Checkpoint IP2457

Checkpoint IP2457 Overview:

Proven for years in complex networking and performance demanding environments, Check Point IP Appliances™ offer customers integrated turnkey security functionality such as fi rewall, VPN, and intrusion prevention across a wide range of models.

Optimized for Check Point Security Gateway software, the IP Appliances offer unsurpassed scalability, high performance, manageability, and high port densities that reduces operational costs in complex, mission-critical security environments. IP Appliances enable customers to extend unifi ed security architecture from the network core out to branch and remote offi ces.

Using just a two-rack-unit form factor, IP2457 security platform features a dual quad-core Intel Xeon™ processor, optimized to provide scalability and investment protection by enabling customers to boost performance as needed with the addition of one high port density Accelerated Data Path (ADP) module.

Base Configuration

• Dual Quad Core CPU
• 4 ports of 10/100/1000Base-T; up to 32 maximum GbE ports
• 5 front-facing PMC/XMC expansion slots
• Console port, Auxiliary ports (RJ45 and USB)
• Includes VPN acceleration card
• Dual hot swappable AC or DC power (for load-sharing and redundancy)
• Dual front facing hot swappable HDDs
  • 80 GB HDD (optional 2nd 80GB HDD for RAID 1 disk mirroring)
• Hard drive and RAM
  • HDD-Based System
    • 80 GB HDD
    • 4 GB DRAM, 128 MB compact flash
  • Flash-Based System
    • 4GB compact flash
    • 4 GB DRAM

Benefits

• Integrated security appliances based on Check Point Software Blade Architecture for fast, flexible deployment of security functionality
• Scalable, modular, and configurable security architecture with multiple acceleration (ADP service modules), security, and interface options insures investment protection
• Achieve high performance across a broad spectrum of traffic types
• Enterprise-class high availability, scalability, and fault tolerance to insure network resiliency and business continuity
• Carrier-grade serviceability and redundancy
• Streamlined IT efficiency with advanced management tools for installation, configuration, and maintenance IP Appliances come in six models that deliver security solutions ideal for large enterprises, carrier-grade networks and remote and branch offices.

Features:

Accelerated Data Path (ADP) Modules
Check Point Accelerated Data (ADP) modules are hardware options that can be inserted into IP Appliances to improve traffic performance and extend appliance utilization. With ADP, CPU workloads can be shared between the main processor and the ADP module processor to increase performance without having to completely replace existing hardware.

Advanced Routing and Networking
Advanced routing and networking supports a broad range of traffic types, including PIM, RIP, OSFP, and BGP, and enables remote troubleshooting, capacity planning, and configuration management. Advanced routing and networking supports a broad range of traffic types, including PIM, RIP, OSFP, and BGP, and enables remote troubleshooting, capacity planning, and configuration management.

High Performance and High Availability Clustering
To help ensure business continuity and balanced performance, several high availability solutions are available for IP appliances. Virtual Router Redundancy Protocol (VRRP) and patented IP Appliance clustering technology provide robust and scalable high availability for IP appliances. These technologies allow several independent IP appliances to join together for a common security goal as one virtual machine.

Network Voyager
Check Point Network Voyager offers web-based configuration, monitoring and management, allowing network administrators to manage IP Appliances remotely through a feature rich GUI. From the Network Voyager interface, administrators can easily manage hardware, OS and application deployment, networking, routing, troubleshoot systems or optimize a configuration, manage high availability, set role-based administration and monitor network traffic and IP appliance health.

Interface Options
Check Point IP Appliances support a large portfolio of interface options including copper and fiber Ethernet with a range of port density and performance options of up to 10 Gbps and T1 WAN. They also come with storage options: HDD, flash or hybrid.

Carrier Grade Serviceability and Redundancy
Optionally available IP appliance clustering enables maintenance updates through workload redistribution. Administrators can perform transparent "rolling upgrades," in which nodes are gracefully removed from the cluster, upgraded, and reinserted, all without any disruption to end-user operations.

Other features include:

• Hot swappable hard drives, fans, and power supplies available in some models
• Easy access design (slide out trays, slide in cards)
• Retrofit ADP modules to extend the appliance's performance
• DC power supplies available in some models

Integrated into flexible Software Blade Architecture
The Check Point Software Blade architecture is the first and only security architecture that delivers complete, flexible and manageable security to companies of any size. With unprecedented flexibility and expandability, Software Blades deliver lower cost of ownership and cost-efficient protection that meet any need, today and in the future.

Full integration into the modular Software Blade Architecture allows for rapid and easy activation on any Check Point security gateway.

All IP appliances include Firewall, IPSec VPN, IPS, Application Control, Identity Awareness, Acceleration & Clustering and Advanced Networking Software Blades.

The IP Appliance comes with a pre-configured set of Software Blades. It can be quickly and easily extended to meet new and evolving security requirements with additional Check Point Software Blades such as the Web Security Software Blade and VoIP Software Blade. collapse

Specifications:

1. Optional redundant hard disk drives w/carriers
2. Console port
3. Auxiliary port
4. USB port
5. PMC expansion slot for optional PMC or XMC network interface cards
6. Management and sync ports
7. Optional PMC/XMC network interface cards (6U carrier is needed) or ADP module (comes with carrier)
8. Optional PMC/XMC network interface cards (6U carrier is needed) or ADP module (comes with carrier)
9. Slide-out chassis tray

¹ Optional
² IP395 can go to 50° C

IP Appliances Performance
	IP282	IP297	IP397	IP567	IP697	IP1287	IP2457
Firewall Throughput	1.5Gbps	1.5Gbps	3.0Gbps	7Gbps	7.2Gbps 11.7Gbps1	10.3Gbps 17.5Gbps1	11Gbps 30Gbps1
VPN Throughput	1.0Gbps	1.0Gbps	677Mbps	1.7Gbps	1.9Gbps 3.3Gbps1	1.9Gbps 8.3Gbps1	1.9Gbps 8.3Gbps1
IPS Throughput	1.4Gbps	1.4Gbps	2.9Gbps	2.9Gbps	4Gbps	7Gbps	9Gbps
Concurrent Sessions	900,000	900,000	1M	1M	1M	1M	1M
VLANS	10242	10242	10242	10242	10242	10242	10242
ADP Module	-	-	-	-	*	*	*
VPN Acceleration	*	*

¹ - Performance without ADP and with ADP
² - Maximum of 256 VLANs per interface
- Included
* - Optional

IP Appliances Software Specifications
	IP282	IP297	IP397	IP567	IP697	IP1287	IP2457
Software Edition	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75
Firewall
IPsec VPN
Application Control	*
IPS	*
Identity Awareness	*
Acceleration & Clustering	*
Advanced Networking	*
Web Security	*	*	*	*	*	*	*
Voice over IP	*	*	*	*	*	*	*

- Included
* - Optional

Documentation:

Download the Check Point IP2457 Appliances Datasheet (PDF).