CHECK POINT 5600 NEXT GENERATION SECURITY GATEWAY

FOR THE MID-SIZE ENTERPRISE

The Check Point 5600 Next Generation Security Gateway combines the most comprehensive security protections to safeguard your mid-size enterprise. The 5600 is a 1U Next Generation Security Gateway with one I/O expansion slot for higher port capacity, redundant fans, redundant AC or DC power supply options, a 500GB (HDD) or 240GB (SSD) disk, and optional Lights-Out Management (LOM) for remote management. This powerful Next Generation Security Gateway is optimized to deliver real-world threat prevention to secure your critical assets and environments.

PERFORMANCE HIGHLIGHTS

FirewallIPSNGFW1Threat Prevention2
25Gbps7.8Gbps5.8Gbps3.385Gbps

Performance measured under ideal testing conditions.
1. Includes Firewall, Application Control, and IPS Software Blades.
2. Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection Software Blades using R80.10.

INCLUSIVE HIGH-PERFORMANCE PACKAGE:

Customers with high connection capacity requirements can purchase the affordable High-Performance Package (HPP). This includes the base system plus one 4x 1Gb SFP interface card, transceivers, redundant AC or DC power supplies, Lights-Out-Management and 16 GB of memory for high connection capacity.

BaseHPPMax
1 GbE ports (Copper)101018
1 GbE ports (Fiber)044
10 GbE ports (Fiber)004
Transceivers (SR) 044
RAM8GB16GB32GB
AC or DC Power Units122
Lights Out ManagementOptionalIncludeInclude

PREVENT KNOWN AND ZERO-DAY THREATS:

The 5600 Next Generation Security Gateway protects organizations from both known and unknown threats with Antivirus, Anti-Bot, SandBlast Threat Emulation (sandboxing), and SandBlast Threat Extraction technologies. Furthermore, SandBlast Threat Extraction removes exploitable content, including active content and embedded objects, reconstructs files to eliminate potential threats, and promptly delivers sanitized content to users to maintain business flow.

NGTPNGTX
(SandBlast)
Prevent known threatsPrevent known and zero-day attacks
Firewall
VPN (IPsec)
IPS
Application Control
URL Filtering
Anti-Bot
Anti-Virus
Anti-Spam
SandBlast Threat Emulation
SandBlast Threat Extraction

Performance

Ideal Testing Conditions

  • 25 Gbps of UDP 1518 byte packet firewall throughput
  • 7.8 Gbps IPS
  • 5.8 Gbps of NGFW1
  • 3.385 Gbps of Threat Prevention2
  • 6.5 Gbps of AES-128 VPN throughput
  • 185,000 connections per second, 64 byte response
  • 3.2/6.4/12.8 million concurrent connections, 64 byte response3

Real-World Production Conditions

  • 950 SecurityPower Units
  • 17.5 Gbps of firewall throughput
  • 1.9 Gbps IPS
  • 1.18 Gbps of NGFW1
  • 645 Mbps of Threat Prevention2

Virtual Systems

  • Maximum VS (base/HPP/max memory): 10/20/20

Network

Network Connectivity

  • Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)
  • 802.3ad passive and active link aggregation
  • Layer 2 (transparent) and Layer 3 (routing) mode

High Availability

  • Active/Active and Active/Passive – L3 mode
  • Session failover for routing change, device and link failure
  • ClusterXL or VRRP

IPv6

  • NAT66, NAT64
  • CoreXL, SecureXL, HA with VRRPv3

Unicast and Multicast Routing (see SK98226)

  • OSPFv2 and v3, BGP, RIP
  • Static routes, Multicast routes
  • Policy-based routing
  • PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

Expansion Options

Base Configuration

  • 10 on-board 10/100/1000Base-T RJ-45 ports
  • 1x CPUs, 4x physical cores, 4x virtual cores (total)
  • 8 GB memory (16 and 32 GB options)
  • 1x 500GB (HDD) or 1x 240GB (SSD) drive
  • 1 AC or DC power supply (2 redundant PSU option)
  • Fixed rails (slide rail option)
  • (Lights-Out-Management (LOM) option)

Network Expansion Slot Options (1 slot available)

  • 8x 10/100/1000Base-T RJ45 port card, up to 18 ports
  • 4x 1000Base-F SFP port card, up to 4 ports
  • 4x 10GBase-F SFP+ port card, up to 4 ports

Fail-Open/Bypass Network Options

  • 4x 10/100/1000Base-T RJ45 port card
  • 2x 10GBase-F SFP+ port card

Physical

Power Requirements

  • Single Power Supply Rating: 275W
  • AC power input: 110-240V, (47-63Hz)
  • Power consumption maximum: 87.2W
  • Maximum thermal output: 297.5 BTU/hr

Dimensions

  • Enclosure: 1RU
  • Dimensions (W x D x H): 17.2x20x1.73 in.(437.9x508x44mm)
  • Weight: 17.53 lbs. (7.95 kg)

Environmental Conditions

  • Operating: 0° to 40°C, humidity 5% to 95%
  • Storage: –20° to 70°C, humidity 5% to 95% at 60°C

Certifications

  • Safety: UL, CB, CE, TUV GS
  • Emissions: FCC, CE, VCCI, RCM/C-Tick
  • Environmental: RoHS, REACH1, ISO140011

courtesy by Checkpoint