# Top Security Effectiveness  
**Check Point #1 for the 2nd year in a row**  
Increase protection and reduce TCO with a consolidated security architecture  
**Check Point #1 for the 2nd year in a row** with 99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024)

## Named a Leader by Top Analyst Firms  
- Forrester Wave™ for Zero Trust Platform Providers, Q3 2023  
- Gartner® Firewall Magic Quadrant™ (2022)

### On-demand expansion, load balancing firewall clustering, and resilient access to mission-critical applications  
### AI/ML powered Threat Prevention  
Quantum 9300 firewalls deliver up to 70 Gbps of firewall and 10.5 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency, and space savings in a modular 1 RU platform.  
Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.

## Fastest AI-Powered Threat Prevention  
### Network Resilience & Power Efficiency  
### Unified Security Management

### 9300 Performance Highlights  
---  
AI-Powered advanced security and uncompromising performance, built for perimeter applications Quantum Force 9300 data center firewalls

Quantum Force 9300 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. One network I/O slot can be configured to fit your network with a high port density of up to 8x1/10G or 4x10/25G with acceleration.

## Comprehensive and Industry-Leading Security  
- Next Generation Firewall  
- Application and Web Filtering  
- Intrusion Prevention  
- Antivirus and Anti-Bot  
- Advanced DNS Security  
- Sandboxing with file sanitization

## Highest Performance Threat Prevention  
With the 9300, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 10.5 Gbps of threat prevention throughput or up to 80.2 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.

### Miercom  
Check Point is #1 in Miercom 2024 Security Benchmark Highest Threat Prevention Scores for 2nd year in a row

## Modular, High Port Density 1RU Chassis  
The 9300 offers the flexibility to fit your changing network requirements. Populate the network I/O slot with your choice of network cards: 8x1/10G, 4x10/25G.

## Power Efficient, Resilient Design  
With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors.

## Flexible, High Performance HTTPS Inspection  
While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Businesses need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.

---  
## Specifications  
| Enterprise Test Conditions1 |  |  
| --- | --- |  
| Threat Prevention2.5[Gbps] | 10.5 |  
| NGFW3[Gbps] | 28.2 |  
| IPS[Gbps] | 39 |  
| Firewall[Gbps] | 70 |  
| Firewall 1518B UDP[Gbps] | 80.2 |  
| Firewall Latency(avg) | 9μSec |  
| VPN AES-GCM 1452B[Gbps] | 33 |  
| Connections/sec | 300,000 |  
| Concurrent connections(Base/Plus/Max) | 2.75M/7.27M/16.2 |  
| Threat Prevention1.2[Gbps] | 5.1 |  
| Threat Prevention2web mix4[Gbps] | 2.9 |  
| IPS web mix4[Gbps] | 3.9 |  
 
## Additional Features  
• CPU: 10 physical cores, total of 16 logical cores  
• Storage: 1 SSD 480GB SATA  
• Lights-Out-Management card – optional (included in Plus package)

## Network Expansion Slot Options  
• 8 x 1/10GBASE-F SFP+ port card  
• 4 x 10/25GBASE-F SFP28 port card

---  
## Network  
• 802.3ad passive and active link aggregation  
• Layer 2 (transparent) and Layer 3 (routing) mode

### High Availability  
• Active/Active L2, Active/Passive L2 and L3  
• Session failover for routing change, device and link failure  
• ClusterXL or VRRP

### Power Requirements  
• Single Power Supply rating AC: 320W  
• Power input: 100 to 240VAC (47-63Hz) 13A - Single Phase  
• Power consumption avg/max: 96W/160W

### Physical  
• Enclosure: 1RU  
• Dimensions: (WxDxH): 17.2 x 20 x 1.73 in.(438 x 508 x 44mm)  
• Weight: (gross; Kg): 15.97

### Environmental Conditions  
• Operating: 0° to 40°C, humidity 5% to 95%  
• Storing: –20° to 70°C, humidity 5% to 95% at 60°C  
• MTBF: > 10 years

## Certifications  
• Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1  
• Emissions: CE, FCC IC, VCCI, ASNZS ACMA  
• Environmental: ROHS, REACH, WEEE, ISO14001

## Maximum Virtual System Capacity  
|  | On-Board¹RJ45 | 1/10 GbE Fiber | 10/25GbE Fiber | Memory | Redundant Power | Redundant Storage | LOM |  
| --- | --- | --- | --- | --- | --- | --- | --- |  
| Base model | 10 | 0 | 0 | 16GB | ○ | ○ | ○ |  
| Plus model | 10 | 8 | 0 | 32GB | ● | ○ | ● |  
| Max capacity | 10 | 8 | 4 | 64GB | ● | ○ | ● |  
| Maestro/MHS | 10 | 0 | 4 | 32GB | ● | ○ | ● |  
  
### The 9300 includes 1x RJ45 (1 GbE copper) management port plus an additional 1x RJ45 (1 GbE copper) port for synchronization when using the 9300 PLUS in a cluster. With one network I/O slot, modify the base or plus configuration to meet your networking requirements.

---  
## ACCESSORIES  
| INTERFACE CARDS | SKU |  
| --- | --- |  
| 8 Port 1/10 G Base-F SFP+ interface card for 9000/19000/29000 appliances | CPAC-8-1/10F-D |  
| 4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card for 9000/19000/29000 appliances | CPAC-4-10/25F-D |  
| 4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card for 9000/19000/29000 appliances with acceleration | CPAC-4-10/25F-DA |

| TRANSCEIVERS | SKU |  
| --- | --- |  
| SFP28 transceiver module for 25GbE fiber ports - short range (25GBASE-SR), MM Fiber, LC | CPAC-TR-25SR-D |  
| SFP28 transceiver module for 25GbE fiber ports - long range (25GBASE-LR), SM Fiber, LC | CPAC-TR-25LR-D |  
| SFP+ transceiver module for 10GbE fiber ports - long range (10GBASE-LR), SM Fiber, LC | CPAC-TR-10LR-D |  
| SFP+ transceiver module for 10GbE fiber ports - short range (10GBASE-SR), MM Fiber, LC | CPAC-TR-10SR-D |

| DIRECT ATTACH CABLES(DAC) | SKU |  
| --- | --- |  
| 10GbE Direct Attach Cable(DAC),3m length for CPAC-8-1/10F-D,CPAC-4-10/25F-D | CPAC-DAC-10G-3M-D |  
| 25GbE Direct Attach Cable(DAC),3m length for CPAC-4-10/25F-D | CPAC-DAC-25G-3M-D |

---  
## SUBSCRIPTION SERVICES  
|  | NGFW | NGTP | SNBT(SandBlast) |  
| --- | --- | --- | --- |  
| Application Control | √ | √ | √ |  
| IPS | √ | √ | √ |  
| URL Filtering |  | √ | √ |  
| Anti-Bot |  | √ | √ |  
| Anti-Virus |  | √ | √ |  
| Anti-Spam |  | √ | √ |  
| DNS Security |  | √ | √ |  
| SandBlast Threat Emulation(sandboxing) |  |  | √ |  
| SandBlast Threat Extraction(CDR) |  |  | √ |  
| Zero Phishing |  |  | √ |  
| IoT Network Protection | optional | optional | optional |  
| SD-WAN Network Optimization | optional | optional | optional |