Quantum Force 9400 Datasheet
Quantum Force 9400
Security Gateway
Check Point #1 for the 2nd year in a row with 99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024)
Named a Leader by Top Analyst Firms Forrester Wave™ for Zero Trust Platform
Unified Management and Ops Efficiency
- AI/ML powered Threat Prevention
- Increase protection and reduce TCO with a consolidated security architecture
- Protect networks and users from zero-days, phishing, DNS, and ransomware attacks
Quantum 9400 firewalls deliver up to 72.6 Gbps of firewall and 14 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency, and space savings in a modular 1 RU platform.
Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.
Fastest AI-Powered Threat Prevention
Network Resilience & Power Efficiency
9400 Performance Highlights
| Firewall | Next Gen Firewall | Threat Prevention |
|---|---|---|
| 72.6 Gbps | 33.3 Gbps | 14 Gbps |
AI-Powered advanced security and uncompromising performance, built for perimeter applications
Quantum Force 9400 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. One network I/O slot can be configured to fit your network with a high port density of up to 8x1/10G, 4x10/25G or 2x40/100G with acceleration.
Comprehensive and Industry-Leading Security
Next Generation Firewall
Miercom
Check Point is #1 in Miercom 2024 Security Benchmark Highest Threat Prevention Scores for 2nd year in a row
Highest Performance Threat Prevention
With the 9400, organizations can inspect
- Advanced DNS Security
- Sandboxing with file sanitization
- Antivirus and Anti-Bot
- Site-to-Site and Remote Access VPN
- Application and Web Filtering
- Intrusion Prevention
With the 9400, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 14 Gbps of threat prevention throughput or up to 200 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.
Modular, High Port Density 1RU Chassis
The 9400 offers the flexibility to fit your changing network requirements. Populate one network I/O slot with your choice of network cards:
- 8x1/10G
- 4x10/25G
- 2x40/100G
In addition, the 40/100 card benefits from ASIC based firewall acceleration.
Power Efficient, Resilient Design
With low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half compared with similar firewalls from other vendors.
Specifications
| Enterprise Test Conditions1 | |
|---|---|
| Threat Prevention2.5[Gbps] | 14 |
| NGFW3[Gbps] | 33.3 |
| IPS[Gbps] | 46.4 |
| Firewall[Gbps] | 72.6 |
| Firewall1518B UDP[Gbps] | 200 |
| Firewall Latency(avg) | 1.85μSec |
| VPN AES-GCM1452B[Gbps] | 40 |
| Connections/sec | 355,000 |
| Concurrent connections(Base/Plus/Max) | 2.75M/7.27M/16.2 |
Additional Features Highlights
- CPU: 14 physical cores, total of 20 logical cores
- Storage: 1 SSD 960GB SATA
- Power: BASE x 1 External AC PSU, PLUS x 2 External AC PSUs
- 16 to 64 GB memory options
- Lights-Out-Management card – optional (included in Plus package)
- 8 x 1/10GBASE-F SFP+ port card
- 4 x 10/25GBASE-F SFP28 port card
- 2 x 40/100GBASE-F QSFP28 port card
Network
Network Connectivity
- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
- Active/Active L2, Active/Passive L2 and L3
- Session failover for routing change, device and link failure
- ClusterXL or VRRP
IPv6
- NAT66, NAT64, NAT46
- CoreXL, SecureXL, HA with VRRPv3
Power Requirements
- Single Power Supply rating AC: 320W
- Power consumption avg/max: 105.1W/175.3W
- Maximum thermal output AC: 597.7BTU/hr
Dimensions
- Enclosure: 1RU
- Dimensions: (WxDxH): 17.2 x 20 x 1.73 in.(438 x 508 x 44mm)
- Weight: (gross; Kg): 15.97
Environmental Conditions
- Operating: 0° to 40°C, humidity 5% to 95%
- Storing: –20° to 70°C, humidity 5% to 95% at 60°C
- MTBF: > 10 years
Certifications
- Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
- Emissions: CE, FCC IC, VCCI, ASNZS ACMA
- Environmental: ROHS, REACH, WEEE, ISO14001
Maximum Virtual System Capacity
| On-Board1RJ45 | 1/10 GbE Fiber | 10/25GbE Fiber | 40/100GbE Fiber | Memory | Redundant Power | Redundant Storage | LOM | |
|---|---|---|---|---|---|---|---|---|
| Base model | 10 | 4 | 0 | 0 | 16GB | ○ | ○ | ○ |
| Plus model | 10 | 12 | 0 | 0 | 32GB | ● | ○ | ● |
| Max capacity | 10 | 12 | 4 | 2 | 64GB | ● | ○ | ● |
| Maestro/MHS | 10 | 4 | 4 | 0 | 32GB | ● | ○ | ● |
Ordering Quantum Force 9400 Security Gateway
The 9400 includes 1x RJ45 (1 GbE copper) management port plus an additional 1x RJ45 (1 GbE copper) port for synchronization when using the 9400 PLUS in a cluster.
SECURITY APPLIANCE¹
| SKU |
|---|
| 9400 Base configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board8xRJ45 network ports,on-board4x1/10GbE SFP+ports,16GB RAM,1x960GB SSDSATA,1xACPSUs,telescopic rails,SandBlast(SNBT)Security Subscription Package for1Year |
| 9400 Plus configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board8xRJ45 network ports,on-board4x1/10GbE SFP+ports,32GB RAM,1x960GB SSDSATA,2xACPSUs,Lights-Out Management(LOM),tescopic rails,SandBlast(SNBT)Security Subscription Package for1Year |
| Quantum Force9400Maestro/MHSHyperScaleconfiguration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board8xRJ45network ports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,32GBRAM,1x960GBSSDATA,2xACPSUs,Lights-OutManagement(LOM),2x25GbEDAC3M,telescopicrails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year |
| QuantumForce9400Maestro/MHSHyperScaleconfigurationwith1MHO-140orchestrator and2QuantumForce9400appliances,each appliance includes1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper)syncport,on-board8xRJ45network ports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,32GBRAM,1x960GBSSDATA,2xACPSUs,Lights-OutManagement(LOM),2x25GbEDAC3M,telescopicrails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year |
| QuantumForce9400Maestro/MHSHyperScaleconfigurationwith1MHO-140orchestrator and3QuantumForce9400appliances,each appliance includes1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper)syncport,on-board8xRJ45network ports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,32GBRAM,1x960GBSSDATA,2xACPSUs,Lights-OutManagement(LOM),2x25GbEDAC3M,telescopicrails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year |
| Next Generation Threat Prevention&SandBlast package for1year forQuantumForce9400appliance |
| Next Generation Threat Prevention package for1year forQuantumForce9400appliance |
| Next Generation Firewall Package for1year forQuantumForce9400appliance |
| QuantumIoTNetworkProtectionfor1year forQuantumForce9400appliances |
| QuantumSD-WAN subscriptionfor1year forQuantumForce9400appliances |
| Data Loss Prevention(DLP)blade for1year forQuantumForce9400appliances |
1The Base & Plus packages include 2 virtual systems (VS)—one management VS and one production/data VS which are not additive or counted when adding additional VS licenses.
ACCESSORIES
| INTERFACE CARDS | SKU |
|---|---|
| 8 Port 1/10 G Base-F SFP+ interface card for 9000/19000/29000 appliances | CPAC-8-1/10F-D |
| 4 Port 10GBase-F SFP+ / 25GBase-F SFP28 interface card for 9000/19000/29000 appliances | CPAC-4-10/25F-D |
| 4 Port 10GBase-F SFP+ / 25GBase-F SFP28 interface card for 9000/19000/29000 appliances with acceleration | CPAC-4-10/25F-DA |
| 2 Port 10/25/40/100G Base-F QSFP28 interface card for 9000/19000/29000 appliances with acceleration | CPAC-2-40/100F-D |
| TRANSCEIVERS | SKU |
|---|---|
| Compatible with the CPAC-8-1/10F-D Interface Cards | |
| SFP transceiver module for 1000BASE fiber ports - long range(1000BASE-LX),SM Fiber,LC | CPAC-TR-1LX-D |
| SFP transceiver module for 1000BASE fiber ports - short range(1000BASE-SX),MM Fiber,L | CPAC-TR-1SX-D |
| SFP transceiver to 1000BASE-TRJ45(Copper),CU,RJ45 | CPAC-TR-1T-D |
| Compatible with the CPAC-8-1/10F-D and CPAC-4-10/25F-D,Interface Cards | |
| SFP+ transceiver module for 10GbE fiber ports - long range(10GBASE-LR),SM Fiber,LC | CPAC-TR-10LR-D |
| SFP+ transceiver module for 10GbE fiber ports - short range(10GBASE-SR),MM Fiber,LC | CPAC-TR-1OSR-D |
| SFP+ transceiver module for 10GbE fiber ports - for links up to40km(10GBASE-ER),SM Fiber,LC | CPAC-TR-10ER-D |
| SFP+ transceiver 10GBASE-TRJ45(Copper) - for links up to30m overCAT6a/CAT7,CU,RJ45 | CPAC-TR-10T-D |
| Compatible with the CPAC-4-10/25F-D Interface Cards | |
| SFP28 transceiver module for 25GbE fiber ports - short range(25GBASE-SR),MM Fiber,LC | CPAC-TR-25SR-D |
| SFP28 transceiver module for 25GbE fiber ports - long range(25GBASE-LR),SM Fiber,LC | CPAC-TR-25LR-D |
| Compatible with the CPAC-2-40/100F-D Interface Card | |
| SFP+ transceiver module for 10GbE fiber ports - long range(10GBASE-LR),SM Fiber,LC withQSFP28 Adapter | CPAC-TR-10LR-D-ADP |
| SFP+ transceiver module for 10GbE fiber ports - short range(10GBASE-SR)MM Fiber,LC withQSFP28 Adapter | CPAC-TR-10GSR-D-ADP |
| SFP+ transceiver module for 10GbE fiber ports - for links up to40km(10GBASE-ER)SM Fiber,LC withQSFP28 Adapter | CPAC-TR-10ER-D-ADP |
| SFP+ transceiver 10GBASE-TRJ45(Copper) - for links up to30m overCAT6a/CAT7 withQSFP28 Adapter | CPAC-TR-10T-D-ADP |
| SFP28 transceiver module for 25GbE fiber ports - short range(25GBASE-SR)MM Fiber,LC withQSFP28 Adapter | CPAC-TR-25SR-D-ADP |
| SFP28 transceiver module for 25GbE fiber ports - long range(25GBASE-LR),SM Fiber,LC | CPAC-TR-25LR-D |
| SFP28 transceiver module for 25GbE fiber ports - long range(25GBASE-LR),SM Fiber,LC withQSFP28 Adapter | CPAC-TR-25LR-D-ADP |
| QSFP+ transceiver for 40GbE fiber Ports - short range(40GBASE-SR4),MM Fiber,MPO-12 | CPAC-TR-40SR-QSFP-100m-D |
| QSFP+ transceiver module for 40GbE fiber ports - short range(40GBASE-eSR4),MM Fiber,MPO-12 | CPAC-TR-40SR-QSFP-300m-D |
| QSFP Bi-directional transceiver for 40GbE fiber ports - short range(40GBASE-SR-BD),MM Fiber,LC | CPAC-TR-40SR-QSFP-Bidi-D |
| QSFP+ transceiver module for 40GbE fiber ports for links up to75m(40GBASE-SWDM4)MM Fiber,LC | CPAC-TR-40SWDM4 |
| QSFP+ transceiver module for 40GbE fiber ports - long range(40GBASE-LR4),SM Fiber,LC | CPAC-TR-40LR-QSFP-10Km-D |
| QSFP+ transceiver module for 40GbE fiber ports - for links up to40km(40GBASE-ER4),SM Fiber,LC | CPAC-TR-40ERA4 |
| QSFP28 transceiver module for 100GbE fiber ports - long range(100GBASE-LR4),SM Fiber,LC | CPAC-TR-100LR-D |
| QSFP28 transceiver module for 100GbE fiber ports - short range(100GBASE-SR4),MM Fiber,MPO-12 | CPAC-TR-100SR-D |
| QSFP28 Bi-directional transceiver for 100GbE fiber Ports - short range(100GBase-SR1.2BiDi),MM Fiber,LC | CPAC-TR-100SR-Bidi |
| QSFP28 transceiver module for 100GbE fiber ports - for links up to75m(100GBASE-SWDM4)MM Fiber,LC | CPAC-TR-100SWDM4-D |
| QSFP28 transceiver module for 100GbE fiber ports - for links up to2km(100GBASE-CWDM4)MM Fiber,LC | CPAC-TR-100CWDM4-D |
| QSFP28 transceiver module for 100GbE fiber ports,-for links up to40km(100GBASE-ERL4)MM Fiber,LC | CPAC-TR-100ERL4 |
| DIRECT ATTACH CABLES(DAC) | SKU |
|---|---|
| 10GbE Direct Attach Cable(DAC),3m length for CPAC-8-1/10F-D,CPAC-4-10/25F-D,and CPAC-2-40/100F-D | CPAC-DAC-10G-3M-D |
| 25GbE Direct Attach Cable(DAC),3m length for CPAC-4-10/25F-D,and CPAC-2-40/100F-D | CPAC-DAC-25G-3M-D |
| 40GbE Direct Attach Cable(DAC),3m length for CPAC-2-40/100F-D | CPAC-DAC-40G-3M-D |
| 100GbE Direct Attach Cable(DAC),3m length for CPAC-2-40/100F-D | CPAC-DAC-100G-3M-D |
| MEMORY | SKU |
|---|---|
| 16GB Memory upgrade kit for 9100-9400 appliances | 16GB Memory upgrade kit for 9100-9400 appliances |
| 32GB Memory upgrade kit for 9100-9400 appliances | 32GB Memory upgrade kit for 9100-9400 appliances |
| 48GB Memory upgrade kit for 9100-9400 appliances | 48GB Memory upgrade kit for 9100-9400 appliances |
| SPARES AND MISCELLANEOUS | SKU |
|---|---|
| Replacement AC Power Supply for 9300/9400 series appliances | CPAC-PSU-AC-9300/9400 |
| Dual DC Power Supply for 9300/9400 series appliances | CPAC-PSU-DUAL-DC-9300/9400 |
| Lights-Out Management Module for 9000/19000/29000 appliances | CPAC-NLOM-D |
| Slide rails for 9000 Security Gateways(22”-32”) | CPAC-Rails-9000 |
| Telescopic slide rails for 9000 Security Gateways(24”-36”) | CPAC-RAILS-EXT-9000 |
| Blank NIC cover for 900/19000/29000 appliances | CPAC-NIC-COVER-D |
The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP, and SNBT are available for subsequent years.