Check Point Quantum Force 9100
Enterprise Perimeter Security Gateway

Check Point Quantum Force 9100 Security Gateway

Check Point Products

Check Point Quantum Force Security Gateway Appliances

Quantum Force 9100 Base Configuration
1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync port, on-board 8x RJ45 ports, 16 GB RAM, 1x 480 GB SSD SATA, 2x AC PSUs, fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year

#CPAP-SG9100-SNBT
Get a Quote!

Quantum Force 9100 Plus Configuration
1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync port, on-board 8x RJ45 ports, 8x 1/10GbE SFP+ ports, 32 GB RAM, 1x 480 GB SSD SATA, 2x AC PSUs, Lights-Out Management (LOM), fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year

#CPAP-SG9100-PLUS-SNBT
Get a Quote!

Quantum Force 9100 Maestro / MHS HyperScale Configuration
1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync port, on-board 8x RJ45 ports, 4x 10/25GbE SFP+ ports, 32 GB RAM, 1x 480 GB SSD SATA, 2x AC PSUs, Lights-Out Management (LOM), 2x 25GbE DAC 3M, fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year

#CPAP-SG9100-PLUS-MHS-SNBT
Get a Quote!

Click here to jump to more pricing!

Overview

Features

Specifications

Subscription Services

Documentation

Overview:

Quantum 9100 firewalls deliver up to 55 Gbps of firewall and 4.95 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency and space savings in a modular 1 RU platform.

Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.

Fastest AI-Powered Threat Prevention

Network Resilience & Power Efficiency

Unified Security Management

Quantum Secure the Network

Top Security Effectiveness
Check Point #1 for the 2nd year in a row with 99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024)
Named a Leader by Top Analyst Firms
Forrester Wave for Zero Trust Platform Providers, Q3 2023 Gartner Firewall Magic Quadrant (2022)
AI/ML powered Threat Prevention
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks
Hyperscale Network Security
On-demand expansion, load balancing firewall clustering, and resilient access to mission-critical applications
Unified Management and Ops Efficiency
Increase protection and reduce TCO with a consolidated security architecture

Features:

AI-Powered advanced security and uncompromising performance, built for perimeter applications

Quantum Force 9100 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. One network I/O slot can be configured to fit your network with a high port density of up to 8x1/10G or 4x10/25G port capacity.

Comprehensive and Industry-Leading Security

Next Generation Firewall
Site-to-Site and Remote Access VPN
Application and Web Filtering
Intrusion Prevention
Antivirus and Anti-Bot
Advanced DNS Security
Sandboxing with file sanitization
Zero-phishing (no agent required)

Highest Performance Threat Prevention

With the 9100, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 4.95 Gbps of threat prevention throughput or up to 80 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.

Modular, High Port Density 1RU Chassis

The 9100 offers the flexibility to fit your changing network requirments. Populate the network I/O slots with your choice of network cards: 8x1/10G, 4x10/25G.

Power Efficient, Resilient Design

With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors.

Flexible, High Performance HTTPS Inspection

While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Businesses need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizeable dynamic security policies.

Specifications:

Enterprise Testing Conditions¹
Threat Prevention²	4.95 Gbps
NGFW³	18.6 Gbps
IPS Throughput	25.7 Gbps
Firewall Throughput	55 Gbps
RFC 3511, 2544, 2647, 1242 Performance (LAB)
Firewall 1518B UDP	80 Gbps
Firewall Latency (avg)	10μSec
VPN AES-GCM 1452B	22.1 Gbps
Connections per Second	190,000
Concurennt Connections	2.75M Base / 7.27M Plus / 16.2M Max
HTTP/TLS Inspection Performance
Threat Prevention^1,2	2.96 Gbps
Threat Prevention² web mix⁴	1.6 Gbps
IPS web mix⁴	2.3 Gbps
Additional Features
Highlights	CPU: 4 physical cores, total of 8 logical cores Storage: 1 SSD 480GB SATA 2x Internal AC power supply 16 to 64 GB memory options Lights-Out-Management card – optional (included in Plus package)
Network Expansion Slot Options	8 x 1/10GBASE-F SFP+ port card 4 x 10/25GBASE-F SFP28 port card
Network
Network Connectivity	802.3ad passive and active link aggregation Layer 2 (transparent) and Layer 3 (routing) mode
High Availability	Active/Active L2, Active/Passive L2 and L3 Session failover for routing change, device and link failure ClusterXL or VRRP
IPv6	NAT66, NAT64, NAT46 CoreXL, SecureXL, HA with VRRPv3
Unicast and Multicast Routing (see SK98226)	OSPFv2 and v3, BGP, RIP Static routes, Multicast routes Policy-based routing PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
Power Requirements
Single Power Supply rating AC	200W
AC power input	100 to 240VAC (47-63Hz)
Power consumption max	84.4W /140.8W
Maximum thermal output AC	480.1BTU/s
Dimensions
Enclosure	1RU
Dimensions (WxDxH)	17.2 x 20 x 1.73 in.(438 x 508 x 44mm)
Weight	14.8 kg
Environmental Conditions
Operating	0° to 40°C, humidity 5% to 95
Storing	–20° to 70°C, humidity 5% to 95% at 60°C
MTBF	> 10 years
Certifications
Safety	CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
Emissions	CE, FCC IC, VCCI, ASNZS ACMA
Environmental	RoHS, REACH, WEEE, ISO14001

¹ Enterprise traffic profile measured with maximum memory
² Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast (Incl. DNS Security & Zero Phishing) with logging enabled
³ Includes Firewall, App Control and IPS with logging enabled
⁴ Web traffic mix is based on RFC 9411 (NetSecOpen) web traffic profile

	Firewall VS	Firewall + IPS VS	Next Gen Threat Prevention VS
Base model	48	24	9
Plus model	48	24	12
Max capacity	48	24	12
Maestro / MHS	48	24	12

Ordering Quantum Force 9100 Security Gateway

The 9100 includes 1x RJ45 (1 GbE copper) management port plus an additional 1x RJ45 (1 GbE copper) port for synchronization when using the 9100 PLUS in a cluster. With one network I/O slot, modify the base or plus configuration to meet your networking requirements.

	On-Board¹ RJ45	1/10 GbE fiber	10/25 GbE Fiber	Memory	Redundant Power	Redundant Storage	LOM
Base model	10	0	0	16 GB	Yes	N/A	N/A
Plus model	10	8	0	32 GB	Yes	N/A	Yes
Max capacity	10	8	4	64 GB	Yes	N/A	Yes
Maestro / MHS	10	0	4	32 GB	Yes	N/A	Yes

¹ The RJ45 port count includes the Management & Sync ports

Subscription Services:

Service	Services Highlights
Next-Gen Firewall (NGFW): segment networks and apply zero trust policy with IPS	Accept, prevent, schedule, and apply traffic-shaping based controls to application traffic 10,000+ pre-defined apps or customize your own application Protect vulnerable systems with 12,000+ IPS protections
Next-Gen Threat Prevention (NGTP): AI Deep Learning DNS security with antivirus and anti-bot prevents threats	DNS security prevents Command & Control (C2) connections and blocks data theft through DNS tunneling Antivirus stops incoming malicious files and links in web, email, FTP and SMB content Anti-Bot detects infected hosts and prevents communications with external C2 servers Apply web and application control using 100+ categories or customize your own
SandBlast (SNBT): comprehensive, multi-layered defense with sandboxing protection from unknown and zero-day threats	Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds CPU-level, OS-level and static file analysis Maximal file size for Emulation is 15MB
IoT Network Protection: simple, effective, autonomous discovery and protection of IoT devices in minutes	Passive and active discovery of enterprise IoT devices with autonomous mapping to 200+ profiles IoT attributes include function, manufacturer, model, risk, confidence, VLAN, IP and MAC address Automatically creates and applies an inline zero-trust IoT policy layer
SD-WAN: reliable and optimum network connectivity at the lowest cost	Link aggregation and link prioritization according to latency, jitter, and packet loss Advanced multi-path orchestration and steering for 10,000+ apps Sub-second failover for overlay and supported applications SLA monitoring and autonomous link swapping

	NGFW	NGTP	SNBT
Application Control
IPS
URL Filtering
Anti-Bot
Anti-Virus
Anti-Spam
DNS Security
SandBlast Threat Emulation (sandboxing)
SandBlast Threat Extraction (CDR)
Zero Phishing
IoT Network Protection	Optional	Optional	Optional
SD-WAN Network Optimization	Optional	Optional	Optional

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years. Optional security capabilities can be ordered a-la-carte or separately.

Documentation:

Download the Check Point Quantum Force 9100 Security Gateway Datasheet (PDF).

Pricing Notes:

Pricing and product availability subject to change without notice.

Check Point Products

Check Point Quantum Force Security Gateway Appliances

#CPAP-SG9100-SNBT
Get a Quote!

#CPAP-SG9100-PLUS-SNBT
Get a Quote!

#CPAP-SG9100-PLUS-MHS-SNBT
Get a Quote!

Quantum Force 9100 Maestro / MHS HyperScale Configuration with 1 MHO-140 orchestrator and 2 Quantum Force 9100 appliances
Each appliance includes 1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync port, on-board 8x RJ45 ports, 4x 10/25GbE SFP+ ports, 32 GB RAM, 1x 480 GB SSD SATA, 2x AC PSUs, Lights-Out Management (LOM), 2x 25GbE DAC 3M, fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year

#CPAP-MHS-9102-PLUS-SNBT
Get a Quote!

Quantum Force 9100 Maestro / MHS HyperScale Configuration with 1 MHO-140 orchestrator and 3 Quantum Force 9100 appliances
Each appliance includes 1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync port, on-board 8x RJ45 ports, 4x 10/25GbE SFP+ ports, 32 GB RAM, 1x 480 GB SSD SATA, 2x AC PSUs, Lights-Out Management (LOM), 2x 25GbE DAC 3M, fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year

#CPAP-MHS-9103-PLUS-SNBT
Get a Quote!

Security Subscription Services

Next Generation Threat Prevention & SandBlast package for 1 year for Quantum Force 9100 appliance

#CPSB-SNBT-9100-1Y
Get a Quote!

Next Generation Threat Prevention package for 1 year for Quantum Force 9100 appliance

#CPSB-NGTP-9100-1Y
Get a Quote!

Next Generation Firewall Package for 1 year for Quantum Force 9100 appliance

#CPSB-NGFW-9100-1Y
Get a Quote!

Quantum IoT Network Protection for 1 year for Quantum Force 9100 appliances

#CPSB-IOTP-9100-1Y
Get a Quote!

Quantum SD-WAN subscription for 1 year for Quantum Force 9100 appliances

#CPSB-SDWAN-9100-1Y
Get a Quote!

Data Loss Prevention (DLP) blade for 1 year for Quantum Force 9100 appliances

#CPSB-DLP-9100-1Y
Get a Quote!

Check Point Quantum Force 9100 Enterprise Perimeter Security Gateway