Check Point Quantum Force 19100 Security Gateway

Overview:

Quantum 19100 firewalls deliver up to 200 Gbps of firewall and 28.8 Gbps of threat prevention throughput with integrated AI/ML security, power efficiency and space savings in a modular 2 RU platform.

Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced attacks before they can infect their target. And manage your on-premises and cloud firewalls from a unified platform.

Fastest AI-Powered Threat Prevention

Network Resilience & Power Efficiency

Unified Security Management

Quantum Secure the Network

Top Security Effectiveness
Check Point #1 for the 2nd year in a row with 99.8% malware block rate in Miercom Next-Generation Firewall Security Benchmark (2024)
Named a Leader by Top Analyst Firms
Forrester Wave for Zero Trust Platform Providers, Q3 2023 Gartner Firewall Magic Quadrant (2022)
AI/ML powered Threat Prevention
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks
Hyperscale Network Security
On-demand expansion, load balancing firewall clustering, and resilient access to mission-critical applications
Unified Management and Ops Efficiency
Increase protection and reduce TCO with a consolidated security architecture

Features:

AI-Powered advanced security and uncompromising performance, built for perimeter applications

Quantum Force 19100 data center firewalls deliver high threat prevention performance in a small 2 RU form factor to protect employees, networks, and data from cyber-theft. Four network I/O slots can be configured to fit your network with a high port density of up to 8x1/10GbE, 4x10/25GbE or 2x40/100GbE port capacity.

Comprehensive and Industry-Leading Security

Next Generation Firewall
Site-to-Site and Remote Access VPN
Application and Web Filtering
Intrusion Prevention
Antivirus and Anti-Bot
Advanced DNS Security
Sandboxing with file sanitization
Zero-phishing (no agent required)

Highest Performance Threat Prevention

With the 19100, organizations can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 28.8 Gbps of threat prevention throughput or up to 800 Gbps of UDP 1518B firewall throughput with a single 2RU firewall.

Modular, High Port Density 2RU Chassis

The 19100 offers the flexibility to fit your changing network requirments. Populate four network I/O slots with your choice of network cards: 8x1/10G, 4x10/25G or 2x40/100G. In addition, the 40/100 card benefits for ASIC based firewall acceleration.

Power Efficient, Resilient Design

With a low power consumption per Gbps of threat prevention throughput, these large enterprise firewalls cut power costs in half when compared with similar firewalls from other vendors. Dual, redundant hot-swap power supplies and dual 960 GB RAID-1 NVMe storage provides complete redundancy.

Flexible, High Performance HTTPS Inspection

While commonly used for good, HTTPS traffic can also hide illegal user activity and malicious traffic. Enterprises need the ability to inspect a broad range of encrypted TLS 1.3 and HTTP/2 channels while also excluding inspection of sensitive regulated industry traffic, such as Health Care and Financial. Check Point makes it easy to fine-tune HTTPS security using customizeable dynamic security policies.

Specifications:

Enterprise Testing Conditions¹
Threat Prevention²	28.8 Gbps
NGFW³	90 Gbps
IPS Throughput	130 Gbps
Firewall Throughput	200 Gbps
RFC 3511, 2544, 2647, 1242 Performance (LAB)
Firewall 1518B UDP	800 Gbps
Firewall Latency (avg)	1.85μSec
VPN AES-GCM 1452B	75.3 Gbps
Connections per Second	750,000
Concurennt Connections	12.4M Base / 20M Plus / 31M Max
HTTP/TLS Inspection Performance
Threat Prevention^1,2	14.1 Gbps
Threat Prevention² web mix⁴	10.2 Gbps
IPS web mix⁴	12.9 Gbps
Additional Features
Highlights	CPU: 32 physical cores, total of 64 logical cores Storage: BASE x 1 SSD 960GB NVMe, PLUS x 2 SSD 960GB NVMe 2x AC power supplies 96 and 128 GB memory options Lights-Out-Management card (included in Plus package)
Network Expansion Slot Options	8 x 1/10GBASE-F SFP+ port card, up to 32 ports 4 x 10/25GBASE-F SFP28 port card, up to 18 ports 2 x 40/100GBASE-F QSFP28 port card, up to 8 ports
Network
Network Connectivity	Integrated SD-WAN network optimization and resilience Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems) 802.3ad passive and active link aggregation Layer 2 (transparent) and Layer 3 (routing) mode
High Availability	Active/Active L2, Active/Passive L2 and L3 Session failover for routing change, device and link failure ClusterXL or VRRP
IPv6	NAT66, NAT64, NAT46 CoreXL, SecureXL, HA with VRRPv3
Unicast and Multicast Routing (see SK98226)	OSPFv2 and v3, BGP, RIP Static routes, Multicast routes Policy-based routing PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
Power Requirements
Single Power Supply rating AC	850W, DC: 1600W
AC power input	100 to 240VAC (47-63Hz), -36~-70VDC
Power consumption max	360W/600W
Maximum thermal output AC	2047BTU/h
Dimensions
Enclosure	2RU
Dimensions (WxDxH)	17.25 x 24 x 3.5 in. (442 x 610 x 88mm)
Weight	36.3 lbs. (16.5 kg)
Environmental Conditions
Operating	0° to 40°C, humidity 5% to 95
Storing	–20° to 70°C, humidity 5% to 95% at 60°C
MTBF	> 10 years
Certifications
Safety	CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
Emissions	CE, FCC IC, VCCI, ASNZS ACMA
Environmental	RoHS, REACH, WEEE, ISO14001

¹ Enterprise traffic profile measured with maximum memory
² Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast (Incl. DNS Security & Zero Phishing) with logging enabled
³ Includes Firewall, App Control and IPS with logging enabled
⁴ Web traffic mix is based on RFC 9411 (NetSecOpen) web traffic profile

	Firewall VS	Firewall + IPS VS	Next Gen Threat Prevention VS
Base model	300	160	62
Plus model	300	160	80
Max capacity	300	160	80
Maestro / MHS	300	160	80

Ordering Quantum Force 19100 Security Gateway

The 19100 includes 2x 1/10 copper GbE management ports plus an additional 2x 1/10/25 SFP28 ports for synchronization when using the 19100 in a cluster. With the four network I/O slots, modify the base or plus configuration to meet your networking requirements. The 40/100G ports enable firewall traffic acceleration at line-rate.

	1/10 GbE Copper	1/10 GbE fiber	10/25 GbE Fiber	40/100 GbE Fiber	Memory	Redundant Power	Redundant Storage	LOM
Base model	2	8	0	0	64 GB	Yes	N/A	N/A
Plus model	2	8	4	0	96 GB	Yes	Yes	Yes
Max capacity	2	32	16	8	128 GB	Yes	Yes	Yes
Maestro / MHS	2	0	0	4	128 GB	Yes	Yes	Yes

Subscription Services:

Service	Services Highlights
Next-Gen Firewall (NGFW): segment networks and apply zero trust policy with IPS	Accept, prevent, schedule, and apply traffic-shaping based controls to application traffic 10,000+ pre-defined apps or customize your own application Protect vulnerable systems with 12,000+ IPS protections
Next-Gen Threat Prevention (NGTP): AI Deep Learning DNS security with antivirus and anti-bot prevents threats	DNS security prevents Command & Control (C2) connections and blocks data theft through DNS tunneling Antivirus stops incoming malicious files and links in web, email, FTP and SMB content Anti-Bot detects infected hosts and prevents communications with external C2 servers Apply web and application control using 100+ categories or customize your own
SandBlast (SNBT): comprehensive, multi-layered defense with sandboxing protection from unknown and zero-day threats	Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds CPU-level, OS-level and static file analysis Maximal file size for Emulation is 15MB
IoT Network Protection: simple, effective, autonomous discovery and protection of IoT devices in minutes	Passive and active discovery of enterprise IoT devices with autonomous mapping to 200+ profiles IoT attributes include function, manufacturer, model, risk, confidence, VLAN, IP and MAC address Automatically creates and applies an inline zero-trust IoT policy layer
SD-WAN: reliable and optimum network connectivity at the lowest cost	Link aggregation and link prioritization according to latency, jitter, and packet loss Advanced multi-path orchestration and steering for 10,000+ apps Sub-second failover for overlay and supported applications SLA monitoring and autonomous link swapping

	NGFW	NGTP	SNBT
Application Control
IPS
URL Filtering
Anti-Bot
Anti-Virus
Anti-Spam
DNS Security
SandBlast Threat Emulation (sandboxing)
SandBlast Threat Extraction (CDR)
Zero Phishing
IoT Network Protection	Optional	Optional	Optional
SD-WAN Network Optimization	Optional	Optional	Optional

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years. Optional security capabilities can be ordered a-la-carte or separately.

Documentation:

Download the Check Point Quantum Force 19100 Security Gateway Datasheet (PDF).

Check Point Quantum Force 19100
Enterprise Perimeter Security Gateway

Sorry, this product is no longer available, please contact us for a replacement.