Appliance Comparison Chart

Transcription

1 Security Gateway Appliances Small-Office Enterprise Grade Production Performance (Security Benchmark - version R77 and later) Security Firewall (Gbps) Firewall and IPS (Mbps) RFC 35, 2544, 2647, 242 Performance Tests (LAB) Firewall Throughput (Gbps) VPN Throughput (Gbps) IPS Recommended Profile (Gbps) Connections Per Second (K) Concurrent Sessions (M) /00/000Base-T/Max Ports 6/6 4/8 8/2 8/2 8/6 000Base-F SFP (MAX Ports) NA GBase-F SFP+ (MAX Ports) NA NA NA NA 2 Expansion Slot 0 FONIC Option No Yes Yes Yes Yes Storage 250 GB 250 GB 250 GB 250 GB 250 GB Memory / Max 2/2 GB 4/4 GB 4/4 GB 4/4 GB 4/8 GB LOM Card NA NA NA NA Included Default/Max VS Supported 3/3 3/3 0/0 0/0 25/25 Enclosure Desktop U U U U Weight 2kg (4.4 lbs) 4kg (8.82 lbs) 7.5kg (6.53 lbs) 7.5kg (6.53 lbs) 7.6kg (6.76 lbs) Dual, Hot-Swappable Supplies No No No No Optional Input VAC, 47-63Hz Single Supply Rating 40W 00W 250W 250W 275W Consumption (Max) 35W 57W 90W 90W 40W DC Option No No No Optional 6 Optional 6 With Security Acceleration Module 2 With memory upgrade and the GAiA OS 3 Not including Security Switch Module Management Ports 4 Per Security Gateway Module 5 Includes 5 AC PSUs or 2 DC PSUs 6 Via a Solutions Center request

2 Security Gateway Appliances continued Data Center Grade Ultra-High End Production Performance (Security Benchmark - version R77 and later) Security Firewall (Gbps) Firewall and IPS (Gbps) RFC 35, 2544, 2647, 242 performance tests (LAB) Firewall Throughput (Gbps) VPN Throughput (Gbps) IPS Recommended Profile (Gbps) Connections Per Second (K) Concurrent Sessions (M) /00/000Base-T/Max Ports 8/6 0/26 4/26 4/26 4/26 000Base-F SFP (MAX Ports) GBase-F SFP+ (MAX Ports) GBase-F MAX Ports NA NA NA NA NA Expansion Slot FONIC Option Yes Yes Yes Yes Yes Storage GB GB 2x500 GB RAID 2x500GB RAID 2x500GB RAID Memory / Max 4/2 GB 4/2 GB 6/2 GB 6/64 GB 6/64 GB LOM Card Included Included Included Included Included Default/Max VS Supported 25/ / / / /250 2 Enclosure U 2U 2U 2U 2U Weight 7.6kg (6.76 lbs) 23.4kg (5.6 lbs) 23.4kg (5.6 lbs) 7.5 kg (38.6 lbs.) 7.5 kg (38.6 lbs.) Hot-Swappable Supplies Optional 2 AC 2 AC 2 AC 2 AC Input VAC, 47-63Hz Single Supply Rating 275W 300W 400W 600W 600W Consumption (Max) 2W 32W 220W 43W 43W DC Option Optional 5 Optional 5 Optional 5 Optional Optional With Security Acceleration Module 2 With memory upgrade and the GAiA OS 3 With 4 x SSM GB per SGM220, 64 GB per SGM260 5 Via a Solutions Center request 2

3 Security Gateway Appliances continued Production Performance (Security Benchmark - version R77 and later) Ultra-High End Security 275/ / / to to Firewall (Gbps) 7./ / /44.5 Up to 40 Up to 20 Firewall and IPS (Gbps) Up to 25 Up to 70 RFC 35, 2544, 2647, 242 performance tests (LAB) Firewall Throughput (Gbps) 50/0 78/0 78/0 Up to 80 Up to 400 VPN Throughput (Gbps) 7/50 / /50 Up to 40 Up to 0 IPS Recommended Profile (Gbps) Up to 44 Up to 30 Connections Per Second (K) 30/300 70/300 98/300 Up to 00 Up to 3000 Concurrent Sessions (M) Up to 80 Up to 20 0/00/000Base-T/Max Ports 3/37 3/37 3/ Base-F SFP (MAX Ports) GBase-F SFP+ (MAX Ports) GBase-F MAX Ports NA NA NA Expansion Slot FONIC Option No No No No No Storage 2x500 GB RAID 2x500GB RAID 2x500GB RAID - - Memory / Max 2/24 GB 6/64 GB 6/64 GB 64/64 GB 4 24/64 GB 4 LOM Card Included Included Included Included Included Default/Max VS Supported 25/ / / / /250 2 Enclosure 2U 2U 2U 6U 5U Weight 26kg (57.4 lbs) 26kg (57.4 lbs) 26kg (57.4 lbs) Max: 38.6kg (84.9 lbs) Max: 65.84kg (45.2 lbs) Hot-Swappable Supplies 2 AC 2 AC 2 AC 3 AC or 2 DC 4 AC or 2 DC Input VAC, 47-63Hz See data sheet Single Supply Rating 90W 200W 200W 200W@0V; 500W@220V With Security Acceleration Module 2 With memory upgrade and the GAiA OS 3 With 4 x SSM GB per SGM220, 64 GB per SGM260 5 Via a Solutions Center request 208V/230V, 0V (USA), 00V (Japan) Consumption (Max) 449W/744W 489W/784W 489W/784W 2300W 4900W DC Option Optional 5 Optional 5 Optional 5 Yes Yes 3

4 SMB and Industrial Production Performance (Security Benchmark) UTM- Edge N Industrial UTM- Edge N 620/20 640/40 680/80 Security Firewall (Mbps) - - Up to 350 Firewall and IPS (Mbps) - - Up to 30 RFC 35, 2544, 2647, 242 performance tests (LAB) Firewall Throughput.0 Gbps.0 Gbps 750 Mbps.0 Gbps.5 Gbps VPN Throughput (Mbps) IPS Recommended Profile (Mbps) AV Throughput (Mbps) Connections Per Second (K) Concurrent Sessions (K) Wireless Option No Yes Yes ADSL2/ADSL2+ (Annex A or B) No Yes Yes 0/00/000Base-T/Max Ports Base-F SFP (MAX Ports) (N ADSL) - VLANs Security Architecture Embedded NGX Embedded NGX Software Blades 3G, 4G Modem Support 3G 3G Yes Recommended Users 8/6/32/Unlimited 8/6/32/Unlimited 0/25/50 Web-based Management Available Available Available Industrial Certifications IEC6850-3, IEEE 63, CISPR Support No No No Enclosure Desktop Desktop Desktop Weight 0.68kg (.49 lbs) 0.7kg (.6lbs).2kg (2.65 lbs) Input AC (00/240V, 50/60Hz), DC (+2V DC@2A, +2 to +60V DC@2A to 0.4A, -48V [email protected]) 00/240V, 50/60Hz 00/240VAC, 50-60Hz Single Supply Rating 24W 24W 2V/2A DC 24W - 2V/2.5A DC 30W (ADSL and Wireless models) Consumption (Max).5W 2W (including USB devices) 6.68W Sizing recommendation based on number of users 4

5 Integrated Appliance Solution (IAS) Appliances Production Performance (Security Benchmark) IAS D IAS D2 IAS D6 IAS D8 IAS M2 IAS M6 IAS M8 IAS R IAS R2 IAS R6 IAS R8 Security Firewall (Gbps) Firewall and IPS (Gbps) RFC 35, 2544, 2647, 242 performance tests (LAB) Firewall Throughput (Gbps) VPN Throughput (Gbps) IPS Recommended Profile 2 (Gbps) Concurrent Sessions (M) Connections Per Second (K) /00/000Base-T (MAX Ports) 6/6 8/2 2/2 6/28 4/0 0/0 4/8 6/0 6/4 0/4 4/26 000Base-F SFP (MAX Ports) 0/4 0/8 0/8 0/24 0/8 0/8 0/6 0/4 0/6 0/6 0/2 0GBase-F SFP+ (MAX Ports) 0/2 0/4 0/4 0/2 0/4 0/4 0/6 0/0 0/6 0/6 0/2 Expansion Slot Storage x 500 GB 2 x 46 GB 2 x 46 GB 2 x 46 GB 2 x 46 GB 2 x 46 GB 2 x 46 GB 2 x 250 GB 2 x 46 GB 2 x 46 GB 2 x 46 GB Memory / Max 8/6 8/6 6/32 32/64 4/4 8/8 6/6 8/8 8/6 6/32 32/64 Support Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Enclosure U U U 2U U U 2U U U U 2U Weight Dual, Hot-Swappable Supplies Input 9.5 kg (20.9 lbs) 20.4kg (45 lbs) 20.4kg (45 lbs) 3.3kg (69 lbs) 6.kg (35.5 lbs) 6.kg (35.5 lbs) 26.kg (57.5 lbs) 4kg (3 lbs) 7kg (37.5 lbs) 7.92kg (39.5 lbs) Optional Included Optional Included Included Included Included Included Included Included Included 00~240V, 47~63Hz 00~240V, 50~60Hz 00~240V, 47~63Hz Single Supply Rating 400W 750W 750W 200W 675W 675W 300W 300W 450W 450W 730W Consumption (Max) 80W 22W 22W 342W 80W 22W 342W 95W 78W (min) 78W (min) 504W Raw throughput is based on RFC 35 with 58 bytes UDP packets. 2 Recommended IPS Profile, IMIX traffic blend 3 With memory upgrade and GAiA OS 25kg (55 lbs) 5

6 X-Series Platforms Performance X20 X30 X50 X60 X80-S Firewall IMIX Chassis Throughput (Gbps) Up to 5 Up to 0 Up to 8 Up to 70 Up to 40 XOS Stateful Connections Per Second Up to 20K Up to 20K Up to 50K Up to 300K Up to 600K XOS Stateless Connections Per Second NA (not enabled) NA (not enabled) Up to 220K Up to 550K Up to.m Maximum Concurrent Connections 8M 8M 8M 70M 00M Interfaces Modules Support 0 x Gb SFP ports 0 x Gb SFP ports; 2 x 0Gb XFP ports NPM-x, up to 2 APM-x, and CPM-x (included) Up to 6 x 0/Gb SFP+ ports Up to 32 x Gb SFP/0Gb SFP+ (6 per NPM) Up to 2 NPM-x, up to 5 APM-x, up to 2 CPM-x Up to 64 x Gb SFP/0Gb SFP+ (6 per NPM) Up to 4 NPM-x, up to 0 APM-x, up to 2 CPM-x Maximum Modules Up to 4 Up to 7 Up to 4 Application Processor Module (APM) Details Processors (per APM) 8 core 4, 8 or 2 core options System Memory (per APM) Up to 6 GB Up to 2 GB Up to 24 GB Disk Size (per APM) Up to 2 x 500GB SATA Hard Drives with RAID Up to 2 x 450GB SAS with RAID Check Point Software Security Gateway R77, R76, R75.40, R75.40VS, R75.20, R75, R7.0; Firewall- GX 5.0 Supported Operating System High Availability Options System Management XOS 9.0.x, 9.5.x, 9.6.x and 9.7.x Dual Box High Availability (DBHA) with another chassis of the same model X-Series Management System (XMS), Greenlight Elelment Manager (GEM), Command line interface (CLI) with automated workflow system (AWS), SNMP v v2 v3 and NetFiow v5 v9 v0 support Form Factor / Size 3.5 H, 7.5 W, 9 D 29 H, 7.5 W, 7.5 D Environment Certification Chassis Regulatory Compliance Green IT Compliancy Specifications Temperature 0 to 40 C (32-04 F); Humidity: 0%- 90% non-condensing; Altitude: 3048m (0,000ft.) FIPS 40-2 Certified; Under evaluation for Common Criteria EAL4+ Equipment Building System (NEBS) Compliant; Under evaluation for Common Criteria EAL4+ RoHS, UL 60950, IEC 950, FCC 47 CFR Part 5 Class A, EN 55022: EN 55024, VCCI V-3: AS/NZS 3548: 995 : CNS 3438 Class A High-efficiency power system up to 9 percent, WEEE Directive, ISO 400, RoHS compliant VAC 2,700W Rated Maximum VAC 5,00W Rated Maximum or 48V DC 00A Hot-Swappable PSUs (per system) Ships with 2 x,200w VAC PSUs 4 PSUs supported Status Indicators Supply and Module Active I Failed status LED, Port Link (NPM, CPM), Minor/Major/Critical Alarm LEDs 6

7 DDoS Protector Grade Enterprise Datacenter Carrier Performance Capacity (Gbps) Throughput (Gbps) Max Concurrent Sessions (M) Max DoS Flood Attack Prevention Rate (M)(pps) Latency Real-time Signatures Inspection Ports < 60 micro seconds Detect and protect against attacks in less than 8 seconds 0/00/000 Copper Ethernet GbE Fiber (SFP) GbE Fiber (XFP) /0 GbE (SFP+) GbE (QSFP+) Management Ports 0/00/000 Copper RS-232 Console Operation Mode Operation Deployment Modes Tunneling protocols support IPv6 Policy Action Block Actions High Availability Fail-open / Fail-close Clustering Transparent L2 Forwarding In-line; span port monitoring; copy port monitoring; local out-of-path; out-of-path mitigation (scrubbing center solution) VLAN Tagging, L2TP, MPLS, GRE, GTP Support IPv6 networks and block IPv6 attacks Block and Report; Report Only Drop packet, reset (source, destination, both), suspend (source, source port, destination, destination port or any combination); Challenge-Response for HTTP and DNS attacks Internal fail-open/fail-close for copper ports; internal fail-close for SFP ports; optional fail-open for SFP ports 3 Internal fail-open/fail-close for copper ports; internal fail-close for SFP and XFP ports; optional fail-open for SFP and XFP ports 4 Active-Passive Cluster Enclosure U 2U Dual Supply Optional Yes - Hot Swappable Internal fail-close for SFP+ and QSFP+ ports; optional fail-open for SFP+ and QSFP+ ports 4 Consumption (Max) 77W 476W 634W Actual performance figures may change per network configuration, traffic type, etc. 2 Throughput is measured with behavioral and signature protections using the ecommerce protection profile 3 External fiber fail-open switch with SFP ports is available at additional cost 4 External fiber fail-open switches with SFP or XFP ports are available at additional cost 7

8 Appliances Performance Firewall Throughput (Gbps) VPN Throughput (Gbps) Concurrent Sessions (M) (Included/Capacity) Software Blades Security Gateway 5/0 5/0 5/0 5/0 0/25 0/25 0/50 0/50 0/75 0/75 20/50 20/50 Firewall, VPN, Identity Awareness, Advanced ing and Clustering, Mobile Access, IPS, and Application Control 2600 Appliances Performance Firewall Throughput (Gbps) VPN Throughput (Gbps) Concurrent Sessions (M) (Included/Capacity) Software Blades Security Gateway With memory upgrade and GAiA OS 20/250 20/250 20/250 20/250 20/250 20/250 20/250 20/250 20/250 20/250 Firewall, VPN, Identity Awareness, Advanced ing and Clustering, Mobile Access, IPS, and Application Control

9 Software Blades Appliance Comparison Chart Security Gateway Software Blades FW NGFW NGDP NGTP FW NGFW NGDP NGTP NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG Firewall Identity Awareness IPsec VPN Advanced ing & Clustering Mobile Access * * * IPS * * * * * Application Control * * DLP URL Filtering Antivirus Anti-Spam & Security Anti-Bot Security Management Software Blades * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * Policy Management Logging & Status SmartEvent Mobile Access for 5 users is included in default package to extend the package use the Mobile Access packages * * * * * * * * * * * * * * * * * Optional Security Management Software Blades available: SmartWorkflow, Monitoring, Management Portal, User Directory, SmartProvisioning, SmartReporter, SmartEvent, Endpoint Policy Management, Compliance = Included * = Optional NA = Not Available 9

10 Software Blades Appliance Comparison Chart continued Security Gateway Software Blades Mobile Access for 5 users is included in default package to extend the package use the Mobile Access packages NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG Firewall Identity Awareness IPsec VPN Advanced ing & Clustering Mobile Access * * * * * IPS * * * * * Application Control DLP * * * * * * * * * * * * * * * URL Filtering * * * * * * * * * * Antivirus * * * * * * * * * * Anti-Spam & Security * * * * * * * * * * * * * * * Anti-Bot * * * * * * * * * * * * * * * Security Management Software Blades Policy Management Logging & Status SmartEvent * * * * * * * * * * * * * * * Optional Security Management Software Blades available: SmartWorkflow, Monitoring, Management Portal, User Directory, SmartProvisioning, SmartReporter, SmartEvent, Endpoint Policy Management, Compliance = Included * = Optional NA = Not Available 0

11 Software Blades Appliance Comparison Chart continued Security Gateway Software Blades NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG Firewall Identity Awareness IPsec VPN Advanced ing & Clustering 2 Mobile Access * * * * * IPS * * * * * Application Control * * DLP URL Filtering Antivirus Anti-Spam & Security Anti-Bot Security Management Software Blades * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * NA * * * * * * * * * * * NA Policy Management NA NA Logging & Status NA NA SmartEvent Mobile Access for 5 users is included in default package to extend the package use the Mobile Access packages 2 Counted separately in the 4000 and 6005 * * * * * * * * * NA NA Optional Security Management Software Blades available: SmartWorkflow, Monitoring, Management Portal, User Directory, SmartProvisioning, SmartReporter, SmartEvent, Endpoint Policy Management, Compliance = Included * = Optional NA = Not Available