Check Point 3980
1U branch firewall with four 10 GbE SFP+ slots and 7 Gbps Threat Prevention.
Overview
The Force 3980 combines the 30 network interfaces of the 1U design with greater inspection and session-creation capacity. The datasheet records 7 Gbps Threat Prevention and 195 thousand new connections per second in separate tests. Interfaces include Gigabit and 2.5 GbE copper, Gigabit and 10 GbE fibre, with dedicated management and Sync ports. The platform serves branch projects where port counts and processing capacity need to grow together. Selection criteria: Prioritise this model when a branch project requires rack installation, many physical segments and a higher prevention workload. Validate 10 Gbps optics in the four SFP+ slots; do not assume 1 Gbps operation in those slots. Size TLS using the 1.25 Gbps web mix profile and VPN using the actual tunnel scenario. Performance note: Manufacturer reference values measured with different test profiles. Actual capacity varies with traffic, version, memory, blades, TLS inspection and policy. Do not add throughput figures together or use interface speed as prevention capacity. Compatibility and limitations: Maestro is not supported on the 3900 series. DLP inspects HTTP/HTTPS/FTP; it does not provide inspection or policy enforcement for email on these appliances. Manufacturer image; interface configuration may vary by SKU.
Key features
- Threat prevention and application controlFirewall, application and URL control, IPS, Anti-Bot/Antivirus and DNS protection according to the contracted package. Source: https://www.checkpoint.com/downloads/products/quantum-force-3980-datasheet.pdf
- VPN and HTTPS inspectionSite-to-site VPN and remote access; HTTPS inspection and SandBlast according to licence and configuration. Source: https://www.checkpoint.com/downloads/products/quantum-force-3980-datasheet.pdf
- SD-WAN, routing and availabilitySD-WAN available by subscription; dynamic routing and high availability with ClusterXL/VRRP. Source: https://www.checkpoint.com/downloads/products/quantum-force-3980-datasheet.pdf
- Memory and NVMe storageNVMe SSD and 32 GB of RAM in the described hardware. Source: https://www.checkpoint.com/downloads/products/quantum-force-3980-datasheet.pdf
Technical specifications
| Form factor | Rack 1U |
|---|---|
| Threat Prevention — enterprise profile | 7 GbpsEnterprise; maximum memory; Firewall, Application Control, URL Filtering, IPS, Anti-Malware and SandBlast, with logging enabled |
| NGFW — enterprise profile | 20 GbpsFirewall, Application Control and IPS, with logging enabled |
| Firewall — enterprise profile | 40 Gbps |
| TLS Threat Prevention — web mix | 1,25 GbpsRFC 9411 web mix; not equivalent to the Enterprise Threat Prevention test |
| VPN AES-GCM — laboratory | 23 Gbps1452-byte packets; RFC conditions from the datasheet |
| New connections — laboratory | 195.000 por segundo |
| Processing | 8 physical cores |
| Interfaces and expansion | 16 RJ45 1 GbE; 2 RJ45 2.5 GbE; 8 SFP 1 GbE; 4 SFP+ 10 GbE; separate RJ45 1 GbE management and Sync |
| Memory | 32 GB |
| Storage | 480 GB SSD NVMe M.2 |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.
Documents and references
- Complex projects require more than knowledge of a single technology.
- Better decisions begin with a better understanding of the environment.
- The network that connects the business must be ready to support it.
- Cloud is not where the infrastructure is. It is how it was architected to operate.
- Connectivity is necessary. Controlling every communication is security.
- Security designed to protect what keeps your business running.
- Check Point Force 3980 — Datasheet
- Check Point Firewall 3900 — Getting Started Guide
- Official manufacturer page