Checkpoint Power-1 9070

Checkpoint Power-1 9070 Overview:

Check Point Power-1™ appliances enable organizations to maximize security in high-performance environments such as large campuses or data centers. They combine firewall, IPSec VPN, and intrusion prevention with advanced acceleration technologies, delivering a high-performance security platform for multi-Gbps environments.

Industry-leading firewall:	VPN/firewall protection secures hundreds of applications and protocols including VoIP, instant messaging (IM), and peer-to-peer (P2P) applications
VPN (site-to-site, remote access):	Feature-rich, easy-to-configure IPSec and SSL VPNs*
Centralized, multi-site management:	Streamlines policy management for all sites via single console
Intrusion prevention system (IPS):	Advanced IPS with both signature- and protocol-anomaly-based detection
High availability, load balancing, and dynamic routing:	Reliability for critical applications and sites
Web application security*:	Protection against Web attacks such as buffer overflow, SQL injection and cross-site scripting
Web filtering*:	Best-of-breed Web filtering protects against threats such as spyware, viruses, and inappropriate Web content
Messaging security, including email security and anti-spam*:	Protection against the three major messaging attack vectors: spam, malware delivered in messages, and attacks against the messaging infrastructure

*Available as an optional license.

Features & Benefits:

Key Benefits:

• Ensures availability of business-critical applications with up to 14 Gbps throughput and intrusion prevention throughput up to 6.1 Gbps
• Streamlines deployment of enterprise security for large offices and data centers
• Provides comprehensive security that is extensible on demand to include SSL VPNs, Web security, Web filtering, antivirus, anti-spyware, and anti-spam Simplifies administration with a single management console for all sites
• Protects against emerging threats with optional SmartDefense Services subscription

Security for High-Performance Environments

Proven application control: Power-1 appliances include technology from VPN-1®, the most proven VPN/firewall available. They can examine hundreds of applications, protocols, and services out of the box. As new applications and network-layer threats appear, Power-1 appliances can be updated to add more security features.

Integrated intrusion prevention: The integrated SmartDefense IPS utilizes signature- and protocol-anomaly-based intrusion prevention to protect business-critical services like FTP, HTTP, and VoIP from known and unknown attacks. Similarly, Power-1 can control policy for applications such as IM and P2P. Additionally, Web Intelligence™ Web application security can be added to block attacks such as buffer overflows, SQL injection, and crosssite scripting.

 SmartDefense intrusion prevention stops attacks against advanced applications such as SIP-based VoIP.

SmartDefense Services enable you to configure Power-1 into a preemptive security solution, capable of ensuring your networks are safe from new attacks via ongoing and automatic defense updates.

Power-1 appliances can also be easily expanded to add optional security features such as antivirus, anti-spyware and anti-spam protections.

Advanced acceleration technologies:

To ensure a high service level for business applications, Power-1 appliances include software-based acceleration technologies. These technologies accelerate network-layer functions, such as firewall access control, and application layer functions, such as intrusion prevention. Power-1 appliances currently deliver firewall throughput of up to 14 Gbps and intrusion prevention throughput of up to 6.1 Gbps. The key to achieving these numbers is the combination of patented Check Point acceleration technologies and the underlying state-of-the-art hardware designed for performance:

• CoreXL™ multi-core acceleration is the first security technology designed to fully leverage multi-core processors. It does this by sharing security inspection duties throughout all cores.
• SecureXL™ security acceleration accelerates security inspection by removing the latency introduced as network traffic passes through a security device
• ClusterXL™ enables near-linear performance increases by clustering together multiple systems running VPN-1

These three technologies work together to fully accelerate security inspection along a unified path that ensures both high performance and high security.

Integrated Smartdefense Intrusion Prevention:

SmartDefense performance improves with patented security acceleration technologies from Check Point.

Data center reliability:

Power-1 includes technologies to ensure availability of services and applications. Multiple Power-1 appliances can be clustered together to improve performance as well as provide a high level of resilience. Each appliance has integrated dynamic routing to increase reliability of connections. Power-1 appliances also include integrated Quality of Service (QoS). Applications or users can be given priority to ensure proper performance. For example, multimedia applications can be prioritized over non-time-sensitive applications such as email.

Powerful site-to-site connectivity:

Power-1 appliances can be linked to form advanced virtual networks through IPSec VPNs. Manual setup of VPN tunnels is replaced by a One-Click process, where new sites are added automatically. These VPNs can include other Check Point solutions or can be linked to third-party solutions to simplify the transition to your Check Point infrastructure.

Secure, flexible remote access:

Power-1 appliances can connect employees and business partners to your trusted network through flexible remote access, clients. For on-demand access, Power-1 appliances can be extended with optional licenses for SSL VPN remote access.

Single management console:

Power-1 is managed from the Check Point SmartCenter™ management server, enabling you to centrally manage security policy for all sites with a single management console. Using this unified management, you can define a cohesive, comprehensive security policy for a distributed architecture across your entire environment. For auditing purposes, all logs can be centrally viewed in a single interface.

Single console for multi-site management of all security functions

Model Comparison:

 

	Power-1 5070	Power-1 9070
Software Edition	NGX R65 XL***	NGX R65 XL***
10/100 Ports	-	-
10/100/1000 Ports	10/14	14/18
Firewall Throughput	9 Gbps	14 Gbps
VPN Throughput	2.4 Gbps	3.7 Gbps
Concurrent Sessions	1.1 Million	1.1 Million
Licensed Users	Unlimited	Unlimited
VLANs	256	256
UTM out of the box	Optional	Optional
Security Acceleration	Yes	Yes
Integrated Multisite Management	Optional**	Optional**
Storage	160 GB	2 x 160 GB
Enclosure	2U	2U
Dimensions (standard)	17 x 20 x 3.46 in.	17 x 20 x 3.46 in.
Dimensions (metric)	431 x 509.5 x 88mm	431 x 509.5 x 88mm
Weight	14.5kg (31.9lbs)	16.5kg (36.3lbs)
Operating Environment	Temperature: 5° to 40° C, Humidity: 10%-85% non-condensing, Altitude: 2,500m
Power Input	100~240V, 50~60Hz*	100~240V, 50~60Hz*
Power Consumption	250W (Max)	400W (Max)
* Redundant Power Supply ** Resides on separate server *** XL=Security/Acceleration Technologies

Specifications:

POWER-1 SECURITY SPECIFICATIONS:
Firewall:
Protocol/application support	Secures more than 200 applications and protocols
VoIP protection	SIP, H.323, MGCP, and SIP with NAT support
Instant Messaging control	MSN, Yahoo, ICQ, and Skype (including over HTTP and SSL)
Peer-to-peer blocking	Kazaa, Gnutella, BitTorrent, eMule, IRC (including over HTTP)
Network Address Translation	Static/hide NAT support with manual or automatic rules
IPSec VPN:
Encryption support	AES 128–256 bit, 3DES 56–168 bit
Authentication methods	Password, RADIUS, TACACS, X.509, SecurID
Certificate authority	Integrated X.509 certificate authority
VPN communities	Automatically sets up site-to-site connections when objects are created
Topology support	Star and mesh
Route-based VPN	Utilizes virtual tunnel interfaces, numbered/unnumbered interfaces
VPN agent	Check Point Endpoint Security™, VPN-1 SecureClient™, VPN-1 SecuRemote®
SSL VPN:
SSL-based remote access	Fully integrated SSL VPN gateway provides on-demand SSL-based remote access
SSL-based endpoint scanning	Scans endpoint for compliance/malware prior to admission to the network
Network-layer protection	Blocks attacks such as DoS, port scanning, IP/ICMP/TCP-related
Application-layer protection	Blocks attacks such as DNS cache poisoning, FTP bounce, improper commands, and more
Detection methods	Signature- and protocol-anomaly based
Networking:
Dynamic routing support	OSPF, BGP, RIP v1 and 2, Multicast: PIM-SM, PIM-DM, DVMRP
DHCP support	SecurePlatform™ DHCP server and relay
ISP redundancy	Protocol-based, source/destination, and port route decisions
Performance and availability:
High availability	Active/passive and active/active
Load balancing	Integrated ClusterXL® smart load balancing
Quality of Service	FloodGate-1® for granular QoS
ISP redundancy	Automatically reroutes traffic to second interface
Traffic acceleration	SecureXL™ accelerates security decisions
Multi-core acceleration	CoreXL™ balances security decisions across multiple cores

Documentation:

Download the Check Point Power-1 Appliances Datasheet (PDF).