Check Point 23500 Security Appliance
Data center grade security, performance and reliability

Overview:

Large enterprise and data center networks demand uncompromising performance combined with high-reliability and flexible connectivity options. The Check Point 23000 Security Appliances combine the most comprehensive protections with data center-grade hardware to maximize uptime and performance for securing the most demanding large enterprise and data center environments.

Benefits

The most advanced threat prevention security

• Comprehensive protections including firewall, IPS, Application Control, Anti-Bot, AntiVirus, URL Filtering and the award-winning sandboxing technology in Check Point SandBlast
• Next Generation Threat Prevention package provides uncompromising protection against known threats
• SandBlast Threat Prevention provides the most advanced protections against unknown threats, vulnerabilities and zero-day attacks

Complete protection without compromising performance

• Hardware and software optimized to deliver full advanced threat prevention security, including inspecting SSL encrypted traffic
• Up to 3.6 Gbps of real-world threat prevention throughput
• Up to 43 Gbps of real-world firewall throughput

Data center-grade chassis design

• Redundant components such as power supplies, fans and hard drives eliminates downtime
• Centralized control with Lights-Out-Management (LOM) for enhanced serviceability
• High performance package optimizes platform performance
• Flexible I/O including 40 Gigabit Enternet (GbE) port options

Key Features:

All-inclusive security solutions

Check Point 23000 Appliances offer a complete and consolidated security solution available in two complete packages:

• Next Generation Threat Prevention (NGTP): prevent sophisticated cyber threats with IPS, Application Control, Antivirus, Anti-Bot, URL Filtering and Email Security
• SandBlast Threat Prevention (NGTX): advanced next generation zero-day threat prevention, NGTP with Threat Emulation and Threat Extraction

Prevent unknown and zero-day threats

The 23000 appliances protect organizations from both known and unknown threats with Antivirus, Anti-Bot, SandBlast Threat Emulation (sandboxing), and SandBlast Threat Extraction technologies.

As part of the Check Point SandBlast Zero-Day Protection solution, the cloud-based Threat Emulation engine detects malware at the exploit phase, even before hackers can apply evasion techniques attempting to bypass the sandbox. Files are quickly quarantined and inspected, running in a virtual sandbox to discover malicious behavior before it enters your network. This innovative solution combines cloud-based CPU-level inspection and OS-level sandboxing to prevent infection from the most dangerous exploits, and zero-day and targeted attacks.

Furthermore, SandBlast Threat Extraction removes exploitable content, including active content and embedded objects, reconstructs files to eliminate potential threats, and promptly delivers sanitized content to users to maintain business flow.

Inclusive high-performance package

Customers with high connection capacity requirements can purchase the affordable high-performance package. This includes the appliance plus two 4x10Gb SFP+ interface cards, transceivers and 64 GB of memory for high connection capacity.

A reliable and serviceable platform

The Check Point 23000 appliance delivers business continuity and serviceability through features such as hot swappable redundant power supplies, hot-swappable redundant hard disk drives (RAID), redundant fans and an advanced LOM card for out-of-band management. Combined together, these features ensure a greater degree of business continuity and serviceability when these appliances are deployed in the customer’s networks

Remote management and monitoring

A Lights-Out-Management (LOM) card provides out-of-band remote management to remotely diagnose, start, restart and manage the appliance from a remote location. Administrators can also use the LOM web interface to remotely install an OS image from an ISO file.

40GbE Connectivity

High speed connections are essential in modern data center environments, especially those with high-density virtualized servers. If you’re ready to move from 10 to 40 GbE, so are the 23000 Appliances. The Check Point 23000 Appliances let you connect your 10 GbE server uplinks to your 40 GbE core network with up to 4x 40 GbE ports.

Technical Specifications:

Appliance	23500	23800
Performance
SecurityPower	4900	6200
Firewall Throughput (Gbps)
Raw	100	128
Production1	33	43
VPN AES-128 Throughput (Gbps)	23	26
NGTP Throughput (Gbps)
Production1	2.9	3.6
Concurrent Connections (M)2	5/20	10/28
Connections per Second (K)	174	174
Virtual Systems
Max VS Supported (Default/Max)	150/250	250/250
Hardware Specifications (Default/Max)
10/100/1000Base-T Ports	10/42	10/42
1000Base-F SFP Ports	0/20	0/20
10GBase-F-SFP+ Ports	2/20	2/20
40GBase-F SFP+ Ports	0/4	0/4
Memory	16/64	32/64
Storage	2x1TB	2x1TB
I/O Expansion Slots	5	5
Lights-Out-Management	Included	Included
Dimensions
Enclosure	2U	2U
Dimensions (standard wxdxh)	17.4 x 20.84 x 3.46 in.
Dimensions (metric wxdxh)	442 x 529 x 88 mm
Weight	15.8 Kg (34.8 lbs.)
Environment
Operating Environment	0°C - 40°C at 5 - 95% relative humidity
Non-Operating Environment	(-20)°C - 70°C at 5 - 95% relative humidity
Power
Dual, Hot-Swap Power Supplies	Included
Power Input	90 - 264VAC (47-63HZ)
Single Power Supply Rating	800W
Power Consumption (Max)	383W	399W
Certifications
Safety	UL60950-1, CB IEC60950-1, CE LVD EN60950-1, TUV GS
Emissions	CE, FCC, VCCI, RCM/C-Tick
Environmental	RoHS II, *REACH, *ISO14001
1 assumes maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protection 2 performance measured with default/maximum memory

Software Blade	NGTP	NGTX
Firewall
Identity Awareness
IPSec VPN
Advanced Networking & Clustering
Mobile Access 1
IPS
Application Control
URL Filtering
Antivirus
Anti-Bot
Anti-Spam & Email Security
Threat Extraction	*
Threat Emulation	*
DLP	*	*
Management Blades
Network Policy Management
Logging and Status
SmartEvent	*	*
SmartWorkflow	*	*
Monitoring	*	*
Management Portal	*	*
User Directory	*	*
SmartProvisioning	*	*
SmartReporter	*	*
Endpoint Policy Management	*	*
Compliance	*	*
NGTP  = Next Generation Threat Prevention; NGTX  = SandBlast Threat Prevention; - Included * - Optional 1 Five users are included in default package

Documentation:

Download the Check Point 23500 Appliance Datasheet (PDF).

Download the Check Point Comparison Chart: Security Gateway Appliances (PDF).