Check Point Quantum Force 9700
Enterprise Perimeter Security Gateway

Check Point Quantum Force 9700 Security Gateway

Check Point Products

Check Point Quantum Force Security Gateway Appliances

Quantum Force 9700 Base Configuration
1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync port, on-board 4x RJ45 network ports, on-board 4x 1/10GbE SFP+ ports, 32 GB RAM, 1x 960 GB SSD NVMe, 1x AC PSUs, telescopic rails, SandBlast (SNBT) Security Subscription Package for 1 Year

#CPAP-SG9700-SNBT
Get a Quote!

Quantum Force 9700 Plus Configuration
1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync port, on-board 4x RJ45 network ports, on-board 4 x 1/10GbE SFP+ ports, 8 x 1/10GbE SFP+ ports, 64 GB RAM, 2x 960 GB SSD NVMe, 2x AC PSUs, Lights-Out Management (LOM), 2x 25GbE DAC 3M, telescopic rails, SandBlast (SNBT) Security Subscription Package for 1 Year

#CPAP-SG9700-PLUS-SNBT
Get a Quote!

Quantum Force 9700 Maestro / MHS HyperScale Configuration
1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync port, on-board 4x RJ45 network ports, on-board 4 x 1/10GbE SFP+ ports, 4 x 10/25GbE SFP+ ports, 64 GB RAM, 2x 960 GB SSD NVMe, 2x AC PSUs, Lights-Out Management (LOM), 2x 25GbE DAC 3M, telescopic rails, SandBlast (SNBT) Security Subscription Package for 1 Year

#CPAP-SG9700-PLUS-MHS-SNBT
Get a Quote!

Click here to jump to more pricing!

Overview

Features

Specifications

Subscription Services

Documentation

Overview:

Quantum 9700 firewalls deliver up to 129 Gbps of firewall and 16.6 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency and space savings in a modular 1 RU platform.

Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.

Fastest AI-Powered Threat Prevention

Network Resilience & Power Efficiency

Unified Security Management

Quantum Secure the Network

Top Security Effectiveness
Check Point #1 for the 2nd year in a row with 99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024)
Named a Leader by Top Analyst Firms
Forrester Wave for Zero Trust Platform Providers, Q3 2023 Gartner Firewall Magic Quadrant (2022)
AI/ML powered Threat Prevention
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks
Hyperscale Network Security
On-demand expansion, load balancing firewall clustering, and resilient access to mission-critical applications
Unified Management and Ops Efficiency
Increase protection and reduce TCO with a consolidated security architecture

Features:

AI-Powered advanced security and uncompromising performance, built for perimeter applications

Quantum Force 9700 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. One network I/O slot can be configured to fit your network with a high port density of up to 8x1/10G, 4x10/25G or 2x40/100G port capacity.

Comprehensive and Industry-Leading Security

Next Generation Firewall
Site-to-Site and Remote Access VPN
Application and Web Filtering
Intrusion Prevention
Antivirus and Anti-Bot
Advanced DNS Security
Sandboxing with file sanitization
Zero-phishing (no agent required)

Highest Performance Threat Prevention

With the 9700, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 16.6 Gbps of threat prevention throughput or up to 400 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.

Modular, High Port Density 1RU Chassis

The 9700 offers the flexibility to fit your changing network requirments. Populate the network I/O slot with your choice of network cards: 8x1/10G, 4x10/25G or 2x40/100G. In addition, the 40/100 card benefits for ASIC based firewall acceleration.

Power Efficient, Resilient Design

With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors.

Flexible, High Performance HTTPS Inspection

While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Businesses need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizeable dynamic security policies.

Specifications:

Enterprise Testing Conditions¹
Threat Prevention²	16.6 Gbps
NGFW³	57.6 Gbps
IPS Throughput	73.7 Gbps
Firewall Throughput	129 Gbps
RFC 3511, 2544, 2647, 1242 Performance (LAB)
Firewall 1518B UDP	400 Gbps
Firewall Latency (avg)	1.85μSec
VPN AES-GCM 1452B	75 Gbps
Connections per Second	535,000
Concurennt Connections	6.5M Base / 15M Plus / 29M Max
HTTP/TLS Inspection Performance
Threat Prevention^1,2	9.6 Gbps
Threat Prevention² web mix⁴	5.8 Gbps
IPS web mix⁴	7.3 Gbps
Additional Features
Highlights	CPU: 16 physical cores, total of 32 logical cores Storage: BASE x 1 SSD 960GB NVMe, PLUS x 2 SSD 960GB NVMe Power: BASE x 1 External AC PSU, PLUS x 2 External AC PSUs 32 (64 in PLUS model) to 128 GB memory options Lights-Out-Management card – optional (included in Plus package)
Network Expansion Slot Options	8 x 1/10GBASE-F SFP+ port card 4 x 10/25GBASE-F SFP28 port card 2 x 40/100GBASE-F QSFP28 port card
Network
Network Connectivity	802.3ad passive and active link aggregation Layer 2 (transparent) and Layer 3 (routing) mode
High Availability	Active/Active L2, Active/Passive L2 and L3 Session failover for routing change, device and link failure ClusterXL or VRRP
IPv6	NAT66, NAT64, NAT46 CoreXL, SecureXL, HA with VRRPv3
Unicast and Multicast Routing (see SK98226)	OSPFv2 and v3, BGP, RIP Static routes, Multicast routes Policy-based routing PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
Power Requirements
Single Power Supply rating AC	450W
AC power input	100 to 240VAC (47-63Hz)
Power consumption max	224.5W/374.3W
Maximum thermal output AC	1277.1BTU/s
Dimensions
Enclosure	1RU
Dimensions (WxDxH)	17.2 x 20 x 1.73 in.(438 x 508 x 44mm)
Weight	16.9 kg
Environmental Conditions
Operating	0° to 40°C, humidity 5% to 95
Storing	–20° to 70°C, humidity 5% to 95% at 60°C
MTBF	> 10 years
Certifications
Safety	CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
Emissions	CE, FCC IC, VCCI, ASNZS ACMA
Environmental	RoHS, REACH, WEEE, ISO14001

¹ Enterprise traffic profile measured with maximum memory
² Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast (Incl. DNS Security & Zero Phishing) with logging enabled
³ Includes Firewall, App Control and IPS with logging enabled
⁴ Web traffic mix is based on RFC 9411 (NetSecOpen) web traffic profile

	Firewall VS	Firewall + IPS VS	Next Gen Threat Prevention VS
Base model	106	60	20
Plus model	128	64	32
Max capacity	128	64	32
Maestro / MHS	128	64	32

Ordering Quantum Force 9700 Security Gateway

The 9700 includes 1x RJ45 (1 GbE copper) management port plus an additional 1x RJ45 (1 GbE copper) port for synchronization when using the 9700 PLUS in a cluster. With the two network I/O slots, modify the base or plus configuration to meet your networking requirements. The 40/100G ports enable firewall traffic acceleration at line-rate.

	On-Board¹ RJ45	1/10 GbE fiber	10/25 GbE Fiber	40/100 GbE Fiber	Memory	Redundant Power	Redundant Storage	LOM
Base model	6	4	0	0	32 GB	N/A	N/A	N/A
Plus model	6	12	0	0	64 GB	Yes	Yes	Yes
Max capacity	6	20	8	4	128 GB	Yes	Yes	Yes
Maestro / MHS	6	4	4	0	64 GB	Yes	Yes	Yes

¹ The RJ45 port count includes the Management & Sync ports

Subscription Services:

Service	Services Highlights
Next-Gen Firewall (NGFW): segment networks and apply zero trust policy with IPS	Accept, prevent, schedule, and apply traffic-shaping based controls to application traffic 10,000+ pre-defined apps or customize your own application Protect vulnerable systems with 12,000+ IPS protections
Next-Gen Threat Prevention (NGTP): AI Deep Learning DNS security with antivirus and anti-bot prevents threats	DNS security prevents Command & Control (C2) connections and blocks data theft through DNS tunneling Antivirus stops incoming malicious files and links in web, email, FTP and SMB content Anti-Bot detects infected hosts and prevents communications with external C2 servers Apply web and application control using 100+ categories or customize your own
SandBlast (SNBT): comprehensive, multi-layered defense with sandboxing protection from unknown and zero-day threats	Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds CPU-level, OS-level and static file analysis Maximal file size for Emulation is 15MB
IoT Network Protection: simple, effective, autonomous discovery and protection of IoT devices in minutes	Passive and active discovery of enterprise IoT devices with autonomous mapping to 200+ profiles IoT attributes include function, manufacturer, model, risk, confidence, VLAN, IP and MAC address Automatically creates and applies an inline zero-trust IoT policy layer
SD-WAN: reliable and optimum network connectivity at the lowest cost	Link aggregation and link prioritization according to latency, jitter, and packet loss Advanced multi-path orchestration and steering for 10,000+ apps Sub-second failover for overlay and supported applications SLA monitoring and autonomous link swapping

	NGFW	NGTP	SNBT
Application Control
IPS
URL Filtering
Anti-Bot
Anti-Virus
Anti-Spam
DNS Security
SandBlast Threat Emulation (sandboxing)
SandBlast Threat Extraction (CDR)
Zero Phishing
IoT Network Protection	Optional	Optional	Optional
SD-WAN Network Optimization	Optional	Optional	Optional

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years. Optional security capabilities can be ordered a-la-carte or separately.

Documentation:

Download the Check Point Quantum Force 9700 Security Gateway Datasheet (PDF).

Pricing Notes:

Pricing and product availability subject to change without notice.

Check Point Products

Check Point Quantum Force Security Gateway Appliances

#CPAP-SG9700-SNBT
Get a Quote!

#CPAP-SG9700-PLUS-SNBT
Get a Quote!

#CPAP-SG9700-PLUS-MHS-SNBT
Get a Quote!

Quantum Force 9700 Maestro / MHS HyperScale Configuration with 1 MHO-140 orchestrator and 2 Quantum Force 9100 appliances
Each appliance includes 1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync port, on-board 4x RJ45 network ports, on-board 4 x 1/10GbE SFP+ ports, 4 x 10/25GbE SFP+ ports, 64 GB RAM, 2x 960 GB SSD NVMe, 2x AC PSUs, Lights-Out Management (LOM), 2x 25GbE DAC 3M, telescopic rails, SandBlast (SNBT) Security Subscription Package for 1 Year

#CPAP-MHS-9702-PLUS-SNBT
Get a Quote!

Quantum Force 9700 Maestro / MHS HyperScale Configuration with 1 MHO-140 orchestrator and 3 Quantum Force 9100 appliances
Each appliance includes 1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync port, on-board 4x RJ45 network ports, on-board 4 x 1/10GbE SFP+ ports, 4 x 10/25GbE SFP+ ports, 64 GB RAM, 2x 960 GB SSD NVMe, 2x AC PSUs, Lights-Out Management (LOM), 2x 25GbE DAC 3M, telescopic rails, SandBlast (SNBT) Security Subscription Package for 1 Year

#CPAP-MHS-9703-PLUS-SNBT
Get a Quote!

Security Subscription Services

Next Generation Threat Prevention & SandBlast package for 1 year for Quantum Force 9700 appliance

#CPSB-SNBT-9700-1Y
Get a Quote!

Next Generation Threat Prevention package for 1 year for Quantum Force 9700 appliance

#CPSB-NGTP-9700-1Y
Get a Quote!

Next Generation Firewall Package for 1 year for Quantum Force 9700 appliance

#CPSB-NGFW-9700-1Y
Get a Quote!

Quantum IoT Network Protection for 1 year for Quantum Force 9700 appliances

#CPSB-IOTP-9700-1Y
Get a Quote!

Quantum SD-WAN subscription for 1 year for Quantum Force 9700 appliances

#CPSB-SDWAN-9700-1Y
Get a Quote!

Data Loss Prevention (DLP) blade for 1 year for Quantum Force 9700 appliances

#CPSB-DLP-9700-1Y
Get a Quote!

Check Point Quantum Force 9700 Enterprise Perimeter Security Gateway