Checkpoint IP397

Checkpoint IP397 Overview:

Proven for years in complex networking and performance demanding environments, Check Point IP Appliances™ offer customers integrated turnkey security functionality such as firewall, VPN, and intrusion prevention across a wide range of models.

Optimized for Check Point Security Gateway software, the IP Appliances offer unsurpassed scalability, high performance, manageability, and high port densities that reduces operational costs in complex, mission-critical security environments. IP Appliances enable customers to extend unified security architecture from the network core out to branch and remote offices.

The IP397 provides the intuitive out-of-box experience needed by medium businesses, but also provides the sophisticated management and security large businesses need for remote campuses, large branch offices and internal network segmentation. It includes seven software blades for high performance and unrivaled security: Firewall, Application Control, Identity Awareness, IPSec VPN, Advanced Networking, Acceleration & Clustering, and IPS.

Base Configuration

• Onboard 4 ports of 10/100/1000Base-T; up to 8 gigabit ports
• 2 PMC expansion slots used for optional network interface cards
• Onboard PCMCIA carrier
• Onboard VPN chip
• Console port
• Auxiliary port (RJ45)
• Single AC power
• 80 GB HDD
• RAM
  • Flash version : 1 GB DRAM (max 2 GB, 1 GB compact flash
  • Disk version: 1 GB DRAM (max 2 GB), 1 GB compact flash

Benefits

• Highly versatile appliance providing multi-gigabit performance in small form factor for small to medium and distributed enterprise
• Modular design with PMC slots for supporting optional network interface cards
  • Support for WAN T1 interface
• Onboard hardware-based VPN acceleration to meet high VPN performance needs
• Slide-out tray for low MTTS
• Flexible architecture to expand appliance to meet growing business needs
  • Optional software blades extend security

Features:

Accelerated Data Path (ADP) Modules
Check Point Accelerated Data (ADP) modules are hardware options that can be inserted into IP Appliances to improve traffic performance and extend appliance utilization. With ADP, CPU workloads can be shared between the main processor and the ADP module processor to increase performance without having to completely replace existing hardware.

Advanced Routing and Networking
Advanced routing and networking supports a broad range of traffic types, including PIM, RIP, OSFP, and BGP, and enables remote troubleshooting, capacity planning, and configuration management. Advanced routing and networking supports a broad range of traffic types, including PIM, RIP, OSFP, and BGP, and enables remote troubleshooting, capacity planning, and configuration management.

High Performance and High Availability Clustering
To help ensure business continuity and balanced performance, several high availability solutions are available for IP appliances. Virtual Router Redundancy Protocol (VRRP) and patented IP Appliance clustering technology provide robust and scalable high availability for IP appliances. These technologies allow several independent IP appliances to join together for a common security goal as one virtual machine.

Network Voyager
Check Point Network Voyager offers web-based configuration, monitoring and management, allowing network administrators to manage IP Appliances remotely through a feature rich GUI. From the Network Voyager interface, administrators can easily manage hardware, OS and application deployment, networking, routing, troubleshoot systems or optimize a configuration, manage high availability, set role-based administration and monitor network traffic and IP appliance health.

Interface Options
Check Point IP Appliances support a large portfolio of interface options including copper and fiber Ethernet with a range of port density and performance options of up to 10 Gbps and T1 WAN. They also come with storage options: HDD, flash or hybrid.

Carrier Grade Serviceability and Redundancy
Optionally available IP appliance clustering enables maintenance updates through workload redistribution. Administrators can perform transparent "rolling upgrades," in which nodes are gracefully removed from the cluster, upgraded, and reinserted, all without any disruption to end-user operations.

Other features include:

• Hot swappable hard drives, fans, and power supplies available in some models
• Easy access design (slide out trays, slide in cards)
• Retrofit ADP modules to extend the appliance's performance
• DC power supplies available in some models

Integrated into flexible Software Blade Architecture
The Check Point Software Blade architecture is the first and only security architecture that delivers complete, flexible and manageable security to companies of any size. With unprecedented flexibility and expandability, Software Blades deliver lower cost of ownership and cost-efficient protection that meet any need, today and in the future.

Full integration into the modular Software Blade Architecture allows for rapid and easy activation on any Check Point security gateway.

All IP appliances include Firewall, IPSec VPN, IPS, Application Control, Identity Awareness, Acceleration & Clustering and Advanced Networking Software Blades.

The IP Appliance comes with a pre-configured set of Software Blades. It can be quickly and easily extended to meet new and evolving security requirements with additional Check Point Software Blades such as the Web Security Software Blade and VoIP Software Blade. collapse

Specifications:

1. PMC Expansion Slots for Optional Network Interface Cards
2. Console Port
3. Auxiliary Port (RJ45)
4. Onboard Single Slot PCMCIA Carrier
5. Base Configuration includes 4 Port 10/100/1000 Base-T management Ports
6. Slide-Out Tray

¹ Optional
² IP395 can go to 50° C

IP Appliances Performance
	IP282	IP297	IP397	IP567	IP697	IP1287	IP2457
Firewall Throughput	1.5Gbps	1.5Gbps	3.0Gbps	7Gbps	7.2Gbps 11.7Gbps1	10.3Gbps 17.5Gbps1	11Gbps 30Gbps1
VPN Throughput	1.0Gbps	1.0Gbps	677Mbps	1.7Gbps	1.9Gbps 3.3Gbps1	1.9Gbps 8.3Gbps1	1.9Gbps 8.3Gbps1
IPS Throughput	1.4Gbps	1.4Gbps	2.9Gbps	2.9Gbps	4Gbps	7Gbps	9Gbps
Concurrent Sessions	900,000	900,000	1M	1M	1M	1M	1M
VLANS	10242	10242	10242	10242	10242	10242	10242
ADP Module	-	-	-	-	*	*	*
VPN Acceleration	*	*

¹ - Performance without ADP and with ADP
² - Maximum of 256 VLANs per interface
- Included
* - Optional

IP Appliances Software Specifications
	IP282	IP297	IP397	IP567	IP697	IP1287	IP2457
Software Edition	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75	R65, R70, R71, R75
Firewall
IPsec VPN
Application Control	*
IPS	*
Identity Awareness	*
Acceleration & Clustering	*
Advanced Networking	*
Web Security	*	*	*	*	*	*	*
Voice over IP	*	*	*	*	*	*	*

- Included
* - Optional

Documentation:

Download the Check Point IP397 Appliances Datasheet (PDF).