Quantum Force 29100 Datasheet

Quantum Force 29100 Security Gateway

Unified Management and Ops Efficiency

Increase protection and reduce TCO with a consolidated security architecture.

YOU DESERVE THE BEST SECURITY

Forrester Wave $ ^{\mathrm{TM}} $ for Zero Trust Platform Providers, Q3 2023 Gartner $ ^{\mathrm{R}} $ Firewall Magic Quadrant $ ^{\mathrm{TM}} $ [2022]

AI/ML powered Threat Prevention

Protect networks and users from zero-days, phishing, DNS, and ransomware attacks.

Quantum 29100 firewalls deliver up to 1.4 Tbps of firewall and 60 Gbps of threat prevention throughput with integrated AI ML security power efficiency and space savings in a modular 2 RU platform.

Increase the efficiency of your datacenter's security operations. Prevent even the most advanced attacks before they can infect their target, and manage your on-premises and cloud firewalls from a unified platform.

Fastest AI-Powered Threat Prevention

Network Resilience & Power Efficiency

29100 Performance Highlights

Firewall Next Gen Firewall Threat Prevention
365 Gbps 130 Gbps 60 Gbps

AI-Powered advanced security and uncompromising performance, built for data centers.

Check Point Quantum Force 29100 data center firewalls deliver high threat prevention performance in a small 2 RU form factor to protect employees, networks, and data from cyber-theft. Seven network I/O slots can be configured to fit your network with a high port density of up to 56x1/10GbE, 28x10/25GbE or 14x40/100GbE with acceleration.

Comprehensive and Industry-Leading Security

With the 29100, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 60 Gbps of threat prevention throughput or up to 1.4 Tbps of firewall throughput (UDP 1518B) with a single 2RU firewall.

Highest Performance Threat Prevention

With the 29100, organizations can inspect:

Miercom Check Point is #1 in Miercom 2024 Security Benchmark Highest Threat Prevention Scores for 2nd year in a row.

Power Efficient, Resilient Design

With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors. Dual, redundant hot-swap power supplies and dual 960 GB RAID-1 NVMe storage provide complete redundancy.

Flexible, High Performance HTTPS Inspection

While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Enterprises need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive industry traffic, such as Health Care and Financial that have special regulatory requirements. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.


Specifications

Performance

Enterprise Test Conditions1
Threat Prevention25[Gbps] 60
NGFW3[Gbps] 130
IPS[Gbps] 175
Firewall[Gbps] 365
RFC 3511,2544,2647,1242 Performance(Lab)
Firewall 1518B UDP[Gbps] 1,400
Firewall Latency(avg) 1.85μSec
VPN AES-GCM 1452B[Gbps] 103
Connections/sec 1,250,000
Concurrent connections(Base/Plus/Max) 30M/48M/67M
HTTP/TLS Inspection Performance
Threat Prevention1.2[Gbps] 24.36
Threat Prevention2web mix4[Gbps] 14.6
IPS web mix4[Gbps] 19.3

1 Enterprise traffic profile measured with maximum memory

2 Includes Firewall, App Control, URLF, IPS, Anti Malware (Bot, Virus & Spam), DNS Security, Zero-Phishing and SandBlast Threat Emulation & Extraction with logging enabled.

Additional Features

Highlights

Includes Firewall, App Control, URLF, IPS, Anti Malware (Bot, Virus & Spam), DNS Security, Zero-Phishing and SandBlast Threat Emulation & Extraction with logging enabled.


Network

Network Connectivity

High Availability

Physical

Environmental Conditions

Certifications

Ordering Quantum Force 29100 Security Gateway

The 29100 includes 2x 1/10 copper GbE management ports plus an additional 2x 1/10/25 SFP28 ports.

1/10 GbE Copper 1/10 GbE Fiber 10/25 GbE Fiber 40/100* GbE Fiber Memory Redundant Power Redundant Storage LOM
Base model 2 8 2 0 128 GB ● ○ ○
Plus model 2 16 6 0 192 GB ● ● ●
Max capacity 2 56 30 14 256 GB ● ● ●
Maestro/MHS 2 0 0 4 192 GB ● ● ●

The 29100 includes 2x 1/10 copper GbE management ports plus an additional 2x 1/10/25 SFP28 ports for synchronization when using the 29100 in a cluster. With the seven network I/O slots, modify the base or plus configuration to meet your networking requirements. The 40/100G ports enable firewall traffic acceleration at line-rate.


SECURITY APPLIANCE¹

SKU
29100 Base configuration:2x1/10GbE copper management ports,2x,1/10/25GbE SFP28 fiber sync ports,8x1/10GbE SFP+ports,128GB RAM,1x960GB NVMe,2x10GbE Short Range Transceivers,2xAC PSUs,telescopic rails,SandBlast(SNBT)Security Subscription Package for1Year
29100 Plus configuration:2x1/10GbE copper management ports,2x1/10/25GbE SFP28 fiber sync ports,16x1/10GbE SFP+ports,4x10/25GbE SFP28 fiber ports,192GB RAM,2x960GBNVMe,2x10GbE Short Range Transceivers,2xACPSUs,Lights-Out Management(LOM),telescopic rails,5Virtual Systems,SandBlast(SNBT)Security SubscriptionPackagefor1Year
Quantum Force29100Maestro/MHS HyperScaleconfiguration:2x2x40/100GbEQSFP fiber ports,4x100GbEDAC3mtransceivers,128GBRAM,2x960GBNVMe,2x10GbEShortRangeTransceivers,2xACPSUs,Lights-OutManagement(LOM),Slidingrails,withSandBlastsubscriptionpackagefor1year
Next Generation Threat Prevention&SandBlast package for 1 year for Quantum Force 29100 appliance
Next Generation Threat Prevention package for 1 year for Quantum Force 29100 appliance
Next Generation Firewall Package for 1 year for Quantum Force 29100 appliance
Quantum IoT Network Protection for 1 year for Quantum Force 29100 appliances
Quantum SD-WAN subscription for 1 year for Quantum Force 29100 appliances
Data Loss Prevention(DLP) blade for 1 year for Quantum Force 29100 appliances

1 The Base package includes 2 virtual systems (VS)—one management VS and one production/data VS which are not additive or counted when adding additional VS licenses. Plus model 5 VS licenses which are additive when adding additional VS licenses.


ACCESSORIES

INTERFACE CARDS SKU
8 Port 1/10 G Base-F SFP+ interface card for 19000/29000 appliances CPAC-8-1/10F-D
4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card for 9000/19000/29000 appliances CPAC-4-10/25F-D
4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card for 9000/19000/29000 appliances with acceleration CPAC-4-10/25F-DA
2 Port 10/25/40/100G Base-F QSFP28 interface card for 19000/29000 appliances with acceleration CPAC-2-40/100F-D

TRANSCEIVERS SKU
Compatible with the CPAC-8-1/10F-D and CPAC-4-10/25F-D, Interface Cards
SFP transceiver module for 1000 BASE fiber ports - long range (1000BASE-LX), SM Fiber, LC CPAC-TR-1LX-D
SFP transceiver module for 1000 BASE fiber ports - short range (1000BASE-SX), MM Fiber, LC CPAC-TR-1SX-D
SFP transceiver to 1000 BASE-T RJ45(Copper), CU, RJ45 CPAC-TR-1T-D
SFP+ transceiver module for 10GbE fiber ports - long range(10GBASE-LR), SM Fiber, LC CPAC-TR-10LR-D
SFP+ transceiver module for 10GbE fiber ports - short range(10GBASE-SR), MM Fiber, LC CPAC-TR-10SR-D
SFP+ transceiver module for 10GbE fiber ports - for links up to 40km(10GBASE-ER), SM Fiber, LC CPAC-TR-10ER-D
SFP+ transceiver 10GBASE-T RJ45(Copper)-for links up to 30m over CAT6a/CAT7, CU, RJ45 CPAC-TR-10T-D
Compatible with the CPAC-4-10/25F-D Interface Cards
SFP28 transceiver module for 25GBE fiber ports - short range(25GBASE-SR), MM Fiber, LC CPAC-TR-25SR-D
Compatible with the CPAC-2-40/100F-D Interface Card
SFP+ transceiver module for 10GbE fiber ports - long range(10GBASE-LR), SM Fiber, LC with QSFP28 Adapter CPAC-TR-10LR-D-ADP
SFP+ transceiver module for 10GbE fiber ports - short range(10GBASE-SR)MM Fiber, LC with QSFP28 Adapter CPAC-TR-10SR-D-ADP
SFP+ transceiver module for 10GbE fiber ports - for links up to 40km(10GBASE-ER)SM Fiber, LC with QSFP28 Adapter CPAC-TR-10ER-D-ADP
SFP+ transceiver 10GBASE-T RJ45(Copper)-for links up to 30m over CAT6a/CAT7 with QSFP28 Adapter CPAC-TR-10T-D-ADP
SFP28 transceiver module for 25GbE fiber ports - short range(25GBASE-SR)MM Fiber, LC with QSFP28 Adapter CPAC-TR-25SR-D-ADP
QSFP+ transceiver for 40GbE fiber Ports - short range(40GBASE-SR4), MM Fiber, MPO-12 CPAC-TR-40SR-QSFP-100m-D
QSFP+ transceiver module for 40GbE fiber ports - short range(40GBASE-eSR4), MM Fiber, MPO-12 CPAC-TR-40SR-QSFP-300m-D
QSFP Bi-directional transceiver for 40GbE fiber ports - short range(40GBASE-SR-BD), MM Fiber, LC CPAC-TR-40SR-QSFP-BiDi-D
QSFP+ transceiver module for 40GbE fiber ports for links up to 75m(40GBASE-SWDM4)MM Fiber, LS CPAC-TR-40SWDM4
QSFP+ transceiver module for 40GbE fiber ports - long range(40GBASE-LRS), SM Fiber, LC CPAC-TR-40LR-QSFP-10Km-D
QSFP28 transceiver module for 100GBE fiber ports - long range(100GBASE-LR4), SM Fiber, LC CPAC-TR-100LR-D
QSFP28 transceiver module for 100GBE fiber ports - short range(100GBASE-SR4), MM Fiber, MPO-12 CPAC-TR-100SR-D
QSFP28 Bi-directional transceiver for 100GbE fiber Ports - short range(100GBase-SR1.2BiDi), MM Fiber, LC CPAC-TR-100SR-BiDi
QSFP28 transceiver module for 100GbE fiber ports - for links up to 75m(100GBASE-SWDM4), MM Fiber, LC CPAC-TR-100SWDM4-D
QSFP28 transceiver module for 100GbE fiber ports - for links up to 2km(100GBASE-CWDM4), SM Fiber, LC CPAC-TR-100CWDM4-D
QSFP28 transceiver module for 100GbE fiber ports,- for links up to 40km(100GBASE-ER4), SM Fiber, LC CPAC-TR-100ERL4

COMPATIBLE WITH SYNC PORT INTERFACE SKU
SFP transceiver module for 1000 BASE fiber ports - short range (1000BASE-SX), MM Fiber, LC CPAC-TR-1SX-D
SFP transceiver module for 1000 BASE fiber ports - long range(1000BASE-LX),MM Fiber,LC CPAC-TR-1LX-D
SFP transceiver to 1000 BASE-T RJ45(Copper),CU,RJ45 CPAC-TR-1T-D
SFP+ transceiver module for 10GbE fiber ports -short range(10GBASE-SR)MM Fiber,LC CPAC-TR-10SR-D
SFP+ transceiver module for 10GbE fiber ports -long range(10GBASE-LR),SM Fiber,LC CPAC-TR-10LR-D
SFP+ transceiver 10GBASE-T RJ45(Copper)-for links up to30m overCAT6a/CAT7 CPAC-TR-10T-D
10GbE Direct Attach Cable(DAC),3m length CPAC-DAC-10G-3M-D
SFP28 transceiver module for 25GbE fiber ports -short range(25GBASE-SR)MM Fiber,LC CPAC-TR-25SR-D
25GbE Direct Attach Cable(DAC),3m length CPAC-DAC-25G-3M-D
MEMORY SKU
64GB Memory upgrade kit for 29000 appliances CPAC-RAM64GB-29000
128GB Memory upgrade kit for 29000 appliances CPAC-RAM128GB-29000
SPARES AND MISCELLANEOUS SKU
960GB SSD for 19000/29000 security gateways CPAC-SSD-960G-D
Replacement AC Power Supply for 19000 appliances CPAC-PSU-AC-19000
Dual DC Power Supply for 19000/29000 series appliances CPAC-PSU-DUAL-DC-19000/29000
Lights-Out Management Module for 19000/29000 appliances CPAC-NLOM-D
Slide rails for 19000/29000 Security Gateways(22"-32") CPAC-RAIL-L
Telescopic slide rails for 19000/29000 Security Gateways(24"-36") CPAC-RAIL-EXT-L
Blank NIC cover for 19000/29000 appliances CPAC-NIC-COVER-D

SUBSCRIPTION SERVICES

NGFW NGTP SNBT(SandBlast)
Application Control √ √ √
IPS √ √ √
URL Filtering √ √
Anti-Bot √ √
Anti-Virus √ √
Anti-Spam √ √
DNS Security √ √
SandBlast Threat Emulation(sandboxing) √
SandBlast Threat Extraction(CDR) √
Zero Phishing √
IoT Network Protection optional optional optional
SD-WAN Network Optimization optional optional optional

Worldwide Headquarters 5 Shlomo Kaplan Street, Tel Aviv 6789159, Israel | Tel: +972-3-753-4599 U.S. Headquarters 100 Oracle Parkway, Suite 800 Redwood City, CA 94065 | Tel: 1-800-429-4391 www.checkpoint.com

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years.