Check Point Quantum Force 9200 Security Gateway

Overview:

Quantum 9200 firewalls deliver up to 60 Gbps of firewall and 6.6 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency and space savings in a modular 1 RU platform.

Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.

Fastest AI-Powered Threat Prevention

Network Resilience & Power Efficiency

Unified Security Management

Quantum Secure the Network

Top Security Effectiveness
Check Point #1 for the 2nd year in a row with 99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024)
Named a Leader by Top Analyst Firms
Forrester Wave for Zero Trust Platform Providers, Q3 2023 Gartner Firewall Magic Quadrant (2022)
AI/ML powered Threat Prevention
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks
Hyperscale Network Security
On-demand expansion, load balancing firewall clustering, and resilient access to mission-critical applications
Unified Management and Ops Efficiency
Increase protection and reduce TCO with a consolidated security architecture

Features:

AI-Powered advanced security and uncompromising performance, built for perimeter applications

Quantum Force 9200 data center firewalls deliver high threat prevention performance in a small 1 RU form factor to protect employees, networks, and data from cyber-theft. One network I/O slot can be configured to fit your network with a high port density of up to 8x1/10G or 4x10/25G port capacity.

Comprehensive and Industry-Leading Security

Next Generation Firewall
Site-to-Site and Remote Access VPN
Application and Web Filtering
Intrusion Prevention
Antivirus and Anti-Bot
Advanced DNS Security
Sandboxing with file sanitization
Zero-phishing (no agent required)

Highest Performance Threat Prevention

With the 9200, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 4.95 Gbps of threat prevention throughput or up to 80 Gbps of UDP 1518B firewall throughput with a single 1RU firewall.

Modular, High Port Density 1RU Chassis

The 9200 offers the flexibility to fit your changing network requirments. Populate the network I/O slots with your choice of network cards: 8x1/10G, 4x10/25G.

Power Efficient, Resilient Design

With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors.

Flexible, High Performance HTTPS Inspection

While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Businesses need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizeable dynamic security policies.

Specifications:

Enterprise Testing Conditions¹
Threat Prevention²	6.6 Gbps
NGFW³	19 Gbps
IPS Throughput	31 Gbps
Firewall Throughput	60 Gbps
RFC 3511, 2544, 2647, 1242 Performance (LAB)
Firewall 1518B UDP	80 Gbps
Firewall Latency (avg)	9μSec
VPN AES-GCM 1452B	28.6 Gbps
Connections per Second	250,000
Concurennt Connections	2.75M Base / 7.27M Plus / 16.2M Max
HTTP/TLS Inspection Performance
Threat Prevention^1,2	3.6 Gbps
Threat Prevention² web mix⁴	2 Gbps
IPS web mix⁴	2.9 Gbps
Additional Features
Highlights	CPU: 4 physical cores, total of 8 logical cores Storage: 1 SSD 480GB SATA 2x Internal AC power supply 16 to 64 GB memory options Lights-Out-Management card – optional (included in Plus package)
Network Expansion Slot Options	8 x 1/10GBASE-F SFP+ port card 4 x 10/25GBASE-F SFP28 port card
Network
Network Connectivity	802.3ad passive and active link aggregation Layer 2 (transparent) and Layer 3 (routing) mode
High Availability	Active/Active L2, Active/Passive L2 and L3 Session failover for routing change, device and link failure ClusterXL or VRRP
IPv6	NAT66, NAT64, NAT46 CoreXL, SecureXL, HA with VRRPv3
Unicast and Multicast Routing (see SK98226)	OSPFv2 and v3, BGP, RIP Static routes, Multicast routes Policy-based routing PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
Power Requirements
Single Power Supply rating AC	200W
AC power input	100 to 240VAC (47-63Hz)
Power consumption max	84.4W /140.8W
Maximum thermal output AC	480.1BTU/s
Dimensions
Enclosure	1RU
Dimensions (WxDxH)	17.2 x 20 x 1.73 in.(438 x 508 x 44mm)
Weight	14.8 kg
Environmental Conditions
Operating	0° to 40°C, humidity 5% to 95
Storing	–20° to 70°C, humidity 5% to 95% at 60°C
MTBF	> 10 years
Certifications
Safety	CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
Emissions	CE, FCC IC, VCCI, ASNZS ACMA
Environmental	RoHS, REACH, WEEE, ISO14001

¹ Enterprise traffic profile measured with maximum memory
² Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast (Incl. DNS Security & Zero Phishing) with logging enabled
³ Includes Firewall, App Control and IPS with logging enabled
⁴ Web traffic mix is based on RFC 9411 (NetSecOpen) web traffic profile

	Firewall VS	Firewall + IPS VS	Next Gen Threat Prevention VS
Base model	48	24	9
Plus model	48	24	12
Max capacity	48	24	12
Maestro / MHS	48	24	12

Ordering Quantum Force 9200 Security Gateway

The 9200 includes 1x RJ45 (1 GbE copper) management port plus an additional 1x RJ45 (1 GbE copper) port for synchronization when using the 9200 PLUS in a cluster. With one network I/O slot, modify the base or plus configuration to meet your networking requirements.

	On-Board¹ RJ45	1/10 GbE fiber	10/25 GbE Fiber	Memory	Redundant Power	Redundant Storage	LOM
Base model	10	0	0	16 GB	Yes	N/A	N/A
Plus model	10	8	0	32 GB	Yes	N/A	Yes
Max capacity	10	8	4	64 GB	Yes	N/A	Yes
Maestro / MHS	10	0	4	32 GB	Yes	N/A	Yes

¹ The RJ45 port count includes the Management & Sync ports

Subscription Services:

Service	Services Highlights
Next-Gen Firewall (NGFW): segment networks and apply zero trust policy with IPS	Accept, prevent, schedule, and apply traffic-shaping based controls to application traffic 10,000+ pre-defined apps or customize your own application Protect vulnerable systems with 12,000+ IPS protections
Next-Gen Threat Prevention (NGTP): AI Deep Learning DNS security with antivirus and anti-bot prevents threats	DNS security prevents Command & Control (C2) connections and blocks data theft through DNS tunneling Antivirus stops incoming malicious files and links in web, email, FTP and SMB content Anti-Bot detects infected hosts and prevents communications with external C2 servers Apply web and application control using 100+ categories or customize your own
SandBlast (SNBT): comprehensive, multi-layered defense with sandboxing protection from unknown and zero-day threats	Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds CPU-level, OS-level and static file analysis Maximal file size for Emulation is 15MB
IoT Network Protection: simple, effective, autonomous discovery and protection of IoT devices in minutes	Passive and active discovery of enterprise IoT devices with autonomous mapping to 200+ profiles IoT attributes include function, manufacturer, model, risk, confidence, VLAN, IP and MAC address Automatically creates and applies an inline zero-trust IoT policy layer
SD-WAN: reliable and optimum network connectivity at the lowest cost	Link aggregation and link prioritization according to latency, jitter, and packet loss Advanced multi-path orchestration and steering for 10,000+ apps Sub-second failover for overlay and supported applications SLA monitoring and autonomous link swapping

	NGFW	NGTP	SNBT
Application Control
IPS
URL Filtering
Anti-Bot
Anti-Virus
Anti-Spam
DNS Security
SandBlast Threat Emulation (sandboxing)
SandBlast Threat Extraction (CDR)
Zero Phishing
IoT Network Protection	Optional	Optional	Optional
SD-WAN Network Optimization	Optional	Optional	Optional

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years. Optional security capabilities can be ordered a-la-carte or separately.

Documentation:

Download the Check Point Quantum Force 9200 Security Gateway Datasheet (PDF).

Check Point Quantum Force 9200
Enterprise Perimeter Security Gateway

Sorry, this product is no longer available, please contact us for a replacement.