Quantum Force 9100 Datasheet
Top Security Effectiveness
Check Point #1 for the 2nd year in a row
Unified Management and Ops Efficiency
Increase protection and reduce TCO with a consolidated security architecture.
Check Point #1 for the 2nd year in a row
99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024).
Named a Leader by Top Analyst Firms
- Forrester Wave™ for Zero Trust Platform Providers, Q3 2023
- Gartner® Firewall Magic Quadrant™ (2022)
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks.
AI/ML powered Threat Prevention
Quantum 9100 firewalls deliver up to 55 Gbps of firewall and 6.5 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency, and space savings in a modular 1 RU platform.
Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.
Fastest AI-Powered Threat Prevention
Network Resilience & Power Efficiency
9100 Performance Highlights
AI-Powered advanced security and uncompromising performance built for perimeter applications. Quantum Force 9100 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. One network I/O slot can be configured to fit your network with a high port density of up to 8x1/10G or 4x10/25G with acceleration.
Comprehensive and Industry-Leading Security
- Next Generation Firewall
- Site-to-Site and Remote Access VPN
- Application and Web Filtering
- Intrusion Prevention
- Antivirus and Anti-Bot
- Advanced DNS Security
- Sandboxing with file sanitization
- Zero-phishing (no agent required)
Highest Performance Threat Prevention
With the 9100, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 6.5 Gbps of threat prevention throughput or up to 80 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.
Modular, High Port Density 1RU Chassis
The 9100 offers the flexibility to fit your chang-
Miercom
Check Point is #1 in Miercom 2024 Security Benchmark Highest Threat Prevention Scores for 2nd year in a row.
Power Efficient, Resilient Design
With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors.
Flexible, High Performance HTTPS Inspection
While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Businesses need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.
Specifications
Performance
| Enterprise Test Conditions1 | |
|---|---|
| Threat Prevention2.5[Gbps] | 6.5 |
| NGFW3[Gbps] | 18.6 |
| IPS[Gbps] | 25.7 |
| Firewall[Gbps] | 55 |
| RFC 3511,2544,2647,1242 Performance(Lab) | |
| Firewall1518B UDP[Gbps] | 80 |
| Firewall Latency(avg) | 10μSec |
| VPN AES-GCM1452B[Gbps] | 22.1 |
| Connections/sec | 190,000 |
| Concurrent connections(Base/Plus/Max) | 2.75/7.27M/16.2M |
| HTTP/TLS Inspection Performance | |
| Threat Prevention1.2[Gbps] | 2.96 |
| Threat Prevention2web mix4[Gbps] | 1.6 |
| IPS web mix4[Gbps] | 2.3 |
1 Enterprise traffic profile measured with maximum memory 2 Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast (Incl. DNS Security & Zero Phishing) with logging enabled
Additional Features
- CPU: 4 physical cores, total of 8 logical cores
- Storage: 1 SSD 480GB SATA
- 2x Internal AC power supply
- 16 to 64 GB memory options
- Lights-Out-Management card – optional (included in Plus package)
Network Expansion Slot Options
- 8 x 1/10GBASE-F SFP+ port card
Network Connectivity
- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
- Active/Active L2, Active/Passive L2 and L3
- Session failover for routing change, device and link failure
- ClusterXL or VRRP
IPv6
- NAT66, NAT64, NAT46
Power Requirements
- Power input: 100 to 240VAC (47-63Hz) 13A - Single Phase
- Power consumption avg/max: 84.4W /140.8W
Physical Specifications
- Enclosure: 1RU
- Dimensions: (WxDxH): 17.2 x 20 x 1.73 in.(438 x 508 x 44mm)
- Weight: (gross; Kg): 14.8
Environmental Conditions
- Operating: 0° to 40°C, humidity 5% to 95%
- Storing: –20° to 70°C, humidity 5% to 95% at 60°C
- MTBF: > 10 years
Certifications
- Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
- Emissions: CE, FCC IC, VCCI, ASNZS ACMA
- Environmental: ROHS, REACH, WEEE, ISO14001
Maximum Virtual System Capacity
| On-Board1RJ45 | 1/10GbE fiber | 10/25**GbE Fiber | Memory | RedundantPower | RedundantStorage | LOM | |
|---|---|---|---|---|---|---|---|
| Base model | 10 | 0 | 0 | 16GB | ● | ○ | ○ |
| Plus model | 10 | 8 | 0 | 32GB | ● | ○ | ● |
| Max capacity | 10 | 8 | 4 | 64GB | ● | ○ | ● |
| Maestro/MHS | 10 | 0 | 4 | 32GB | ● | ○ | ● |
The 9100 includes 1x RJ45 (1 GbE copper) management port plus an additional 1x RJ45 (1 GbE copper) port for synchronization when using the 9100 PLUS in a cluster. With one network I/O slot, modify the base or plus configuration to meet your networking requirements.
Available SKUs
| SECURITY APPLIANCE¹ | SKU |
|---|---|
| 9100 Base configuration: 1x RJ45(1 GbE Copper) management port & 1x RJ45(1 GbE Copper) sync port, on-board 8x RJ45 ports, 16GB RAM, 1x480GB SSD SATA, 2xAC PSUs, fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG9100-SNBT |
| 9100 Plus configuration: 1x RJ45(1 GbE Copper) management port & 1x RJ45(1 GbE Copper) sync port, on-board 8x RJ45 ports, 8x1/10GbE SFP+ ports, 32GB RAM, 1x480GB SSD SATA, 2xAC PSUs, Lights-Out Management (LOM), fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG9100-PLUS-SNBT |
| Quantum Force 9100 Maestro/MHS HyperScale configuration: 1x RJ45(1 GbE Copper) management port & 1x RJ45(1 GbE Copper) sync port, on-board 8x RJ45 ports, 4x10/25GbE SFP+ ports, 32GB RAM, 1x480GB SSD SATA, 2xAC PSUs, Lights-Out Management (LOM), 2x25GbE DAC3M, fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG9100-PLUS-MHS-SNBT |
| Next Generation Threat Prevention & SandBlast package for 1 year for Quantum Force 9100 appliance | CPSB-SNBT-9100-1Y |
| Next Generation Threat Prevention package for 1 year for Quantum Force 9100 appliance | CPSB-NGTP-9100-1Y |
| Next Generation Firewall Package for 1 year for Quantum Force 9100 appliance | CPSB-NGFW-9100-1Y |
Accessories
| INTERFACE CARDS & TRANSCEIVERS | SKU |
|---|---|
| 8 Port 1/10 G Base-F SFP+ interface card for 9000/19000/29000 appliances | CPAC-8-1/10F-D |
| SFP28 transceiver module for 25GbE fiber ports - short range(25GBASE-SR), MM Fiber, LC | CPAC-TR-25SR-D |
| SFP+ transceiver module for 10GbE fiber ports - short range(10GBASE-SR), MM Fiber, LC | CPAC-TR-10SR-D |
Subscription Services
| NGFW | NGTP | SNBT(SandBlast) | |
|---|---|---|---|
| Application Control | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering | √ | √ | |
| Anti-Bot | √ | √ | |
| Anti-Virus | √ | √ | |
| SandBlast Threat Emulation(sandboxing) | √ | ||
| Zero Phishing | √ |
The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years.