Quantum Force 9200 Datasheet

Quantum Force 9200

Security Gateway

Top Security Effectiveness

Check Point #1 for the 2nd year in a row

Unified Management and Ops Efficiency

Increase protection and reduce TCO with Check Point #1 for the 2nd year in a row with 99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024).

Named a Leader by Top Analyst Firms

Forrester Wave™ for Zero Trust Platform

Increase protection and reduce TCO with a consolidated security architecture. Forrester Wave™ for Zero Trust Platform Providers, Q3 2023 Gartner® Firewall Magic Quadrant™ (2022).

AI/ML powered Threat Prevention

Protect networks and users from zero-days, phishing, DNS, and ransomware attacks.

Quantum 9200 firewalls deliver up to 60 Gbps of firewall and 8 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency, and space savings in a modular 1 RU platform.

Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.

Fastest AI-Powered Threat Prevention

Network Resilience & Power Efficiency

Unified Security Management

9200 Performance Highlights

AI-Powered advanced security and uncompromising performance, built for perimeter applications

Quantum Force 9200 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. One network I/O slot can be configured to fit your network with a high port density of up to 8x1/10G or 4x10/25G with acceleration.

Comprehensive and Industry-Leading Security

Highest Performance Threat Prevention

With the 9200, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 8 Gbps of threat prevention throughput or up to 80 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.

Modular, High Port Density 1RU Chassis

The 9200 offers the flexibility to fit your changing network requirements. Populate the network I/O slot with your choice of network cards: 8x1/10G, 4x10/25G.

Power Efficient, Resilient Design

With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors.

Flexible, High Performance HTTPS Inspection

While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Businesses need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.

Specifications

Enterprise Test Conditions1
Threat Prevention2.5[Gbps] 8
NGFW3[Gbps] 19
IPS[Gbps] 31
Firewall[Gbps] 60
RFC 3511,2544,2647,1242 Performance(Lab)
Firewall 1518B UDP[Gbps] 80
Firewall Latency(avg) 9μSec
VPN AES-GCM 1452B[Gbps] 28.6
Connections/sec 250,000
Concurrent connections(Base/Plus/Max) 2.75M/7.27M/16.2
TLS Inspection Performance
Threat Prevention1.2[Gbps] 3.6
Threat Prevention2web mix4[Gbps] 2
IPS web mix4[Gbps] 2.9

1 Enterprise traffic profile measured with maximum memory
2 Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast (Incl. DNS Security & Zero Phishing) with logging enabled
3 Includes Firewall, App Control and IPS with logging enabled

Additional Features

Network

Network Connectivity

High Availability

IPv6

Physical

Environmental Conditions

Certifications

Maximum Virtual System Capacity

On-Board1RJ45 1/10GbE fiber 10/25GbE Fiber Memory RedundantPower RedundantStorage LOM
Base model 10 0 0 16GB ● ○ ○
Plus model 10 8 0 32GB ● ○ ●
Max capacity 10 8 4 64GB ● ○ ●
Maestro/MHS 10 0 4 32GB ● ○ ●

The 9200 includes 1x RJ45 (1 GbE copper) management port plus an additional 1x RJ45 (1 GbE copper) port for synchronization when using the 9200 PLUS in a cluster. With one network I/O slot, modify the base or plus configuration to meet your networking requirements.

SECURITY APPLIANCE²

SECURITY APPLIANCE¹ SKU
9200 Base configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,8x1/10GbE ports,16GB RAM,1x480GB SSD SATA,2xAC PSUs,fixed rails,SandBlast(SNBT)Security Subscription Package for1Year CPAP-SG9200-SNBT
9200 Plus configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,8x1/10GbE SFP+ports,32GB RAM,1x480GB SSD NVMe,2xAC PSUs,Lights-Out Management(LOM),fixed rails,SandBlast(SNBT)Security Subscription Package for1Year CPAP-SG9200-PLUS-SNBT
Quantum Force9200 Maestro/MHS HyperScale configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board8xRJ45ports,4x10/25GbE SFP+ports,32GB RAM,1x480GB SSD SATA,2xAC PSUs,Lights-Out Management(LOM),2x25GbE DAC3M,fixed rails,SandBlast(SNBT)Security Subscription Package for1Year CPAP-SG9200-PLUS-MHS-SNBT
Quantum Force9200 Maestro/MHS HyperScale configuration with1MHO-140 orchestrator and2Quantum Force9200 appliances,each appliance includes1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board8xRJ45ports,4x10/25GbE SFP+ports,32GB RAM,1x480GB SSD SATA,2xAC PSUs,Lights-Out Management(LOM),2x25GbE DAC3M,fixed rails,SandBlast(SNBT)Security Subscription Package for1Year CPAP-MHS-9202-PLUS-SNBT
Quantum Force9200 Maestro/MHS HyperScale configuration with1MHO-140 orchestrator and3Quantum Force9200 appliances,each appliance includes1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board8xRJ45ports,4x10/25GbE SFP+ports,32GB RAM,1x480GB SSD SATA,2xAC PSUs,Lights-Out Management(LOM),2x25GbE DAC3M,fixed rails,SandBlast(SNBT)Security Subscription Package for1Year CPAP-MHS-9203-PLUS-SNBT

Subscription Services

NGFW NGTP SNBT(SandBlast)
Application Control √ √ √
IPS √ √ √
URL Filtering √ √
Anti-Bot √ √
Anti-Virus √ √
Anti-Spam √ √
DNS Security √ √
SandBlast Threat Emulation(sandboxing) √
SandBlast Threat Extraction(CDR) √
Zero Phishing √
IoT Network Protection optional optional optional
SD-WAN Network Optimization optional optional optional