Check Point 29100
2U firewall with seven network slots and 60 Gbps Threat Prevention.
Overview
The Force 29100 combines 64 physical cores with seven expansion slots for data centre projects that require more interfaces and inspection capacity. Memory ranges from 128 GB to 256 GB; Base and Plus differ in storage and card configuration. The manufacturer lists 60 Gbps Threat Prevention and 14.6 Gbps in the TLS web mix profile. The design can distribute 10, 25 and 100 GbE connectivity according to the selected cards. Selection criteria: Prioritise this model when the topology requires more than four network slots in the same 2U appliance. Reserve capacity for session peaks and HTTPS inspection, using the 14.6 Gbps TLS web mix reference. Select Base/Plus and memory according to card configuration, redundancy and the planned load. Performance note: Manufacturer reference values measured with different test profiles. Actual capacity varies with traffic, version, memory, blades, TLS inspection and policy. Do not add throughput figures together or use interface speed as prevention capacity. Manufacturer image; interface configuration may vary by SKU.
Key features
- Threat prevention and application controlFirewall, application and URL control, IPS, Anti-Bot/Antivirus and DNS protection according to the contracted package. Source: https://www.checkpoint.com/downloads/products/quantum-force-29100-datasheet.pdf
- VPN and HTTPS inspectionSite-to-site VPN and remote access; HTTPS inspection and SandBlast according to licence and configuration. Source: https://www.checkpoint.com/downloads/products/quantum-force-29100-datasheet.pdf
- Availability and Maestro architectureClusterXL/VRRP, BGP/OSPF routing and configuration options for Maestro. Source: https://www.checkpoint.com/downloads/products/quantum-force-29100-datasheet.pdf
- Dedicated management and synchronisationDedicated management and synchronisation interfaces allow redundant bonds; LOM is optional in Base. Source: https://sc1.checkpoint.com/documents/Appliances/GSG_19000_29000/EN/Content/Topics-GSG-19000-29000/Appliances-Hardware.htm
Technical specifications
| Form factor | Rack 2U |
|---|---|
| Threat Prevention — enterprise profile | 60 GbpsEnterprise; maximum memory; Firewall, Application Control, URL Filtering, IPS, Anti-Malware and SandBlast, with logging enabled |
| NGFW — enterprise profile | 130 GbpsFirewall, Application Control and IPS, with logging enabled |
| Firewall — enterprise profile | 365 Gbps |
| TLS Threat Prevention — web mix | 14,6 GbpsRFC 9411 web mix; not equivalent to the Enterprise Threat Prevention test |
| VPN AES-GCM — laboratory | 103 Gbps1452-byte packets; RFC conditions from the datasheet |
| New connections — laboratory | 1.250.000 por segundo |
| Processing | 64 physical cores / 128 logical cores |
| Interfaces and expansion | 7 network slots; card options: 8 × 1/10 GbE, 4 × 10/25 GbE or 2 × 40/100 GbE; dedicated management and synchronisation |
| Memory | 128 GB Base; 192 GB Plus; up to 256 GB |
| Storage | Base: 1 960 GB NVMe SSD; Plus: 2 960 GB NVMe SSDs |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.
Documents and references
- Complex projects require more than knowledge of a single technology.
- Better decisions begin with a better understanding of the environment.
- The network that connects the business must be ready to support it.
- Cloud is not where the infrastructure is. It is how it was architected to operate.
- Connectivity is necessary. Controlling every communication is security.
- Security designed to protect what keeps your business running.
- Check Point Force 29100 — Datasheet
- Check Point Firewall 19000 and 29000 — Getting Started Guide
- Official manufacturer page