Quantum Force 19200

Quantum Force 19200 Security Gateway

Unified Management and Ops Efficiency

Increase protection and reduce TCO with a consolidated security architecture.

Top Security Effectiveness

YOU DESERVE THE BEST SECURITY Named a Leader by Top Analyst Firms Forrester Wave (\text{TM}) for Zero Trust Platform Providers, Q3 2023 Gartner (\text{R}) Firewall Magic Quadrant (\text{TM}) [2022]

AI/ML powered Threat Prevention

On-demand expansion, load balancing firewall clustering, and resilient access to mission-critical applications. Protect networks and users from zero-days phishing, DNS, and ransomware attacks. Quantum 19200 firewalls deliver up to 800 Gbps of firewall and 44 Gbps of threat prevention throughput with integrated AI/ML security power efficiency and space savings in a modular 2 RU platform.

Fastest AI-Powered Threat Prevention

Network Resilience & Power Efficiency

19200 Performance Highlights

Firewall Next Gen Firewall Threat Prevention
245 Gbps 100 Gbps 44 Gbps

AI-Powered advanced security and uncompromising performance, built for data centers. Quantum Force 19200 data center firewalls deliver high threat prevention performance in a small 2 RU form factor to protect employees, networks, and data from cyber-theft. Four network I/O slots can be configured to fit your network with a high port density of up to 32x 1/10GbE, 18x 10/25 GbE, or 8x 40/100GbE with acceleration.

Comprehensive and Industry-Leading Security

Highest Performance Threat Prevention

With the 19200, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 44 Gbps of threat prevention throughput or up to 800 Gbps of UDP 1518B firewall throughput with a single 2RU firewall.

Miercom Enterprise & Hybrid Mesh Firewall Benchmark 2025 Check Point ranks #1 again in threat prevention with 99.9% block rate.

Power Efficient, Resilient Design

With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half compared with similar firewalls from other vendors. Dual, redundant hot-swap power supplies and dual 960 GB RAID-1 NVMe storage provide complete redundancy.

Flexible, High Performance HTTPS Inspection

While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Enterprises need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive industry traffic, such as Health Care and Financial that have special regulatory requirements. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.


Specifications

Enterprise Test Conditions

Threat Prevention [Gbps]

Enterprise Test Conditions
Threat Prevention25[Gbps] 44
NGFW3[Gbps] 100
IPS[Gbps] 145
Firewall[Gbps] 245
RFC 3511,2544,2647,1242 Performance(Lab)
Firewall 1518B UDP[Gbps] 800
Firewall Latency(avg) 1.85μSec
VPN AES-GCM 1452B[Gbps] 86
Connections/sec 1,000,000
Concurrent connections(Base/Plus/Max) 21M/31M/31M
HTTP/TLS Inspection Performance
Threat Prevention1,2[Gbps] 18.6
Threat Prevention2web mix4[Gbps] 11.2
IPS web mix4[Gbps] 15.7

1 Enterprise traffic profile measured with maximum memory 2 Includes Firewall, App Control, URLF, IPS, Anti Malware (Bot, Virus & Spam), DNS Security, Zero-Phishing and SandBlast Threat Emulation & Extraction with logging enabled

Additional Features

Network Expansion Slot Options


Network Connectivity

High Availability

Power Requirements

Physical

Environmental Conditions

Certifications

Maximum Virtual System Capacity

1/10 GbE Copper 1/10 GbE Fiber 10/25 GbE Fiber 40/100* GbE Fiber Memory Redundant Power Redundant Storage LOM
Base model 2 8 2 0 96 GB ● ○ ○
Plus model 2 8 6 0 128 GB ● ● ●
Max capacity 2 32 18 8 128 GB ● ● ●
Maestro/MHS 2 0 0 4 128 GB ● ● ●

The 19200 includes 2x 1/10 copper GbE management ports plus an additional 2x 1/10/25 SFP28 ports for synchronization when using the 19200 in a cluster. With the four network I/O slots, modify the base or plus configuration to meet your networking requirements. The 40/100G ports enable firewall traffic acceleration at line-rate.


SECURITY APPLIANCE

SECURITY APPLIANCE¹ SKU
19200 Base configuration CPAP-SG19200-SNBT
19200 Plus configuration CPAP-SG19200-PLUS-SNBT
Quantum Force 19200 Maestro/MHS HyperScale configuration CPAP-SG19200-PLUS-MHS-SNBT
Quantum Force 19200 Maestro/MHS HyperScale with orchestrator CPAP-MHS-19202-PLUS-SNBT
Quantum Force 19200 Maestro/MHS HyperScale with 3 appliances CPAP-MHS-19203-PLUS-SNBT
Next Generation Threat Prevention & SandBlast package CPSB-SNBT-19200-1Y
Next Generation Threat Prevention package CPSB-NGTP-19200-1Y
Next Generation Firewall Package CPSB-NGFW-19200-1Y
Quantum IoT Network Protection CPSB-IOTP-19200-1Y
Quantum SD-WAN subscription CPSB-SDWAN-19200-1Y
Data Loss Prevention (DLP) blade CPSB-DLP-19200-1Y

1 The Base package includes 2 virtual systems (VS)—one management VS and one production/data VS which are not additive or counted when adding additional VS licenses. The Plus model has 5 VS licenses which are additive when adding additional VS licenses.


ACCESSORIES

INTERFACE CARDS SKU
8 Port 1/10 G Base-F SFP+ interface card CPAC-8-1/10F-D
4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card CPAC-4-10/25F-D
4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card with acceleration CPAC-4-10/25F-DA
2 Port 10/25/40/100G Base-F QSFP28 interface card with acceleration CPAC-2-40/100F-D
TRANSCEIVERS SKU
Compatible with the CPAC-8-1/10F-D and CPAC-4-10/25F-D
SFP transceiver module for 1000 BASE fiber ports - long range CPAC-TR-1LX-D
SFP transceiver module for 1000 BASE fiber ports - short range CPAC-TR-1SX-D
SFP transceiver to 1000 BASE-T RJ45(Copper) CPAC-TR-1T-D
SFP+ transceiver module for 10GbE fiber ports - long range CPAC-TR-10LR-D
SFP+ transceiver module for 10GbE fiber ports - short range CPAC-TR-10SR-D
SFP+ transceiver module for 10GbE fiber ports - for links up to 40km CPAC-TR-10ER-D
SFP+ transceiver 10GBASE-T RJ45(Copper) CPAC-TR-10T-D
Compatible with the CPAC-4-10/25F-D
SFP28 transceiver module for 25GbE fiber ports - short range CPAC-TR-25SR-D
Compatible with the CPAC-2-40/100F-D
SFP+ transceiver module for 10GbE fiber ports - long range with QSFP28 Adapter CPAC-TR-10LR-D-ADP
SFP+ transceiver module for 10GbE fiber ports - short range with QSFP28 Adapter CPAC-TR-10SR-D-ADP
SFP+ transceiver module for 10GbE fiber ports - for links up to 40km with QSFP28 Adapter CPAC-TR-10ER-D-ADP
SFP+ transceiver 10GBASE-T RJ45(Copper) with QSFP28 Adapter CPAC-TR-10T-D-ADP
SFP28 transceiver module for 25GbE fiber ports - short range with QSFP28 Adapter CPAC-TR-25SR-D-ADP
QSFP+ transceiver for 40GbE fiber Ports - short range CPAC-TR-40SR-QSFP-100m-D
QSFP+ transceiver module for 40GbE fiber ports - short range CPAC-TR-40SR-QSFP-300m-D
QSFP Bi-directional transceiver for 40GbE fiber ports - short range CPAC-TR-40SR-QSFP-Bidi-D
QSFP+ transceiver module for 40GbE fiber ports for links up to 75m CPAC-TR-40SWDM4
QSFP+ transceiver module for 40GbE fiber ports - long range CPAC-TR-40LR-QSFP-10Km-D
QSFP28 transceiver module for 100GbE fiber ports - long range CPAC-TR-100LR-D
QSFP28 transceiver module for 100GbE fiber ports - short range CPAC-TR-100SR-D
QSFP28 Bi-directional transceiver for 100GbE fiber Ports - short range CPAC-TR-100SR-BidiD
QSFP28 transceiver module for 100GbE fiber ports - for links up to 75m CPAC-TR-100SWDM4-D
QSFP28 transceiver module for 100GbE fiber ports - for links up to 2km CPAC-TR-100CWDM4-D
QSFP28 transceiver module for 100GbE fiber ports - for links up to 40km CPAC-TR-100ERL4

DIRECT ATTACH CABLES(DAC) SKU
10GbE Direct Attach Cable(DAC), 3m length CPAC-DAC-10G-3M-D
25GbE Direct Attach Cable(DAC), 3m length CPAC-DAC-25G-3M-D
40GbE Direct Attach Cable(DAC), 3m length CPAC-DAC-40G-3M-D
100GbE Direct Attach Cable(DAC), 3m length CPAC-DAC-100G-3M-D

COMPATIBLE WITH SYNC PORT INTERFACE

COMPATIBLE WITH SYNC PORT INTERFACE SKU
SFP transceiver module for 1000 BASE fiber ports - short range CPAC-TR-1SX-D
SFP transceiver module for 1000 BASE fiber ports - long range CPAC-TR-1LX-D
SFP transceiver to 1000 BASE-T RJ45(Copper) CPAC-TR-1T-D
SFP+ transceiver module for 10GbE fiber ports - short range CPAC-TR-10SR-D
SFP+ transceiver module for 10GbE fiber ports - long range CPAC-TR-10LR-D
SFP+ transceiver 10GBASE-T RJ45(Copper) CPAC-TR-10T-D
10GbE Direct Attach Cable(DAC), 3m length CPAC-DAC-10G-3M-D
SFP28 transceiver module for 25GbE fiber ports - short range CPAC-TR-25SR-D
25GbE Direct Attach Cable(DAC), 3m length CPAC-DAC-25G-3M-D
MEMORY SKU
32GB Memory upgrade kit for 19000 appliances CPAC-RAM32GB-19000
64GB Memory upgrade kit for 19000 appliances CPAC-RAM64GB-19000
SPARES AND MISCELLANEOUS SKU
960GB SSD for 19000/29000 security gateways CPAC-SSD-960G-D
Replacement AC Power Supply for 19000 appliances CPAC-PSU-AC-19000
Dual DC Power Supply for 19000/29000 series appliances CPAC-PSU-DUAL-DC-19000/29000
Lights-Out Management Module for 19000/29000 appliances CPAC-NLOM-D
Slide rails for 19000/29000 Security Gateways(22”-32”) CPAC-RAIL-L
Telescopic slide rails for 19000/29000 Security Gateways(24”-36”) CPAC-RAIL-EXT-L
Blank NIC cover for 19000/29000 appliances CPAC-NIC-COVER-D

SUBSCRIPTION SERVICES

NGFW NGTP SNBT(SandBlast)
Application Control √ √ √
IPS √ √ √
URL Filtering √ √
Anti-Bot √ √
Anti-Virus √ √
Anti-Spam √ √
DNS Security √ √
SandBlast Threat Emulation(sandboxing) √
SandBlast Threat Extraction(CDR) √
Zero Phishing √
IoT Network Protection optional optional optional
SD-WAN Network Optimization optional optional optional

Worldwide Headquarters 5 Shlomo Kaplan Street, Tel Aviv 6789159, Israel | Tel: +972-3-753-4599 U.S. Headquarters 100 Oracle Parkway, Suite 800 Redwood City, CA 94065 | Tel: 1-800-429-4391 www.checkpoint.com

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years.