Check Point 9100
1U enterprise firewall with 6.5 Gbps Threat Prevention and network expansion up to 25 GbE.
Overview
The Force 9100 is an entry-level option for rack-mounted enterprise perimeters. It has eight built-in Gigabit RJ45 interfaces and one slot for adding 1/10 GbE or 10/25 GbE fibre. Memory can expand from 16 GB to 64 GB, and both Base and Plus include two internal AC power supplies. Maestro projects require the appropriate interface and software configuration. Selection criteria: Suitable for perimeter deployments using the 6.5 Gbps prevention reference, without assuming that result under every policy. Choose the card for the single slot between 1/10 GbE density and 10/25 GbE connectivity. Reserve compatible card interfaces for Maestro; the built-in ports cannot be used in that mode. Performance note: Manufacturer reference values measured with different test profiles. Actual capacity varies with traffic, version, memory, blades, TLS inspection and policy. Do not add throughput figures together or use interface speed as prevention capacity. Compatibility and limitations: In Maestro, use only ports on compatible cards; built-in ports cannot be used.
Key features
- Threat prevention and application controlFirewall, application and URL control, IPS, Anti-Bot/Antivirus and DNS protection according to the contracted package. Source: https://www.checkpoint.com/downloads/products/quantum-force-9100-datasheet.pdf
- VPN and HTTPS inspectionSite-to-site VPN and remote access; HTTPS inspection and SandBlast according to licence and configuration. Source: https://www.checkpoint.com/downloads/products/quantum-force-9100-datasheet.pdf
- ClusterXL and dynamic routingClusterXL/VRRP and BGP/OSPF routing; the package and version determine available services. Source: https://www.checkpoint.com/downloads/products/quantum-force-9100-datasheet.pdf
- LOM remote managementLights-Out Management is optional in Base and included in Plus. Source: https://sc1.checkpoint.com/documents/Appliances/GSG_9000/EN/Content/Topics-GSG-9000/Appliances-Hardware.htm · https://www.checkpoint.com/downloads/products/quantum-force-9100-datasheet.pdf
Technical specifications
| Form factor | Rack 1U |
|---|---|
| Threat Prevention — enterprise profile | 6,5 GbpsEnterprise; maximum memory; Firewall, Application Control, URL Filtering, IPS, Anti-Malware and SandBlast, with logging enabled |
| NGFW — enterprise profile | 18,6 GbpsFirewall, Application Control and IPS, with logging enabled |
| Firewall — enterprise profile | 55 Gbps |
| TLS Threat Prevention — web mix | 1,6 GbpsRFC 9411 web mix; not equivalent to the Enterprise Threat Prevention test |
| VPN AES-GCM — laboratory | 22,1 Gbps1452-byte packets; RFC conditions from the datasheet |
| New connections — laboratory | 190.000 por segundo |
| Processing | 4 physical cores / 8 logical cores |
| Interfaces and expansion | 8 built-in RJ45 1 GbE interfaces; separate 1 GbE management and Sync; 1 expansion slot with SFP+ 1/10 GbE or SFP28 10/25 GbE options |
| Memory | 16 GB Base; 32 GB Plus; up to 64 GB |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.
Documents and references
- Complex projects require more than knowledge of a single technology.
- Better decisions begin with a better understanding of the environment.
- The network that connects the business must be ready to support it.
- Cloud is not where the infrastructure is. It is how it was architected to operate.
- Connectivity is necessary. Controlling every communication is security.
- Security designed to protect what keeps your business running.
- Check Point Force 9100 — Datasheet
- Check Point Firewall 9000 — Getting Started Guide
- Official manufacturer page