Datasheet | Quantum Force 9800

Quantum Force 9800

Security Gateway

Unified Management and Ops Efficiency

Top Security Effectiveness

Increase protection and reduce TCO with a consolidated security architecture
Check Point #1 for the 2nd year in a row with 99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024)
Forrester Wave™ for Zero Trust Platform Providers, Q3 2023
Gartner® Firewall Magic Quadrant™ (2022)

AI/ML powered Threat Prevention

Protect networks and users from zero-days, phishing, DNS, and ransomware attacks
Quantum 9800 firewalls deliver up to 185 Gbps of firewall and 25 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency and space savings in a modular 1 RU platform.
Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.

Fastest AI-Powered Threat Prevention

Network Resilience & Power Efficiency

Unified Security Management

9800 Performance Highlights

Quantum Force 9800 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. Two network I/O slots can be configured to fit your network with a high port density of up to 8x1/10G, 4x10/25G and 2x40/100G with acceleration.

Comprehensive and Industry-Leading Security

With the 9800, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 25 Gbps of threat prevention throughput or up to 400 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.

Highest Performance Threat Prevention

With the 9800, organizations can inspect zero-phishing (no agent required)

!

Modular, High Port Density 1RU Chassis

The 9800 offers the flexibility to fit your changing network requirements. Populate two network I/O slots with your choice of network cards: 8x1/10G, 4x10/25G or 2x40/100G. In addition, the 40/100 card benefits from ASIC based firewall acceleration.

Power Efficient, Resilient Design

With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors.
While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Businesses need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizable dynamic security policies.

Flexible, High Performance HTTPS Inspection


Specifications

Performance

Enterprise Test Conditions1
Threat Prevention2.5[Gbps] 25
NGFW3[Gbps] 67.7
IPS[Gbps] 90.5
Firewall[Gbps] 185
RFC 3511,2544,2647,1242 Performance(Lab)
Firewall 1518B UDP[Gbps] 400
Firewall Latency(avg) 1.85μSec
VPN AES-GCM 1452B[Gbps] 75
Connections/sec 715,000
Concurrent connections(Base/Plus/Max) 7M/15M/29M
TLS Inspection Performance
Threat Prevention1.2[Gbps] 10.1
Threat Prevention2web mix4[Gbps] 6
IPS web mix4[Gbps] 7.9

1 Enterprise traffic profile measured with maximum memory
2 Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast (Incl. DNS Security & Zero Phishing) with logging enabled

Additional Features

Includes Firewall, App Control and IPS with logging enabled
4 Web traffic mix is based on RFC 9411 (NetSecOpen) web traffic profile
5 Based on Quantum Firewall Software Release R82 take #25

Network Expansion Slot Options


CHECK POINT Network

Network Connectivity

High Availability

IPv6

Power Requirements

Physical

Dimensions

Environmental Conditions

Certifications

Maximum Virtual System Capacity

On Board RJ451 1/10 GbE Fiber 10/25 GbE Fiber 40/100* GbE Fiber Memory Redundant Power Redundant Storage LOM
Base model 6 4 0 0 32 GB ○ ○ ○
Plus model 6 12 0 0 64 GB ● ● ●
Max capacity 6 20 8 4 128 GB ● ● ●
Maestro/MHS 6 4 4 0 64 GB ● ● ●

The RJ45 port count includes the Management & Sync ports


SECURITY APPLIANCE¹

SECURITY APPLIANCE¹ SKU
9800 Base configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board4xRJ45 network ports,on-board4x1/10GbE SFP+ports,32GB RAM,1x960GB SSDNVMe,1xACPSUs,telescopicrails,SandBlast(SNBT)Security Subscription Package for1Year CPAP-SG9800-SNBT
9800 Plus configuration:1xRJ45(1GbE Copper) management port&1xRJ45(1GbE Copper) sync port,on-board4xRJ45 network ports,on-board4x1/10GbE SFP+ports,8x1/10GbE SFP+ports,64GB RAM,2x960GB SSDNVMe,2xACPSUs,Lights-Out Management(LOM),telescopicrails,SandBlast(SNBT)Security Subscription Package for1Year CPAP-SG9800-PLUS-SNBT
Quantum Force9800Maestro/MHSHyperScaleconfiguration:1xRJ45(1GbE Copper) managementport&1xRJ45(1GbE Copper)sync port,on-board4xRJ45networkports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,64GBRAM,2x960GBSSDNVMe,2xACPSUs,Lights-OutManagement(LOM),2x25GbE DAC3M,telescopicrails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year CPAP-SG9800-PLUS-MHS-SNBT
QuantumForce9800Maestro/MHSHyperScaleconfigurationwith1MHO-140orchestrator and2QuantumForce9800appliances,each appliance includes1xRJ45(1GbE Copper) managementport&1xRJ45(1GbE Copper)syncport,on-board4xRJ45networkports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,64GBRAM,2x960GBSSDNVMe,2xACPSUs,Lights-OutManagement(LOM),2x25GbE DAC3M,telescopicrails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year CPAP-MHS-9802-PLUS-SNBT
QuantumForce9800Maestro/MHSHyperScaleconfigurationwith1MHO-140orchestrator and3QuantumForce9800appliances,each appliance includes1xRJ45(1GbE Copper) managementport&1xRJ45(1GbE Copper)syncport,on-board4xRJ45networkports,on-board4x1/10GbE SFP+ports,4x10/25GbE SFP+ports,64GBRAM,2x960GBSSDNVMe,2xACPSUs,Lights-OutManagement(LOM),2x25GbE DAC3M,telescopicrails,SandBlast(SNBT)SecuritySubscriptionPackagefor1Year CPAP-MHS-9803-PLUS-SNBT
NextGenerationThreatPrevention&SandBlastpackagefor1yearforQuantumForce9800appliance CPSB-SNBT-9800-1Y
NextGenerationThreatPrevention packagefor1yearforQuantumForce9800appliance CPSB-NGTP-9800-1Y
NextGenerationFirewallPackagefor1yearforQuantumForce9800appliance CPSB-NGFW-9800-1Y
QuantumIoTNetworkProtectionfor1yearforQuantumForce9800appliances CPSB-IOTP-9800-1Y
QuantumSD-WANsubscriptionfor1yearforQuantumForce9800appliances CPSB-SDWAN-9800-1Y
DataLossPrevention(DLP)bladefor1yearforQuantumForce9800appliances CPSB-DLP-9800-1Y

1The Base package includes 2 virtual systems (VS)—one management VS and one production/data VS which are not additive or counted when adding additional VS licenses.


ACCESSORIES

INTERFACE CARDS SKU
8 Port 1/10 G Base-F SFP+ interface card for 9000/19000/29000 appliances CPAC-8-1/10F-D
4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card for 9000/19000/29000 appliances CPAC-4-10/25F-D
4 Port 10GBase-F SFP+/25GBase-F SFP28 interface card for 9000/19000/29000 appliances with acceleration CPAC-4-10/25F-DA
2 Port 10/25/40/100G Base-F QSFP28 interface card for 9000/19000/29000 appliances with acceleration CPAC-2-40/100F-D

TRANSCEIVERS

TRANSCEIVERS SKU
SFP transceiver module for 1000 BASE fiber ports - long range (1000BASE-LX), SM Fiber, LC CPAC-TR-1LX-D
SFP transceiver module for 1000 BASE fiber ports - short range (1000BASE-SX), MM Fiber, LC CPAC-TR-1SX-D
SFP transceiver to 1000 BASE-T RJ45(Copper), CU,RJ45 CPAC-TR-1T-D
SFP+ transceiver module for 10GE fiber ports - long range(10GBASE-LR),SM Fiber,LC CPAC-TR-10LR-D
SFP+ transceiver module for 10GE fiber ports - short range(10GBASE-SR),MM Fiber,LC CPAC-TR-10SR-D
SFP+ transceiver module for 10GE fiber ports - for links up to40km(10GBASE-ER),SM Fiber,LC CPAC-TR-10ER-D
SFP+ transceiver 10GBASE-T RJ45(Copper)-for links up to30m overCAT6a/CAT7,CU,RJ45 CPAC-TR-10T-D
SFP28 transceiver module for 25GE fiber ports - short range(25GBE-SR),MM Fiber,LC CPAC-TR-25SR-D
SFP28 transceiver module for 25GBE fiber ports - long range(25GBE-LR),SM Fiber,LC CPAC-TR-25LR-D
QSFP+ transceiver for 40GE fiber Ports - short range(40GBASE-SR4),MM Fiber,MPO-12 CPAC-TR-40SR-QSFP-100m-D
QSFP28 transceiver module for 100GE fiber ports - long range(100GBASE-LR4),SM Fiber,LC CPAC-TR-100LR-D
QSFP28 transceiver module for 100GbE fiber ports - short range(100GBASE-SR4),MM Fiber,MPO-12 CPAC-TR-100SR-D

DIRECT ATTACH CABLES(DAC)

DIRECT ATTACH CABLES(DAC) SKU
10GbE Direct Attach Cable(DAC),3m length for CPAC-8-1/10F-D,CPAC-4-10/25F-D,and CPAC-2-40/100F-D CPAC-DAC-10G-3M-D
25GbE Direct Attach Cable(DAC),3m length for CPAC-4-10/25F-D,and CPAC-2-40/100F-D CPAC-DAC-25G-3M-D
40GbE Direct Attach Cable(DAC),3m length for CPAC-2-40/100F-D CPAC-DAC-40G-3M-D
100GbE Direct Attach Cable(DAC),3m length for CPAC-2-40/100F-D CPAC-DAC-100G-3M-D

MEMORY

MEMORY SKU
32GB Memory upgrade kit for 9700-9800 appliances CPAC-RAM32GB-9700/9800
64GB Memory upgrade kit for 9700-9800 appliances CPAC-RAM64GB-9700/9800
96GB Memory upgrade kit for 9700-9800 appliances CPAC-RAM96GB-9700/9800

SPARES AND MISCELLANEOUS

SPARES AND MISCELLANEOUS SKU
960GB SSD for 9000/19000/29000 security gateways CPAC-SSD-960G-9000-D
AC PSU for 9700-9800 CPAC-PSU-AC-9700/9800
Dual DC Power Supply for 9700/9800 series appliances CPAC-PSU-DUAL-DC-9700/9800
Lights-Out Management Module for 9000/19000/29000 appliances CPAC-NLOM-D
Slide rails for 9000 Security Gateways(22"-32") CPAC-Rails-9000
Telescopic slide rails for 9000 Security Gateways(24"-36") CPAC-RAILS-EXT-9000
Blank NIC cover for 9000/19000/29000 appliances CPAC-NIC-COVER-D

SUBSCRIPTION SERVICES

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years.

NGFW NGTP SNBT(SandBlast)
Application Control √ √ √
IPS √ √ √
URL Filtering √ √
Anti-Bot √ √
Anti-Virus √ √
Anti-Spam √ √
DNS Security √ √
SandBlast Threat Emulation(sandboxing) √
SandBlast Threat Extraction(CDR) √
Zero Phishing √
IoT Network Protection optional optional optional
SD-WAN Network Optimization optional optional optional