15600 Security Gateway Datasheet

15600 Security Gateway Datasheet
Check Point 15600 Security Gateway |
Datasheet
CHECK POINT
15600 NEXT GENERATION SECURITY GATEWAY
FOR THE LARGE ENTERPRISE
CHECK POINT 15600 NEXT
GENERATION SECURITY
GATEWAY
Large enterprise security,
performance and reliability
Product Benefits
 High performance protection against
the most advanced cyber attacks
 Unique “first time prevention” for the
most sophisticated zero day attack
 Optimized for inspecting SSL
encrypted traffic
 Future-proofed technology
safeguards against tomorrow’s risks
 Centralized control and LOM
improves serviceability
 Modular, expandable chassis with
flexible I/O options
Product Features
 3,850 SecurityPower™ Units
 Simple deployment and management
 Virtual Systems consolidates security
onto one device
 High port density with 25, 40 and 100
GbE options
 Redundant AC or DC power supplies,
fans and disk drives eliminate single
point of failure
OVERVIEW
The Check Point 15600 Next Generation Security Gateway combines the most
comprehensive security protections with data center grade hardware to maximize
uptime while safeguarding enterprise and data center networks. The 15600 is a 2U
Next Generation Security Gateway with three I/O expansion slots for high port
capacity, redundant AC or DC power supplies and fans, a 2x 1TB (HDD) or 2x 480GB
(SSD) RAID1 disk array, and Lights-Out Management (LOM) for remote management.
If you’re ready for 25, 40, or 100 GbE, so is the 15600 Next Generation Security
Gateway with the 40 and 100/25 GbE IO card options.
COMPREHENSIVE THREAT PREVENTION
The rapid growth of malware, growing attacker sophistication and the rise of new
unknown zero-day threats require a different approach to keep enterprise networks
and data secure. Check Point delivers fully integrated, comprehensive Threat
Prevention with award-winning SandBlast™ Threat Emulation and Threat Extraction
for complete protection against the most sophisticated zero-day threats.
Unlike traditional solutions that are subject to evasion techniques, introduce
unacceptable delays, or let potential threats through while evaluating files, Check
Point SandBlast stops more malware from entering your network. With our solution
your employees can work safely no matter where they are and doesn’t compromise
their productivity.
PERFORMANCE HIGHLIGHTS
Firewall
76 Gbps
IPS
18 Gbps
1
NGFW
17 Gbps
Threat Prevention
13.11 Gbps
2
Performance measured under ideal testing conditions. Additional performance details on page 5.
1. Includes Firewall, Application Control, and IPS Software Blades.
2. Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti -Bot and SandBlast Zero-Day Protection Software
Blades using R80.10.
©2017 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non -confidential content | April 19, 2017 | Page 1
Check Point 15600 Security Gateway |
Datasheet
ALL-INCLUSIVE SECURITY SOLUTIONS
INCLUSIVE HIGH PERFORMANCE PACKAGE
Check Point 15600 Next Generation Security Gateways offer
a complete and consolidated security solution available in
two complete packages:

NGTP: prevent sophisticated cyber-threats with
Application Control, URL Filtering, IPS, Antivirus,
Anti-Bot and Email Security.

NGTX: NGTP with SandBlast Zero-Day Protection,
which includes Threat Emulation and Threat
Extraction.
Customers with high connection capacity requirements can
purchase the affordable High Performance Package (HPP).
This includes the base system plus one 4x 10Gb SFP+
interface cards, transceivers and 32 GB of memory for high
connection capacity.
Base
HPP
Max
1 GbE ports (Copper)
10
10
26
10 GbE ports (Fiber)
2
6
12
PREVENT KNOWN AND ZERO-DAY THREATS
Transceivers (SR)
2
6
12
The 15600 Next Generation Security Gateway protects
organizations from both known and unknown threats with
Antivirus, Anti-Bot, SandBlast Threat Emulation
(sandboxing), and SandBlast Threat Extraction technologies.
40 GbE ports (Fiber)
0
0
4
100/25 GbE ports (Fiber)
0
0
4
As part of the Check Point SandBlast Zero-Day Protection
solution, the cloud-based Threat Emulation engine detects
malware at the exploit phase, even before hackers can apply
evasion techniques attempting to bypass the sandbox. Files
are quickly quarantined and inspected, running in a virtual
sandbox to discover malicious behavior before it enters your
network. This innovative solution combines cloud-based
CPU-level inspection and OS-level sandboxing to prevent
infection from the most dangerous exploits, and zero-day and
targeted attacks.
Furthermore, SandBlast Threat Extraction removes
exploitable content, including active content and embedded
objects, reconstructs files to eliminate potential threats, and
promptly delivers sanitized content to users to maintain
business flow.
NGTP
Prevent known
threats
Firewall
VPN (IPsec)
IPS
Application Control
URL Filtering
Anti-Bot
Anti-Virus
Anti-Spam
SandBlast Threat Emulation
SandBlast Threat Extraction










NGTX
(SandBlast)
Prevent known
and zero-day
attacks










RAM
16GB
32GB
64GB
HDD or SSD
2
2
2
AC or DC Power Units
2
2
2
Included
Included
Included
Lights Out Management
A RELIABLE SERVICEABLE PLATFORM
The Check Point 15600 Next Generation Security Gateway
delivers business continuity and serviceability through
features such as hot swappable redundant AC or DC power
supplies, hot-swappable redundant disk drives (RAID),
redundant fans and an advanced LOM card for out-of-band
management. Combined together, these features ensure a
greater degree of business continuity and serviceability when
these appliances are deployed in the customer’s networks.
REMOTE MANAGEMENT AND MONITORING
A Lights-Out-Management (LOM) card provides out-of-band
remote management to remotely diagnose, start, restart and
manage the Next Generation Security Gateway from a
remote location. Administrators can also use the LOM web
interface to remotely install an OS image from an ISO file.
25, 40 AND 100 GbE CONNECTIVITY
High speed connections are essential in modern enterprise
and data center environments, especially those with highdensity virtualized servers. If you’re ready to move from 10 to
25, 40 or 100 GbE, so is the 15600 Next Generation Security
Gateway.
TAP THE POWER OF VIRTUALIZATION
Check Point Virtual Systems enable organizations to
consolidate infrastructure by creating multiple virtualized
security gateways on a single hardware device, offering
significant cost savings with seamless security and
infrastructure consolidation.
©2017 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non -confidential content | April 19, 2017 | Page 2
Check Point 15600 Security Gateway |
1
15600 SECURITY GATEWAY
Datasheet
2
1 Graphic LCD display
2 2 x 1 TB (HDD) or 2x 480GB (SSD) RAID1
3 Three network card expansion slots
4 USB ports for ISO installation
5 Console port
6 Lights-Out Management port
7 Sync 10/100/1000Base-T RJ45
8 Management 10/100/1000Base-T RJ45
4
3
6
5
8
7
ORDERING INFORMATION
BASE CONFIGURATION 1
15600 Next Generation Security Gateway Base Configuration, includes 10x1GbE copper ports, 2 10GbE
SFP+ ports + 2 SR transceivers, 16GB RAM, 2 HDD, 2 AC Power Units, Lights Out Management (LOM),
Next Generation Threat Prevention (NGTP) Security Subscription Package for 1 Year .
CPAP-SG15600-NGTP
15600 SandBlast Next Generation Security Gateway Base Configuration, includes 10x1GbE copper ports,
2 10GbE SFP+ ports + 2 SR transceivers, 16GB RAM, 2 HDD, 2 AC Power Units, Lights Out Management
(LOM), SandBlast (NGTX) Security Subscription Package for 1 Year
CPAP-SG15600-NGTX
HIGH PERFORMANCE PACKAGES 1
15600 Next Generation Security Gateway with High Performance Package, includes10x1GbE copper
ports, 6x10Gb SFP+ ports, 6 SR transceivers, 32 GB RAM, 2 HDD, 2 AC Power Units, Lights Out
Management (LOM), Next Generation Threat Prevention (NGTP) Security Subscription Package for 1 Year
CPAP-SG15600-NGTP-HPP
15600 Next Generation Security Gateway with High Performance Package, includes10x1GbE copper
ports, 6x10Gb SFP+ ports, 6 SR transceivers, 32 GB RAM, 2 HDD, 2 AC Power Units, Lights Out
Management (LOM), Next Generation Threat Extraction (SandBlast) Security Subscription Package for 1
Year
CPAP-SG15600-NGTX-HPP
VIRTUAL SYSTEM PACKAGES
1
15600 Next Generation Security Gateway with High Performance Package, includes 10x1GbE copper
ports, 6x10GbE SFP+ ports + 6 SR transceivers, 32GB RAM, 2 HDD, 2 AC Power Units, Lights Out
Management (LOM), Next Generation Threat Prevention (NGTP) Security Subscription Package for 1 Year
and 20 Virtual Systems
CPAP-SG15600-NGTP-HPP-VS20
Two 15600 Next Generation Security Gateways with High Performance Package, includes 10x1GbE
copper ports, 6x10GbE SFP+ ports + 6 SR transceivers, 32GB RAM, 2 HDD, 2 AC Power Units, Lights
Out Management (LOM), Next Generation Threat Prevention (NGTP) Security Subscription Package for 1
Year and 20 Virtual Systems
CPAP-SG15600-NGTP-HPP-VS20-2
15600 Next Generation Security Gateways with High Performance Package, includes 10x1GbE copper
ports, 6x10GbE SFP+ ports + 6 SR transceivers, 32GB RAM, 2 HDD, 2 AC Power Units, Lights Out
Management (LOM), Next Generation Threat Extraction (SandBlast) Security Subscription Package for 1
Year and 20 Virtual Systems
CPAP-SG15600-NGTX-HPP-VS20
Two 15600 Next Generation Security Gateways with High Performance Package, includes 10x1GbE
copper ports, 6x10GbE SFP+ ports + 6 SR transceivers, 32GB RAM, 2 HDD, 2 AC Power Units, Lights
Out Management (LOM), Next Generation Threat Extraction (SandBlast) Security Subscription Package
for 1 Year and 20 Virtual Systems
CPAP-SG15600-NGTX-HPP-VS20-2
1
SKUs for 2 and 3 years and appliances with an SSD option are also available, see the online Product Catalog
©2017 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non -confidential content | April 19, 2017 | Page 3
Check Point 15600 Security Gateway |
1
Datasheet
2
15600 SECURITY GATEWAY
1 Redundant AC or DC power supplies
2 Cooling fans
ACCESSORIES
INTERFACE CARDS AND TRANSCEIVERS
8 Port 10/100/1000 Base-T RJ45 interface card
CPAC-8-1C-B
4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers
CPAC-4-1F-B
SFP transceiver module for 1G fiber ports - long range (1000Base-LX)
CPAC-TR-1LX-B
SFP transceiver module for 1G fiber ports - short range (1000Base-SX)
CPAC-TR-1SX-B
SFP transceiver to 1000 Base-T RJ45 (Copper)
CPAC-TR-1T-B
4 Port 10GBase-F SFP+ interface card
CPAC-4-10F-B
SFP+ transceiver module for 10G fiber ports - long range (10GBase-LR)
CPAC-TR-10LR-B
SFP+ transceiver module for 10G fiber ports - short range (10GBase-SR)
CPAC-TR-10SR-B
2 Port 40GBase-F QSFP+ interface card
CPAC-2-40F-B
QSFP+ transceiver module for 40G fiber ports - short range (40GBase-SR)
CPAC-TR-40SR-QSFP-300m
QSFP+ transceiver module for 40G fiber ports - long range (40GBase-LR)
CPAC-TR-40LR-QSFP-10K
Bi-directional QSFP+ transceiver for 40G fiber Ports - short range (40GBase-SR-BiDi)
CPAC-TR-40SR-QSFP-BiDi
2 Port 100/25G QSFP28 interface card
CPAC-2-100/25F-B
SFP28 transceiver module for 25G fiber ports with QSFP28 adaptor - short range (25GBase-SR)
CPAC-TR-25SR-ADP-B
SFP28 transceiver module for 25G fiber ports with QSFP28 adaptor - long range (25GBase-LR)
CPAC-TR-25LR-ADP-B
QSFP28 transceiver module for 100G fiber ports - short range (100GBase-SR4)
CPAC-TR-100SR-B
QSFP28 transceiver module for 100G fiber ports - long range (100GBase-LR4)
CPAC-TR-100LR-B
4 Port 1GE copper Bypass (Fail-Open) network interface card (10/100/1000 Base-T)
CPAC-4-1C-BP-B
2 Port 10GE short-range Fiber Bypass (Fail-Open) network interface card (10GBase-SR)
CPAC-2-10-FSR-B-BP
SPARES AND MISCELLANEOUS
Memory upgrade kit from 16GB to 32GB for 15600 appliance
CPAC-RAM16GB-15600
Memory upgrade kit from 16GB to 64GB for 15600 appliance
CPAC-RAM48GB-15600
Memory upgrade kit from 32GB to 64GB for 15600 appliance
CPAC-RAM32GB-15600
Additional/Replacement 1 TB hard drive for 15000 and 23000 Appliances
CPAC-HDD-1TB-B
Replacement AC power supply for 15000 Appliances
CPAC-PSU-AC-15000
Dual DC power supplies for 15000 and 23000 appliances
CPAC-PSU-DC-Dual-15000/23000
Replacement fan cartridge for 15000 and 23000 appliances
CPAC-FAN-B
Slide rails for 15000 and 23000 Appliances (22” - 32”)
CPAC-RAIL-L
Extended slide rails for 15000 and 23000 Appliances (26” - 36”)
CPAC-RAIL-EXT-L
©2017 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non -confidential content | April 19, 2017 | Page 4
Check Point 15600 Security Gateway
|
Datasheet
Performance
Network
Ideal Testing Conditions
Network Connectivity
 76 Gbps of UDP 1518 byte packet firewall throughput
 Total physical and virtual (VLAN) interfaces per appliance:
1024/4096 (single gateway/with virtual systems)
 18 Gbps IPS
 17 Gbps of NGFW
 802.3ad passive and active link aggregation
1
 13.11 Gbps of Threat Prevention
 Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
2
 15.8 Gbps of AES-128 VPN throughput
 Active/Active and Active/Passive - L3 mode
 185,000 connections per second, 64 byte response
 6.4/12.8/25.6M concurrent connections, 64 byte response
3
 Session failover for routing change, device and link failure
Real-World Production Conditions
 ClusterXL or VRRP
 3,850 SecurityPower Units
IPv6
 30 Gbps of firewall throughput
 NAT66, NAT64
 8 Gbps IPS
 CoreXL, SecureXL, HA with VRRPv3
 5.2 Gbps of NGFW
1
 3 Gbps of Threat Prevention
Unicast and Multicast Routing (see SK98226)
2
 OSPFv2 and v3, BGP, RIP
Virtual Systems
 Static routes, Multicast routes
 Maximum VS (base/HPP/max memory): 60/80/125
 Policy-based routing
Your performance may vary depending on different factors.
Visit www.checkpoint.com/partnerlocator to find an appliance
that matches your unique requirements.
 PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
Physical
1. Includes Firewall, Application Control and IPS Software Blades. 2. Includes Firewall, Application
Power Requirements
Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection Software
 Single Power Supply rating: AC(600W), DC(800W)
Blades using R80.10. 3. Performance measured with default/HPP/maximum memory.
 AC power input: 110 to 240V (47-63Hz)
 DC input current: -40.5V/24A -48V/19.2A, -60V/16.0A
Expansion Options
Base Configuration (using 2 of 3 expansion slots)
 2 on-board 10/100/1000Base-T RJ-45 ports
 Power consumption avg/max: AC220/297W, DC225/297W
 Maximum thermal output: 1013.4 BTU/hr.
Dimensions
 8x 10/100/1000Base-T RJ-45 IO card
 Enclosure: 2RU
 2 x 10GBaseF SFP+ IO card
 2x CPUs, 16x physical cores, 32x virtual cores (total)
 Dimensions (W x D x H): 17.4x20.84x3.5 in.( 442x529x88mm)
 16 GB memory (32 and 64 GB options)
 Weight: 31.5 lbs. (14.3 kg)
 Redundant dual hot-swappable 1TB HDD or 480GB SSD
Environmental Conditions
 Redundant dual hot-swappable power supplies (AC or DC)
 Operating: 0° to 40°C, humidity 5% to 95%
 Lights-Out-Management (LOM)
 Storage: –20° to 70°C, humidity 5% to 95% at 60°C
 Slide rails (22” – 32”)
Certifications
Network Expansion Slot Options
 Safety: UL, CB, CE, TUV GS
 8x 10/100/1000Base-T RJ45 port card, up to 24 ports
 Emissions: FCC, CE, VCCI, RCM/C-Tick
 4x 1000Base-F SFP port card, up to 12 ports
 Environmental: RoHS, REACH , ISO14001
1
factory certificate
 4x 10GBase-F SFP+ port card, up to 12 ports
1
1
 2x 40G QSFP+ port card, up to 4 ports
 2x 100/25G QSFP28 port card, up to 4 ports
Fail-Open/Bypass Network Options
 4x 10/100/1000Base-T RJ45 port card
 2x 10GBase-F SFP+ port card
CONTACT US
Worldwide Headquarters | 5 Ha’Solelim Street, Tel Aviv 67897, Israel | Tel: 972-3-753-4555 | Fax: 972-3-624-1100 | Email: info@checkpoint.com
U.S. Headquarters | 959 Skyway Road, Suite 300, San Carlos, CA 94070 | Tel: 800-429-4391; 650-628-2000 | Fax: 650-654-4233 | www.checkpoint.com
©2017 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non -confidential content | April 19, 2017 | Page 5
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising