Datasheet | Quantum Force 9800
Quantum Force 9800
Security Gateway
Unified Management and Ops Efficiency
Top Security Effectiveness
Increase protection and reduce TCO with a consolidated security architecture
Check Point #1 for the 2nd year in a row with 99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024)
Forrester Wave™ for Zero Trust Platform Providers, Q3 2023
Gartner® Firewall Magic Quadrant™ (2022)
AI/ML powered Threat Prevention
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks
Quantum 9800 firewalls deliver up to 185 Gbps of firewall and 25 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency and space savings in a modular 1 RU platform.
Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.
Fastest AI-Powered Threat Prevention
Network Resilience & Power Efficiency
Unified Security Management
9800 Performance Highlights
Quantum Force 9800 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. Two network I/O slots can be configured to fit your network with a high port density of up to 8x1/10G, 4x10/25G and 2x40/100G with acceleration.
Comprehensive and Industry-Leading Security
- Next Generation Firewall
- Site-to-Site and Remote Access VPN
- Application and Web Filtering
- Intrusion Prevention
- Antivirus and Anti-Bot
- Advanced DNS Security
- Sandboxing with file sanitization
- Zero-phishing (no agent required)
With the 9800, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 25 Gbps of threat prevention throughput or up to 400 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.
Highest Performance Threat Prevention
With the 9800, organizations can inspect zero-phishing (no agent required)
!
Modular, High Port Density 1RU Chassis
The 9800 offers the flexibility to fit your changing network requirements. Populate two network I/O slots with your choice of network cards: 8x1/10G, 4x10/25G or 2x40/100G. In addition, the 40/100 card benefits from ASIC based firewall acceleration.
Power Efficient, Resilient Design
With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors.
While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Businesses need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.
Flexible, High Performance HTTPS Inspection
Specifications
Performance
| Enterprise Test Conditions1 | |
|---|---|
| Threat Prevention2.5[Gbps] | 25 |
| NGFW3[Gbps] | 67.7 |
| IPS[Gbps] | 90.5 |
| Firewall[Gbps] | 185 |
| RFC 3511,2544,2647,1242 Performance(Lab) | |
| Firewall 1518B UDP[Gbps] | 400 |
| Firewall Latency(avg) | 1.85μSec |
| VPN AES-GCM 1452B[Gbps] | 75 |
| Connections/sec | 715,000 |
| Concurrent connections(Base/Plus/Max) | 7M/15M/29M |
| TLS Inspection Performance | |
| Threat Prevention1.2[Gbps] | 10.1 |
| Threat Prevention2web mix4[Gbps] | 6 |
| IPS web mix4[Gbps] | 7.9 |
1 Enterprise traffic profile measured with maximum memory
2 Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast (Incl. DNS Security & Zero Phishing) with logging enabled
Additional Features
Includes Firewall, App Control and IPS with logging enabled
4 Web traffic mix is based on RFC 9411 (NetSecOpen) web traffic profile
5 Based on Quantum Firewall Software Release R82 take #25
- Storage: BASE x 1 SSD 960GB NVMe, PLUS x 2 SSD 960GB NVMe
- Power: BASE x 1 External AC PSU, PLUS x 2 External AC PSUs
Network Expansion Slot Options
- 8 x 1/10GBASE-F SFP+ port card
CHECK POINT Network
Network Connectivity
- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
Active/Active L2, Active/Passive L2 and L3
Session failover for routing change, device and link failure
ClusterXL or VRRP
Single Power Supply rating AC: 450W
Power input: 100 to 240VAC (47-63Hz), -40~-70VDC
NAT66, NAT64, NAT46
CoreXL, SecureXL, HA with VRRPv3
Power consumption avg/max: 233.5W/389.3W
IPv6
- NAT66, NAT64, NAT46
Power Requirements
- Single Power Supply rating AC: 450W
- CoreXL, SecureXL, HA with VRRPv3
- OSPFv2 and v3, BGP, RIP
- Static routes, Multicast routes
- Power consumption avg/max: 233.5W/389.3W
- Maximum thermal output AC 1328.3BTU/hr
Physical
Dimensions
- Enclosure: 1RU
- Dimensions: (WxDxH): 17.2 x 20 x 1.73 in. (438 x 508 x 44mm)
- Weight: 20 lbs. (9.1 kg)
- Shipping Carton size (WxDxH mm): 620 x 750 x 222
- Shipping Carton Weight: 37.2 lbs. (16.9 kg)
Environmental Conditions
- Operating: 0° to 40°C, humidity 5% to 95O
- Storing: –20° to 70°C, humidity 5% to 95% at 60°C
- MTBF: > 10 years
Certifications
- Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
- Emissions: CE, FCC IC, VCCI, ASNZS ACMA
- Environmental: ROHS, REACH, WEEE, ISO14001
Maximum Virtual System Capacity
| On Board RJ451 | 1/10 GbE Fiber | 10/25 GbE Fiber | 40/100* GbE Fiber | Memory | Redundant Power | Redundant Storage | LOM | |
|---|---|---|---|---|---|---|---|---|
| Base model | 6 | 4 | 0 | 0 | 32 GB | ○ | ○ | ○ |
| Plus model | 6 | 12 | 0 | 0 | 64 GB | ● | ● | ● |
| Max capacity | 6 | 20 | 8 | 4 | 128 GB | ● | ● | ● |
| Maestro/MHS | 6 | 4 | 4 | 0 | 64 GB | ● | ● | ● |
The RJ45 port count includes the Management & Sync ports
SECURITY APPLIANCE¹
| SECURITY APPLIANCE¹ | SKU | |
|---|---|---|
| 9800 Base configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board4xRJ45 network ports,on-board4x1/10GbE SFP+ports,32GB RAM,1x960GB SSDNVMe,1xACPSUs,telescopicrails,SandBlast(SNBT)Security Subscription Package for1Year | CPAP-SG9800-SNBT | |
| 9800 Plus configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board4xRJ45 network ports,on-board4x1/10GbE SFP+ports,8x1/10GbE SFP+ports,64GB RAM,2x960GB SSDNVMe,2xACPSUs,Lights-Out Management(LOM),telescopicrails,SandBlast(SNBT)Security Subscription Package for1Year | CPAP-SG9800-PLUS-SNBT | |
| Quantum Force9800Maestro/MHSHyperScaleconfiguration:1xRJ45(1GbE Copper) managementport&1xRJ45(1GbE Copper)sync port,on-board4xRJ45networkports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,64GBRAM,2x960GBSSDNVMe,2xACPSUs,Lights-OutManagement(LOM),2x25GbE DAC3M,telescopicrails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year | CPAP-SG9800-PLUS-MHS-SNBT | |
| QuantumForce9800Maestro/MHSHyperScaleconfigurationwith1MHO-140orchestrator and2QuantumForce9800appliances,each appliance includes1xRJ45(1GbE Copper) managementport&1xRJ45(1GbE Copper)syncport,on-board4xRJ45networkports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,64GBRAM,2x960GBSSDNVMe,2xACPSUs,Lights-OutManagement(LOM),2x25GbE DAC3M,telescopicrails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year | CPAP-MHS-9802-PLUS-SNBT | |
| QuantumForce9800Maestro/MHSHyperScaleconfigurationwith1MHO-140orchestrator and3QuantumForce9800appliances,each appliance includes1xRJ45(1GbE Copper) managementport&1xRJ45(1GbE Copper)syncport,on-board4xRJ45networkports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,64GBRAM,2x960GBSSDNVMe,2xACPSUs,Lights-OutManagement(LOM),2x25GbE DAC3M,telescopicrails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year | CPAP-MHS-9803-PLUS-SNBT | |
| NextGenerationThreatPrevention&SandBlastpackagefor1yearforQuantumForce9800appliance | CPSB-SNBT-9800-1Y | |
| NextGenerationThreatPrevention packagefor1yearforQuantumForce9800appliance | CPSB-NGTP-9800-1Y | |
| NextGenerationFirewallPackagefor1yearforQuantumForce9800appliance | CPSB-NGFW-9800-1Y | |
| QuantumIoTNetworkProtectionfor1yearforQuantumForce9800appliances | CPSB-IOTP-9800-1Y | |
| QuantumSD-WANsubscriptionfor1yearforQuantumForce9800appliances | CPSB-SDWAN-9800-1Y | |
| DataLossPrevention(DLP)bladefor1yearforQuantumForce9800appliances | CPSB-DLP-9800-1Y |
1The Base package includes 2 virtual systems (VS)—one management VS and one production/data VS which are not additive or counted when adding additional VS licenses.
ACCESSORIES
| INTERFACE CARDS | SKU |
|---|---|
| 8 Port 1/10 G Base-F SFP+ interface card for 9000/19000/29000 appliances | CPAC-8-1/10F-D |
| 4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card for 9000/19000/29000 appliances | CPAC-4-10/25F-D |
| 4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card for 9000/19000/29000 appliances with acceleration | CPAC-4-10/25F-DA |
| 2 Port 10/25/40/100G Base-F QSFP28 interface card for 9000/19000/29000 appliances with acceleration | CPAC-2-40/100F-D |
TRANSCEIVERS
| TRANSCEIVERS | SKU |
|---|---|
| SFP transceiver module for 1000 BASE fiber ports - long range (1000BASE-LX), SM Fiber, LC | CPAC-TR-1LX-D |
| SFP transceiver module for 1000 BASE fiber ports - short range (1000BASE-SX), MM Fiber, LC | CPAC-TR-1SX-D |
| SFP transceiver to 1000 BASE-T RJ45(Copper), CU,RJ45 | CPAC-TR-1T-D |
| SFP+ transceiver module for 10GE fiber ports - long range(10GBASE-LR),SM Fiber,LC | CPAC-TR-10LR-D |
| SFP+ transceiver module for 10GE fiber ports - short range(10GBASE-SR),MM Fiber,LC | CPAC-TR-10SR-D |
| SFP+ transceiver module for 10GE fiber ports - for links up to40km(10GBASE-ER),SM Fiber,LC | CPAC-TR-10ER-D |
| SFP+ transceiver 10GBASE-T RJ45(Copper)-for links up to30m overCAT6a/CAT7,CU,RJ45 | CPAC-TR-10T-D |
| SFP28 transceiver module for 25GE fiber ports - short range(25GBE-SR),MM Fiber,LC | CPAC-TR-25SR-D |
| SFP28 transceiver module for 25GBE fiber ports - long range(25GBE-LR),SM Fiber,LC | CPAC-TR-25LR-D |
| QSFP+ transceiver for 40GE fiber Ports - short range(40GBASE-SR4),MM Fiber,MPO-12 | CPAC-TR-40SR-QSFP-100m-D |
| QSFP28 transceiver module for 100GE fiber ports - long range(100GBASE-LR4),SM Fiber,LC | CPAC-TR-100LR-D |
| QSFP28 transceiver module for 100GbE fiber ports - short range(100GBASE-SR4),MM Fiber,MPO-12 | CPAC-TR-100SR-D |
DIRECT ATTACH CABLES(DAC)
| DIRECT ATTACH CABLES(DAC) | SKU |
|---|---|
| 10GbE Direct Attach Cable(DAC),3m length for CPAC-8-1/10F-D,CPAC-4-10/25F-D,and CPAC-2-40/100F-D | CPAC-DAC-10G-3M-D |
| 25GbE Direct Attach Cable(DAC),3m length for CPAC-4-10/25F-D,and CPAC-2-40/100F-D | CPAC-DAC-25G-3M-D |
| 40GbE Direct Attach Cable(DAC),3m length for CPAC-2-40/100F-D | CPAC-DAC-40G-3M-D |
| 100GbE Direct Attach Cable(DAC),3m length for CPAC-2-40/100F-D | CPAC-DAC-100G-3M-D |
MEMORY
| MEMORY | SKU |
|---|---|
| 32GB Memory upgrade kit for 9700-9800 appliances | CPAC-RAM32GB-9700/9800 |
| 64GB Memory upgrade kit for 9700-9800 appliances | CPAC-RAM64GB-9700/9800 |
| 96GB Memory upgrade kit for 9700-9800 appliances | CPAC-RAM96GB-9700/9800 |
SPARES AND MISCELLANEOUS
| SPARES AND MISCELLANEOUS | SKU |
|---|---|
| 960GB SSD for 9000/19000/29000 security gateways | CPAC-SSD-960G-9000-D |
| AC PSU for 9700-9800 | CPAC-PSU-AC-9700/9800 |
| Dual DC Power Supply for 9700/9800 series appliances | CPAC-PSU-DUAL-DC-9700/9800 |
| Lights-Out Management Module for 9000/19000/29000 appliances | CPAC-NLOM-D |
| Slide rails for 9000 Security Gateways(22"-32") | CPAC-Rails-9000 |
| Telescopic slide rails for 9000 Security Gateways(24"-36") | CPAC-RAILS-EXT-9000 |
| Blank NIC cover for 9000/19000/29000 appliances | CPAC-NIC-COVER-D |
SUBSCRIPTION SERVICES
The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years.
| NGFW | NGTP | SNBT(SandBlast) | |
|---|---|---|---|
| Application Control | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering | √ | √ | |
| Anti-Bot | √ | √ | |
| Anti-Virus | √ | √ | |
| Anti-Spam | √ | √ | |
| DNS Security | √ | √ | |
| SandBlast Threat Emulation(sandboxing) | √ | ||
| SandBlast Threat Extraction(CDR) | √ | ||
| Zero Phishing | √ | ||
| IoT Network Protection | optional | optional | optional |
| SD-WAN Network Optimization | optional | optional | optional |