Check Point 9700
1U firewall with two network slots, 20 Gbps Threat Prevention and memory expansion up to 128 GB.
Overview
The Force 9700 serves higher-capacity perimeters while retaining a 1U footprint. It combines 16 physical cores with two network slots, allowing fibre cards to be distributed according to the project's links. Plus adds memory, a second NVMe SSD, a second power supply and Lights-Out Management. The TLS web mix test records 5.8 Gbps prevention throughput, a specific reference for encrypted traffic inspection. Selection criteria: Prioritise two slots when port distribution requires more flexibility than the 9400. Compare Base and Plus for SSD/power supply redundancy and remote management, as well as RAM. Validate 5.8 Gbps TLS web mix and session peaks before sizing solely on firewall throughput. Performance note: Manufacturer reference values measured with different test profiles. Actual capacity varies with traffic, version, memory, blades, TLS inspection and policy. Do not add throughput figures together or use interface speed as prevention capacity. Compatibility and limitations: In Maestro, use only ports on compatible cards; built-in ports cannot be used.
Key features
- Threat prevention and application controlFirewall, application and URL control, IPS, Anti-Bot/Antivirus and DNS protection according to the contracted package. Source: https://www.checkpoint.com/downloads/products/quantum-force-9700-datasheet.pdf
- VPN and HTTPS inspectionSite-to-site VPN and remote access; HTTPS inspection and SandBlast according to licence and configuration. Source: https://www.checkpoint.com/downloads/products/quantum-force-9700-datasheet.pdf
- ClusterXL and dynamic routingClusterXL/VRRP and BGP/OSPF routing; the package and version determine available services. Source: https://www.checkpoint.com/downloads/products/quantum-force-9700-datasheet.pdf
- LOM remote managementLights-Out Management is optional in Base and included in Plus. Source: https://sc1.checkpoint.com/documents/Appliances/GSG_9000/EN/Content/Topics-GSG-9000/Appliances-Hardware.htm · https://www.checkpoint.com/downloads/products/quantum-force-9700-datasheet.pdf
Technical specifications
| Form factor | Rack 1U |
|---|---|
| Threat Prevention — enterprise profile | 20 GbpsEnterprise; maximum memory; Firewall, Application Control, URL Filtering, IPS, Anti-Malware and SandBlast, with logging enabled |
| NGFW — enterprise profile | 57,6 GbpsFirewall, Application Control and IPS, with logging enabled |
| Firewall — enterprise profile | 129 Gbps |
| TLS Threat Prevention — web mix | 5,8 GbpsRFC 9411 web mix; not equivalent to the Enterprise Threat Prevention test |
| VPN AES-GCM — laboratory | 75 Gbps1452-byte packets; RFC conditions from the datasheet |
| New connections — laboratory | 535.000 por segundo |
| Processing | 16 physical cores / 32 logical cores |
| Interfaces and expansion | 4 built-in RJ45 1 GbE and 4 built-in SFP+ 1/10 GbE interfaces; separate 1 GbE management and Sync; 2 expansion slots with options up to 40/100 GbE |
| Memory | 32 GB Base; 64 GB Plus; up to 128 GB |
| Storage | Base: 1 960 GB NVMe SSD; Plus: 2 960 GB NVMe SSDs |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.
Documents and references
- Complex projects require more than knowledge of a single technology.
- Better decisions begin with a better understanding of the environment.
- The network that connects the business must be ready to support it.
- Cloud is not where the infrastructure is. It is how it was architected to operate.
- Connectivity is necessary. Controlling every communication is security.
- Security designed to protect what keeps your business running.
- Check Point Force 9700 — Datasheet
- Check Point Firewall 9000 — Getting Started Guide
- Official manufacturer page