Datasheet | Check Point's DDoS Protector X Series | Check Point Software
Datasheet | Check Point's DDoS Protector X Series
DDoS Protector X Datasheet
Adaptive Protection from the Most Advanced DDoS Threats
Distributed denial-of-service (DDoS) attacks are increasing in frequency and ferocity. Powerful IoT-botnets for hire over the dark web make launching large-scale attacks accessible, effortless, and cheap. Professional hackers are continuously seeking new ways to disrupt the flow of network traffic and undermine the user experience, resulting in loss of revenue, tarnishing of the brand and increased customer churn rates. DDoS Protector, Check Point’s real-time perimeter attack mitigation device, secures organizations against emerging network multi-vector attacks, powerful DDoS campaigns, IoT botnets, application vulnerability exploitation, malware, and other types of cyberattacks.
Key Features
- Automated Zero-Day Attack Defense
Behavioral-based detection and mitigation to defend against unknown zero-day attacks without impacting legitimate user experience. - Keyless SSL/TLS Flood Mitigation
High-capacity keyless protection from SSL/TLS-based DDoS attacks without adding latency to customer communications and while preserving user privacy. - Advanced Attack Protection
Detection and mitigation of today’s most advanced attacks, including Burst attacks, Domain Name System (DNS) amplification attacks, IoT botnet floods, Layer 3–7 and other crippling DDoS attacks. - Patent Protected Real-Time Attack Signature
Automated signature creation and advanced challenge escalations to achieve the highest mitigation accuracy that can automatically mitigate unknown attacks and minimize the impact on legitimate traffic.
Programmable Mitigation Performance
| Model | Max Programmable Mitigation Throughput | Max Attack Concurrent Sessions | DDoS Flood Attack Prevention Rate | Latency |
|---|---|---|---|---|
| DDoS Protector X10 / X20 | 10 Gbps | Unlimited | 14 Mpps | < 60 microseconds |
| DDoS Protector X40 | 20 Gbps | Unlimited | 35 Mpps | < 60 microseconds |
| DDoS Protector X50 / X50-HP | 40 Gbps | Unlimited | 45 Mpps | < 60 microseconds |
| DDoS Protector X80 | 50 Gbps | Unlimited | 200 Mpps | < 60 microseconds |
| DDoS Protector X90 / X90-HP | 80 Gbps | Unlimited | 35 Mpps | < 60 microseconds |
| DDoS Protector X110 | 90 Gbps | Unlimited | 45 Mpps | < 60 microseconds |
| DDoS Protector X220/X380 | 110 Gbps | Unlimited | 200 Mpps | < 60 microseconds |
| DDoS Protector X400 / X800 | 220 Gbps | Unlimited | 530 Mpps | < 60 microseconds |
SSL / TLS Decryption
| SSL/TLS Connections per Second | 43 KCPS (RSA 2K) | 95 KCPS (RSA 2K) | 50 KCPS (RSA 2K) | 110 KCPS (RSA 2K) | 200 KCPS (RSA 2K) |
|---|---|---|---|---|---|
| TLS 1.3 | Yes | Yes | Yes | Yes | Yes |
| Perfect Forward Secrecy (PFS) | Yes | Yes | Yes | Yes | Yes |
Management Ports
Ports are managed via 10/100/1000 Copper Ethernet and include 2 Management Console RJ-45 ports.
Compliance & Certifications
- RoHS
Compliant (EU directive 2011/65/EU, 2015/863/EU) - ECCN
5A002.a.2 - Safety/EMC/EMI & Certifications
UL/TUV, FCC (USA), IC (Canada), CE (Europe), UKCA (UK), RCM (Australia/NZ), VCCI (Japan), KCC (Korea), EAC (Russia), BSMI (Taiwan), Anatel (Brazil), NOM (Mexico)
Warranty
1-year hardware and software maintenance
Support
Check Point Support Program
Widest Attack Coverage
- Complete Layer 3–7 protection against known and zero-day DoS/DDoS attacks that misuse network bandwidth, server, and application resources.
- Bidirectional visibility to defend against the most complicated attacks that require looking at both ingress and egress traffic.
Multiple Deployment Options to Fit Your Needs
- Supports both in-line or out-of-path (Smart Tap) implementations or a scrubbing center deployment.
- Integrates with Check Point’s Hybrid Cloud DDoS Protection Service to offer a single vendor hybrid solution that provides zero time to mitigate.
- Enables service providers to offer market-leading DDoS mitigation services to hosted applications and network tenants with multitenant and multipolicy support.
- Virtual appliance enables DDoS mitigation for software-defined data centers (SDDC).
Worldwide Headquarters
5 Shlomo Kaplan Street, Tel Aviv 6789159, Israel | Tel: +972-3-753-4599
U.S. Headquarters
100 Oracle Parkway, Suite 800 Redwood City, CA 94065 | Tel: 1-800-429-4391