# Quantum Force 9200

## Security Gateway

### Top Security Effectiveness
Check Point #1 for the 2nd year in a row

### Unified Management and Ops Efficiency
Increase protection and reduce TCO with Check Point #1 for the 2nd year in a row with 99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024).

### Named a Leader by Top Analyst Firms
Forrester Wave™ for Zero Trust Platform

Increase protection and reduce TCO with a consolidated security architecture. Forrester Wave™ for Zero Trust Platform Providers, Q3 2023 Gartner® Firewall Magic Quadrant™ (2022).

### AI/ML powered Threat Prevention
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks.

Quantum 9200 firewalls deliver up to 60 Gbps of firewall and 8 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency, and space savings in a modular 1 RU platform.

Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.

### Fastest AI-Powered Threat Prevention

### Network Resilience & Power Efficiency

### Unified Security Management

## 9200 Performance Highlights
### AI-Powered advanced security and uncompromising performance, built for perimeter applications
Quantum Force 9200 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. One network I/O slot can be configured to fit your network with a high port density of up to 8x1/10G or 4x10/25G with acceleration.

### Comprehensive and Industry-Leading Security
- Site-to-Site and Remote Access VPN  
- Application and Web Filtering  
- Intrusion Prevention  
- Advanced DNS Security  
- Antivirus and Anti-Bot  
- Sandboxing with file sanitization  
- Zero-phishing (no agent required)

### Highest Performance Threat Prevention
With the 9200, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 8 Gbps of threat prevention throughput or up to 80 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.

### Modular, High Port Density 1RU Chassis
The 9200 offers the flexibility to fit your changing network requirements. Populate the network I/O slot with your choice of network cards: 8x1/10G, 4x10/25G.

### Power Efficient, Resilient Design
With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors.

### Flexible, High Performance HTTPS Inspection
While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Businesses need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.

## Specifications

| Enterprise Test Conditions1  |  |
| --- | --- |
| Threat Prevention2.5[Gbps] | 8 |
| NGFW3[Gbps] | 19 |
| IPS[Gbps] | 31 |
| Firewall[Gbps] | 60 |
| RFC 3511,2544,2647,1242 Performance(Lab) |  |
| Firewall 1518B UDP[Gbps] | 80 |
| Firewall Latency(avg) | 9μSec |
| VPN AES-GCM 1452B[Gbps] | 28.6 |
| Connections/sec | 250,000 |
| Concurrent connections(Base/Plus/Max) | 2.75M/7.27M/16.2 |
| TLS Inspection Performance |  |
| Threat Prevention1.2[Gbps] | 3.6 |
| Threat Prevention2web mix4[Gbps] | 2 |
| IPS web mix4[Gbps] | 2.9 |

1 Enterprise traffic profile measured with maximum memory  
2 Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast (Incl. DNS Security & Zero Phishing) with logging enabled  
3 Includes Firewall, App Control and IPS with logging enabled

### Additional Features

- CPU: 4 physical cores, total of 8 logical cores  
- Storage: 1 SSD 480GB SATA  
- 2x Internal AC power supply  
- 16 to 64 GB memory options  
- Lights-Out-Management card – optional (included in Plus package)  
- 8 x 1/10GBASE-F SFP+ port card  
- 4 x 10/25GBASE-F SFP28 port card

## Network
### Network Connectivity
- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode

### High Availability
- Active/Active L2, Active/Passive L2 and L3
- Session failover for routing change, device and link failure
- ClusterXL or VRRP

### IPv6
- NAT66, NAT64, NAT46
- CoreXL, SecureXL, HA with VRRPv3
- Power input: 100 to 240VAC (47-63Hz)
- Power consumption avg/max: 84.4W/140.8W

### Physical
- Dimensions: (WxDxH): 17.2 x 20 x 1.73 in.(438 x 508 x 44mm)
- Weight: (gross; Kg): 14.8

### Environmental Conditions
- Operating: 0° to 40°C, humidity 5% to 95%
- Storing: –20° to 70°C, humidity 5% to 95% at 60°C
- MTBF: > 10 years

## Certifications
- Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
- Emissions: CE, FCC IC, VCCI, ASNZS ACMA
- Environmental: ROHS, REACH, WEEE, ISO14001

## Maximum Virtual System Capacity
|  | On-Board1RJ45 | 1/10GbE fiber | 10/25GbE Fiber | Memory | RedundantPower | RedundantStorage | LOM |
| --- | --- | --- | --- | --- | --- | --- | --- |
| Base model | 10 | 0 | 0 | 16GB | ● | ○ | ○ |
| Plus model | 10 | 8 | 0 | 32GB | ● | ○ | ● |
| Max capacity | 10 | 8 | 4 | 64GB | ● | ○ | ● |
| Maestro/MHS | 10 | 0 | 4 | 32GB | ● | ○ | ● |

The 9200 includes 1x RJ45 (1 GbE copper) management port plus an additional 1x RJ45 (1 GbE copper) port for synchronization when using the 9200 PLUS in a cluster. With one network I/O slot, modify the base or plus configuration to meet your networking requirements.

## SECURITY APPLIANCE²
| SECURITY APPLIANCE¹ | SKU |
| --- | --- |
| 9200 Base configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,8x1/10GbE ports,16GB RAM,1x480GB SSD SATA,2xAC PSUs,fixed rails,SandBlast(SNBT)Security Subscription Package for1Year | CPAP-SG9200-SNBT |
| 9200 Plus configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,8x1/10GbE SFP+ports,32GB RAM,1x480GB SSD NVMe,2xAC PSUs,Lights-Out Management(LOM),fixed rails,SandBlast(SNBT)Security Subscription Package for1Year | CPAP-SG9200-PLUS-SNBT |
| Quantum Force9200 Maestro/MHS HyperScale configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board8xRJ45ports,4x10/25GbE SFP+ports,32GB RAM,1x480GB SSD SATA,2xAC PSUs,Lights-Out Management(LOM),2x25GbE DAC3M,fixed rails,SandBlast(SNBT)Security Subscription Package for1Year | CPAP-SG9200-PLUS-MHS-SNBT |
| Quantum Force9200 Maestro/MHS HyperScale configuration with1MHO-140 orchestrator and2Quantum Force9200 appliances,each appliance includes1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board8xRJ45ports,4x10/25GbE SFP+ports,32GB RAM,1x480GB SSD SATA,2xAC PSUs,Lights-Out Management(LOM),2x25GbE DAC3M,fixed rails,SandBlast(SNBT)Security Subscription Package for1Year | CPAP-MHS-9202-PLUS-SNBT |
| Quantum Force9200 Maestro/MHS HyperScale configuration with1MHO-140 orchestrator and3Quantum Force9200 appliances,each appliance includes1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board8xRJ45ports,4x10/25GbE SFP+ports,32GB RAM,1x480GB SSD SATA,2xAC PSUs,Lights-Out Management(LOM),2x25GbE DAC3M,fixed rails,SandBlast(SNBT)Security Subscription Package for1Year | CPAP-MHS-9203-PLUS-SNBT |

### Subscription Services
|  | NGFW | NGTP | SNBT(SandBlast) |
| --- | --- | --- | --- |
| Application Control | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering |  | √ | √ |
| Anti-Bot |  | √ | √ |
| Anti-Virus |  | √ | √ |
| Anti-Spam |  | √ | √ |
| DNS Security |  | √ | √ |
| SandBlast Threat Emulation(sandboxing) |  |  | √ |
| SandBlast Threat Extraction(CDR) |  |  | √ |
| Zero Phishing |  |  | √ |
| IoT Network Protection | optional | optional | optional |
| SD-WAN Network Optimization | optional | optional | optional |