Check Point 29200
2U data centre firewall with 75 Gbps Threat Prevention and seven expansion slots.
Overview
The Force 29200 has the highest threat prevention capacity among the Force appliances in this catalogue. It provides 64 physical cores, up to 256 GB of memory and seven network card slots. The datasheet lists 1.5 million new connections per second and 18.6 Gbps in the TLS web mix test. Configuration, optics and clustering must be defined together to carry and inspect the expected traffic. Selection criteria: Consider this model for large traffic concentrations and high session creation rates, with seven slots to distribute links. Use the 18.6 Gbps TLS web mix reference; the generic TLS figure in the consulted edition has ambiguous units/formatting. Plan for a 2U rack and power: the published maximum consumption is 999 W under manufacturer conditions. Performance note: Manufacturer reference values measured with different test profiles. Actual capacity varies with traffic, version, memory, blades, TLS inspection and policy. Do not add throughput figures together or use interface speed as prevention capacity. Manufacturer image; interface configuration may vary by SKU.
Key features
- Threat prevention and application controlFirewall, application and URL control, IPS, Anti-Bot/Antivirus and DNS protection according to the contracted package. Source: https://www.checkpoint.com/downloads/products/quantum-force-29200-datasheet.pdf
- VPN and HTTPS inspectionSite-to-site VPN and remote access; HTTPS inspection and SandBlast according to licence and configuration. Source: https://www.checkpoint.com/downloads/products/quantum-force-29200-datasheet.pdf
- Availability and Maestro architectureClusterXL/VRRP, BGP/OSPF routing and configuration options for Maestro. Source: https://www.checkpoint.com/downloads/products/quantum-force-29200-datasheet.pdf
- Dedicated management and synchronisationDedicated management and synchronisation interfaces allow redundant bonds; LOM is optional in Base. Source: https://sc1.checkpoint.com/documents/Appliances/GSG_19000_29000/EN/Content/Topics-GSG-19000-29000/Appliances-Hardware.htm
Technical specifications
| Form factor | Rack 2U |
|---|---|
| Threat Prevention — enterprise profile | 75 GbpsEnterprise; maximum memory; Firewall, Application Control, URL Filtering, IPS, Anti-Malware and SandBlast, with logging enabled |
| NGFW — enterprise profile | 165 GbpsFirewall, Application Control and IPS, with logging enabled |
| Firewall — enterprise profile | 500 Gbps |
| TLS Threat Prevention — web mix | 18,6 GbpsRFC 9411 web mix; not equivalent to the Enterprise Threat Prevention test |
| VPN AES-GCM — laboratory | 130 Gbps1452-byte packets; RFC conditions from the datasheet |
| New connections — laboratory | 1.500.000 por segundo |
| Processing | 64 physical cores / 128 logical cores |
| Interfaces and expansion | 7 network slots; card options: 8 × 1/10 GbE, 4 × 10/25 GbE or 2 × 40/100 GbE; dedicated management and synchronisation |
| Memory | 128 GB Base; 192 GB Plus; up to 256 GB |
| Storage | Base: 1 960 GB NVMe SSD; Plus: 2 960 GB NVMe SSDs |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.
Documents and references
- Complex projects require more than knowledge of a single technology.
- Better decisions begin with a better understanding of the environment.
- The network that connects the business must be ready to support it.
- Cloud is not where the infrastructure is. It is how it was architected to operate.
- Connectivity is necessary. Controlling every communication is security.
- Security designed to protect what keeps your business running.
- Check Point Force 29200 — Datasheet
- Check Point Firewall 19000 and 29000 — Getting Started Guide
- Official manufacturer page