 10 years
Certifications
- Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
- Emissions: CE, FCC IC, VCCI, ASNZS ACMA
- Environmental: ROHS, REACH, WEEE, ISO14001
Ordering Quantum Force 29100 Security Gateway
The 29100 includes 2x 1/10 copper GbE management ports plus an additional 2x 1/10/25 SFP28 ports.
| 1/10 GbE Copper | 1/10 GbE Fiber | 10/25 GbE Fiber | 40/100 GbE Fiber | Memory | Redundant Power | Redundant Storage | LOM | |
|---|---|---|---|---|---|---|---|---|
| Base model | 2 | 8 | 2 | 0 | 128 GB | ● | ○ | ○ |
| Plus model | 2 | 16 | 6 | 0 | 192 GB | ● | ● | ● |
| Max capacity | 2 | 56 | 30 | 14 | 256 GB | ● | ● | ● |
| Maestro/MHS | 2 | 0 | 0 | 4 | 192 GB | ● | ● | ● |
The 29100 includes 2x 1/10 copper GbE management ports plus an additional 2x 1/10/25 SFP28 ports for synchronization when using the 29100 in a cluster. With the seven network I/O slots, modify the base or plus configuration to meet your networking requirements. The 40/100G ports enable firewall traffic acceleration at line-rate.
Subscription Services
| NGFW | NGTP | SNBT (SandBlast) | |
|---|---|---|---|
| Application Control | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering | √ | √ | |
| Anti-Bot | √ | √ | |
| Anti-Virus | √ | √ | |
| Anti-Spam | √ | √ | |
| DNS Security | √ | √ | |
| SandBlast Threat Emulation (sandboxing) | √ | ||
| SandBlast Threat Extraction (CDR) | √ | ||
| Zero Phishing | √ | ||
| IoT Network Protection | optional | optional | optional |
| SD-WAN Network Optimization | optional | optional | optional |