Check Point UTM-1 Edge Series Industrial Appliances

Check Point UTM-1 Edge Series Industrial Overview:

VPN-1® UTM Edge™ Industrial is a unified threat management (UTM) appliance that combines antivirus, firewall, intrusion prevention, and VPN technologies to protect networked industrial equipment from unauthorized access and attack. VPN-1 UTM Edge Industrial appliances comply with industrial mechanical specifications for dust, heat, and vibration, maximizing durability in harsh environments.

Your Challenge:

You need to establish secure and scalable communications with the machines on the production floor using traditional data networks. However, you are concerned about the security for critical equipment and need a reliable security gateway that can withstand exposure to varying temperatures and vibrations while stopping attacks.

Our Solution:

VPN-1® UTM Edge™ Industrial unified threat management (UTM) appliances combine antivirus, firewall, intrusion prevention, and VPN technologies to protect networked industrial equipment on the production floor from unauthorized access and attack. VPN-1 UTM Edge Industrial appliances comply with industrial mechanical specifications for dust, heat, and vibration, maximizing durability in harsh environments. And they can be managed by Check Point SMART™ (Security Management Architecture) management solutions, including SmartDefense™ Services, which protect against new threats by providing real-time defense updates and configuration advisories.

Features & Benefits:

Product Features:

• Integrated antivirus, intrusion prevention, firewall, and VPN
• Centralized, large-scale management
• Industrial enclosure with flexible mounting and power input options

Product Benefits:

• Provides robust security and connectivity
• Simplifies deployment and management
• Maximizes durability in extreme industrial environments

Robust Mechanical Design:

The solid-state design of VPN-1 UTM Edge Industrial appliances has no moving parts that could wear out over time, and it has flexible mounting options such as DIN rail, rack, and wall mounting. VPN-1 UTM Edge Industrial appliances also support 110-220V AC, 24V DC, and 5V DC power input, which allow the device to be easily integrated into most industrial environments.

Reliable Security for Industrial Networks:

VPN-1 UTM Edge Industrial appliances secure all common IP services with Check Point-patented Stateful Inspection and Application Intelligence™ technologies. More than 150 predefined applications, services, and protocols are also supported out-of-the-box, including instant messaging, multimedia services, peer-to-peer applications, Voice over Internet Protocol (VoIP), and Web applications. The appliances include 802.1x port-based authentication, enabling organizations to control network access to machines based on endpoint security policy compliance and user access privileges.

High Availability:

VPN-1 UTM Edge Industrial appliances support dual WAN connections to ensure constant connectivity. With support for dialup backup, these gateways can fail over to a standby dialup or cellular network connection by using an external serial or USB modem, in case the primary connection goes down. For complete redundancy, automatic failover is also supported across two VPN-1 UTM Edge Industrial gateways.

Dynamic Networks:

In addition to acting as full-feature firewall routers, VPN‑1 UTM Edge Industrial appliances can operate in transparent bridge mode, allowing a network segment or machine on the production floor to be isolated from other networks within minutes, without reconfiguring IP addresses. By supporting the Spanning Tree Protocol (IEEE 802.1d), multiple VPN-1 UTM Edge Industrial bridge devices can work together and interoperate with Ethernet bridges and switches in a fully redundant topology.

In addition, port- and tag-based VLANs can be defined, enabling the securing of multiple isolated network zones by a single security device.

For complex routed networks, VPN-1 UTM Edge Industrial appliances support Open Shortest Path First (OSPF) dynamic routing. This enables easy deployment across multiple sites and reduces the configuration cost of keeping manufacturing sites current with frequent corporate network changes.

Preemptive Defenses Against Attacks:

VPN-1 UTM Edge Industrial appliances include SmartDefense, Check Point’s integrated intrusion prevention capability, to provide preemptive network- and application-layer security for machines. This ensures that critical equipment is protected from worms, viruses, DoS and DDoS assaults, and other known and unknown attacks. SmartDefense prevents the critical equipment from having to be taken offline or becoming damaged due to worms or viruses entering the network. It also minimizes the need to invest in standalone intrusion prevention systems (IPS) at the edge of the network. With the SmartDefense wizard, administrators can ensure correct configuration simply and effectively.

Integrated Gateway Antivirus for In-depth Defense:

Integrated gateway antivirus protection is included with VPN-1 UTM Edge Industrial appliances to provide an extra layer of defense against worms and viruses before they can enter the network. VPN-1 UTM Edge Industrial appliances provide streaming antivirus protection that can accommodate files of unlimited size without affecting network performance. Machines can be configured to automatically receive antivirus signature updates, along with real-time security updates and configuration advisories from SmartDefense Services.

VPN Connectivity, Communities:

With corporations turning to virtual private networks (VPNs) to link manufacturing sites and offices, VPN-1 UTM Edge Industrial appliances ensure communications privacy with hardware-accelerated IPSec VPN, which offers strong encryption and authentication.

Check Point simplifies VPN setup with VPN communities, enabling organizations to add new sites easily with reduced deployment time and errors. By defining a VPN community, organizations can quickly configure all gateways within a VPN in one step.

Smart Management:

VPN-1 UTM Edge Industrial appliances can be managed via Provider-1®, SmartCenter™ UTM, or SmartCenter Power, which includes SmartLSM™ template-based management for quick, large-scale deployment. These management applications are part of the Check Point SMART security management architecture.

SMART provides unified security architecture for enterprises down to mid-size businesses. It also enables convenient and consistent security definition for the entire network—perimeter, internal, Web, and endpoint security—from a single, centralized management console.

Specifications:

 

UTM-1 Edge Industrial:
Physical Attributes
Dimensions (width x height x depth)	200 x 32 x 128 mm (7.87 x 1.26 x 5.04 inches)
Weight	Without DIN rail adapter: 650 g (1.43 lbs) With DIN rail adapter: 750 g (1.65 lbs)
Retail box dimensions (width x height x depth)	290 x 250 x 76 mm (11.42 x 3.14 x 9.84 inches)
Retail box weight	1.35 kg (2.98 lbs)
24V DC Power Input
Power Supply Nominal Output	+24V DC @ 0.6A
Max. Power Consumption	9W 14W (including USB devices)
5V Power Supply Unit
Power Supply Nominal Input	9W 100 ~ 240 VAC; 47 ~ 63Hz
Power Supply Nominal Output	+5V DC @ 3A
Max. Power Consumption	9W 14W (including USB devices)
EMI
Power Supply Nominal Input	9W 100 ~ 240 VAC; 47 ~ 63Hz
Max. Power Consumption	9W 14W (including USB devices)
EMI
Standard	Description	Comments
CISPR 22 EN 55022	Radiated and Conducted EMI Limits	Class B
EN 61000-3-2	Harmonic current emission	Class A
EN 61000-3-3	Voltage fluctuations & flicker	Pst Measurement: 0.001, Limit: 1.0 Plt Measurement: 0.001, Limit: 0.65 Tdt (ms) Measurement: 0, Limit: 500 dmax (%) Measurement: 0, Limit: 4% dc (%)Measurement: 0, Limit: 3.3%
EN 55024	Immunity
IEC 61000-4-2	Electrostatic Discharge (ESD)	8 kV air discharge, 4 kV Contact discharge, Performance Criterion B
IEC 61000-4-3	Radiated, radio-frequency, electromagnetic field immunity	80-1000 MHz, 3 V/m, 80% AM (1 kHz), Performance Criterion A
IEC 61000-4-4	Electrical fast transient / burst immunity	AC Power line: 1 kV, DC Power line: 0.5 kV Signal line: 0.5 kV Performance Criterion B
IEC 61000-4-5	Surge immunity	1.2/50 us Open Circuit Voltage, 8/20 us Short Circuit Current AC Power Line: line to line 1 kV, line to earth 2 kV DC Power Line: line to earth 0.5 kV Signal line: 1 kV Performance Criterion B
IEC 61000-4-6	Immunity to conducted disturbances, induced by radio-frequency fields	0.15-80 MHz, 3 Vrms, 80% AM, 1 kHz, Performance Criterion A
IEC 61000-4-8	Power frequency magnetic field immunity.	50 Hz, 1 A/m, Performance Criterion A
IEC 61000-4-11	Voltage dips, short interruptions and voltage variations immunity	i) >95% reduction -0.5 period, Performance Criterion B ii) 30% reduction – 25 period, Performance Criterion C Voltage Interruptions: i) >95% reduction – 250 period, Performance Criterion C
Safety
Standard	Description
EN 60950-1	Safety of Information Technology Equipment
Reliability
Standard	Description	Comments
EN 300 019-2-1 T1.2	Environment (Storage)	Low Temperature: -5°C, 72 Hours High Temperature: 55°C, 72 Hours Humidity: 30°C, 93%, 96 Hours Sine Vibration: 5-62-200Hz/5°/s,2g,1 octave/minute, 5 cycles/axis, 96 hours Random Vibration: 5-10-50-100Hz/+12dB-0.0002g2/Hz - 12dB, 30 minutes/axis, 3 hours
EN 300 019-2-2 T2.3	Environment (Transportation)	Low Temperature: -40°C, 72 Hours High Temperature: 70°C, 72 Hours Temperature Change: -40°C~+30°C, 3 hours dwell, 5 cycles, 1°C/minute Humidity: 40°C, 93%, 96 Hours Humidity Cycling: 40°C, 95%, 2 cycles Water: 0.01m3/minute, 90 Kpa, 15 minutes Random Vibration: 5-20-200Hz/0.01g2/Hz - 3dB, 30 minutes/axis, 1.5 hours Bump: 6ms, 18g, 100 bumps per face Drop: 100 cm, 1 corner, 3 edges and 6 face
EN 300 019-2-3 T3.2	Environment (Operational)	Low Temperature: -5°C, 16 Hours (with cold start test) High Temperature: 55°C, 16 Hours (with hot start test) Temperature change: 25°C~+55°C, 3 hours dwell, 5 cycles, 0.5°C/minute, 30 hours Humidity: 30°C, 93%, 96 Hours Humidity Cycling: 55°C, 50~95%, 1 cycles Sine Vibration: 5-62-200Hz/5°/s-0.2g,1 octave/minute, 5 cycles/axis, X, Y and Z axes, 6 hours Random Vibration: 5-10-50-100Hz/+12dB-0.0002g2/Hz - 12dB, 30 minutes/axis, X, Y and X axes, 1.5 hours Shock: Half-sine, 11ms, 3g, 6 shocks per axis
Extended Temperatures	Extended Temperatures Test	Temperature change: -20°C~+ 55°C, 12 cycles, 72 hours, with cold start / hot start test. Low temperature: -20°C, 24 hours High temperature: 55°C, 24 hours
MTBF	370,000 hours	Telcordia (Bellcore) model, SR-332, with Hirschmann RPS30 Industrial 24V DC power supply.
Environment
Standard	Description
RoHS	EC Directive on Restriction of Hazardous Substances
WEEE	EC Directive on Waste Electrical and Electronic Equipment (WEEE)

Documentation:

Download the Check Point UTM-1 Edge Industrial Datasheet (PDF).

Support Options:

Check Point UTM-1 Total Security 1-Year Model Support Options:

• Standard Support available at 10% of list per year
• Premium Support available at 15% of list per year

Check Point UTM-1 Total Security 3-Year Model Support Options:

• Standard Support available at 6% of list per year
• Premium Support available at 10% of list per year

	Standard	Premium	Diamond/ Sapphire	Premium 4H on-site**
Support Time	9 x 5 Business Day	24 x 7 Every Day	24 x 7 Every Day	24 x 7 Every Day
Latest Hot Fixes & Service Packs	Yes	Yes	Yes	Yes
Major Upgrades & Enhancements	Yes	Yes	Yes	Yes
Access to Online Support Knowledgebase	Advanced	Advanced	Expert	Advanced
Unlimited Service Requests	Yes	Yes	Yes	Yes
Hardware Warranty	3 Years	3 Years	3 Years	3 Years
Committed Response time to Severity-1 issues	4 Hours	30 Minutes	30 Minutes	30 Minutes
Committed Response time to Severity 2,3,4 issues	4 Hours	4 Hours	4 Hours	4 Hours
Issues open with	Standard Support Desk	Premium Support Desk	Designated Engineer	Premium Support Desk
RMA Determination	Support Engineer	Support Engineer	Customer	Support Engineer
Shipment & Delivery SLA	Next business day shipment, delivery usually within 2-3 business days	Same business day shipment, Next business day delivery target*	As in Premium/Premium 4hrs (if purchased)	24x7; Qualified engineer will arrive on-site within 4 hours to handle RMA
* For RMA (Return Material Authorization) determination completed by 15:00 regional hub time, otherwise shipment will occur next business day with delivery target extended by one day. There are four regional hubs, one located in each of the following: U.S., APAC, Europe and Israel. Next day delivery during weekends is possible at no extra charge upon request. ** This service is available at selected locations. Please verify availability for your location before purchasing this service level.