Check Point Firewall 19000 and 29000 Appliances

Solution

Introduction to Check Point Check Point Firewall 19000 and 29000 Appliances

Check Point Appliances pioneer Gen V Cyber Security equipped with Intel's latest multi-core technologies, increased encrypted traffic inspection performance, and lightning-fast networking technologies - all optimized to provide the highest security effectiveness and performance for mid to large size enterprise security networks.

Check Point Check Point Firewall 19100 / 19200 / 29100 / 29200 appliances provide hyper-fast network security to Data Centers and large enterprises. These appliances enable large enterprises and Data Centers to deploy network security that performs at the speed of business to accelerate large file transfers, provide low latency for high frequency applications, and dynamically scale as their business grows.

Check Point 19100 / 19200 / 29100 / 29200 Next Generation Firewalls combine the most comprehensive protections with Data Center grade security and hardware to maximize uptime and performance for securing large enterprise and Data Center environments. Strengthening Check Point Infinity Architecture, the new 19200 / 29100 / 29200 appliances deliver consolidation and security across any network, cloud, and mobile environment with full threat visibility and control.

All new Check Point Appliances are Maestro-optimized which enables superior performance in the Maestro Hyperscale Orchestrator system.

The Check Point 19100 / 19200 / 29100 / 29200 appliances come with a first-year subscription to the full SandBlast Prevention suite.

Key Features

• High Gen V Sandblast performance, up to 63.5 Gbps
• Power efficient design
• Firewall performance at a line-rate
• Ultra-low latency
• Modular platforms supporting up to 128 virtual CPU cores
• Redundant storage devices and AC power supplies
• Wide variety of network interfaces, ranging from 1 GbE copper and fiber 1 GbE to 100 GbE interfaces
• Hyperscale-ready enabling enterprise protection with up to 1 terabit/sec of Threat Prevention Performance

Notes

• By default, Check Point Firewall Appliances 19200, 29100, and 29200 run SecureXL in the User Space (UPPAK) Mode:
  • When the appliance runs the R82 Image.
  • When the appliance runs the dedicated R81.20 Factory Image.
  • When the appliance runs the R81.20 Jumbo Hotfix Take 38 and higher.
• By default, Check Point Firewall Appliance 19100 runs SecureXL in the User Space (UPPAK) Mode:
  • When the appliance runs the R82 Image.
  • When the appliance runs the dedicated R81.20 Factory Image.
  • When the appliance runs the R81.20 Jumbo Hotfix Take 54 and higher.
• For instructions to change the SecureXL mode between UPPAK and KPPAK, see the LightSpeed 10/25/40/100G QSFP28 Ports Administration Guide > Chapter "Configuring SecureXL".
• Starting in R82.10, SecureXL supports only UPPAK mode.
• Check Point Firewall Appliances (19200, 29100, and 29200) do not support R81.20 Jumbo Hotfix Take 26 and lower.
• Check Point Firewall Appliances (19100) do not support R81.20 Jumbo Hotfix Take 53 and lower.
• To manage Check Point Firewall appliances that run an R81.20 version with an R81.10 Management Server, you must install the R81.10 Jumbo Hotfix on the R81.10 Management Server. See the Downloads > Jumbo Hotfix Support section for details.
• To manage Check Point Firewall appliances that run an R81.20 version with an R81 Management Server, you must install the R81 Jumbo Hotfix on the R81 Management Server. See the Downloads > Jumbo Hotfix Support section for details.

Downloads

To download these packages, you will need to have a Software Subscription or Active Support plan.

• Image for Check Point Firewall Appliances (19100, 19200, 29100, and 29200 operating as Security Gateways):

Important Notes:

• Effective 03 June 2024, the dedicated R81.20 image was replaced from Take 719 to Take 722 to protect against CVE-2024-24919 (see sk182336).
• To install this ISO image, you must use the ISOmorphic build 207 or higher (see sk65205).
• Image for Check Point Firewall Appliances (19100, 19200, 29100, and 29200 operating in a Maestro configuration):

Important Notes:

• Effective 03 June 2024, the dedicated R81.20 image was replaced from Take 719 to Take 722 to protect against CVE-2024-24919 (see sk182336).
• To install this ISO image, you must use the ISOmorphic build 207 or higher (see sk65205).
• Jumbo Hotfix Support for Check Point Firewall Appliances (19100, 19200, 29100, and 29200):

Notes:

1. 19100, 19200, 29100, and 29200 Check Point Firewall appliances can run directly with the dedicated R81.20 ISO. To get the latest fixes and enhancements, install the R81.20 Jumbo Hotfix - the listed Take or higher.
2. 19100, 19200, 29100, and 29200 Check Point Firewall appliances in Maestro can run directly with the dedicated R81.20 ISO. To get the latest fixes and enhancements, install the R81.20 Jumbo Hotfix - the listed Take or higher.
3. Effective 03 June 2024, the minimum supported R81.20 Jumbo Hotfix Take was changed from Take 38 and Take 54 to Take 65 to protect against CVE-2024-24919 (see sk182336).
4. To support SecureXL in the UPPAK mode (see sk179432) on 19000 and 29000 models:

• In the Maestro configuration, you must install the R81.20 Jumbo Hotfix Accumulator, Take 89 and higher.
  • In the Security Gateway configuration, you must install the R81.20 Jumbo Hotfix Accumulator, Take 65 and higher.
• USB Type-C Console Driver:

To connect to the command line interface, you can use a USB Type-C console port.

To use it, download and install the USB Type-C console driver for 19000 and 29000 Appliances on the console client computer.

Known Limitations

For limitations that are related to hardware acceleration, see LightSpeed 10/25/40/100G QSFP28 Ports Administration Guide.

Documentation

Revision History

Article Properties

Access Level: General

Status: Approved

Date Created: 2023-01-16

Last Modified: 2026-07-07