Checkpoint IP1287

Checkpoint IP1287 Overview:

Proven for years in complex, high-performance networking environments, Check Point IP Appliances™ offer integrated turnkey security functionality such as firewall, VPN, and intrusion prevention across a wide range of models.

The Check Point IP1287 is purpose-built for Check Point Security Gateway Software Blade Architecture, and is custom engineered to support the highest performance and flexibility in today’s mission-critical security environments. The IP1287 offers the lowest possible TCO through a combination of unsurpassed scalability, high performance, redundancy, manageability, and high port densities. Using just a two-rack-unit (2RU) form factor, the IP1287 security platform features a quad-core Intel Xeon™ processor, and is designed to provide investment protection by allowing customers to boost performance with the addition of an Accelerated Data Path (ADP) module when network demands increase.

Base Configuration

• Single Quad Core CPU
• 4 x 10/100/1000 Base-T interfaces for management and synchronization
• Five front-facing PMC/XMC expansion slots
• Console port
• Auxiliary ports (RJ45 and USB)
• Built-in VPN encryption acceleration module
• Dual hot swappable AC or DC power (for load-sharing and redundancy)
• Front-facing HDD slots
• Hard drive and RAM
  • HDD-Based System
    • 80 GB HDD
    • 4 GB DRAM, 128 MB compact fl ash
  • Flash-Based System
    • 4GB compact flash
    • 4 GB DRAM

Benefits

• Integrated security appliances based on Check Point Software Blade Architecture for fast, flexible deployment of security functionality
• Scalable, modular appliance with multiple acceleration and interface options (including ADP modules) for guaranteed investment protection
• Enterprise-class high availability, load sharing, and fault tolerance to ensure network resiliency and business continuity 
• Carrier-grade serviceability and redundancy for easy upgrades
• Streamlined advanced management tools for efficient installation, configuration, and maintenance

Features:

Accelerated Data Path (ADP) Modules
Check Point Accelerated Data (ADP) modules are hardware options that can be inserted into IP Appliances to improve traffic performance and extend appliance utilization. With ADP, CPU workloads can be shared between the main processor and the ADP module processor to increase performance without having to completely replace existing hardware.

Advanced Routing and Networking
Advanced routing and networking supports a broad range of traffic types, including PIM, RIP, OSFP, and BGP, and enables remote troubleshooting, capacity planning, and configuration management. Advanced routing and networking supports a broad range of traffic types, including PIM, RIP, OSFP, and BGP, and enables remote troubleshooting, capacity planning, and configuration management.

High Performance and High Availability Clustering
To help ensure business continuity and balanced performance, several high availability solutions are available for IP appliances. Virtual Router Redundancy Protocol (VRRP) and patented IP Appliance clustering technology provide robust and scalable high availability for IP appliances. These technologies allow several independent IP appliances to join together for a common security goal as one virtual machine.

Network Voyager
Check Point Network Voyager offers web-based configuration, monitoring and management, allowing network administrators to manage IP Appliances remotely through a feature rich GUI. From the Network Voyager interface, administrators can easily manage hardware, OS and application deployment, networking, routing, troubleshoot systems or optimize a configuration, manage high availability, set role-based administration and monitor network traffic and IP appliance health.

Interface Options
Check Point IP Appliances support a large portfolio of interface options including copper and fiber Ethernet with a range of port density and performance options of up to 10 Gbps and T1 WAN. They also come with storage options: HDD, flash or hybrid.

Carrier Grade Serviceability and Redundancy
Optionally available IP appliance clustering enables maintenance updates through workload redistribution. Administrators can perform transparent "rolling upgrades," in which nodes are gracefully removed from the cluster, upgraded, and reinserted, all without any disruption to end-user operations.

Other features include:

• Hot swappable hard drives, fans, and power supplies available in some models
• Easy access design (slide out trays, slide in cards)
• Retrofit ADP modules to extend the appliance's performance
• DC power supplies available in some models

Integrated into flexible Software Blade Architecture
The Check Point Software Blade architecture is the first and only security architecture that delivers complete, flexible and manageable security to companies of any size. With unprecedented flexibility and expandability, Software Blades deliver lower cost of ownership and cost-efficient protection that meet any need, today and in the future.

Full integration into the modular Software Blade Architecture allows for rapid and easy activation on any Check Point security gateway.

All IP appliances include Firewall, IPSec VPN, IPS, Application Control, Identity Awareness, Acceleration & Clustering and Advanced Networking Software Blades.

The IP Appliance comes with a pre-configured set of Software Blades. It can be quickly and easily extended to meet new and evolving security requirements with additional Check Point Software Blades such as the Web Security Software Blade and VoIP Software Blade. collapse

Specifications:

1. Optional redundant hard disk drives w/carriers
2. Console port
3. Auxiliary port
4. USB port
5. PMC expansion slot for optional PMC or XMC network interface cards
6. Management and sync ports
7. Optional PMC/XMC network interface cards (6U carrier is needed) or ADP module (comes with carrier)
8. Optional PMC/XMC network interface cards (6U carrier is needed) or ADP module (comes with carrier)
9. Slide-out chassis tray

¹ Optional
² IP395 can go to 50° C

IP Appliances Performance
	IP282	IP297	IP397	IP567	IP697	IP1287	IP2457
Firewall Throughput	1.5Gbps	1.5Gbps	3.0Gbps	7Gbps	7.2Gbps 11.7Gbps1	10.3Gbps 17.5Gbps1	11Gbps 30Gbps1
VPN Throughput	1.0Gbps	1.0Gbps	677Mbps	1.7Gbps	1.9Gbps 3.3Gbps1	1.9Gbps 8.3Gbps1	1.9Gbps 8.3Gbps1
IPS Throughput	1.4Gbps	1.4Gbps	2.9Gbps	2.9Gbps	4Gbps	7Gbps	9Gbps
Concurrent Sessions	900,000	900,000	1M	1M	1M	1M	1M
VLANS	10242	10242	10242	10242	10242	10242	10242
ADP Module	-	-	-	-	*	*	*
VPN Acceleration	*	*

¹ - Performance without ADP and with ADP
² - Maximum of 256 VLANs per interface
- Included
* - Optional

IP Appliances Software Specifications
	IP282	IP297	IP397	IP567	IP697	IP1287	IP2457
Software Edition	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75
Firewall
IPsec VPN
Application Control	*
IPS	*
Identity Awareness	*
Acceleration & Clustering	*
Advanced Networking	*
Web Security	*	*	*	*	*	*	*
Voice over IP	*	*	*	*	*	*	*

- Included
* - Optional

Documentation:

Download the Check Point IP1287 Appliances Datasheet (PDF).