Appliance Comparison Chart

Transcription

1 202 Appliances Small-Office Enterprise Grade Production Performance (Security Benchmark) Security Firewall (Gbps) Firewall and IPS (Mbps) RFC 35, 2544, 2647, 242 Performance Tests (LAB) Firewall Throughput (Gbps) VPN Throughput (Gbps) IPS Recommended Profile (Gbps) Connections Per Second (K) Concurrent Sessions (M) /00/000Base-T/Max Ports 6/6 4/8 8/2 8/2 8/6 000Base-F SFP (MAX Ports) NA GBase-F SFP+ (MAX Ports) NA NA NA NA 2 Expansion Slot 0 FONIC Option No Yes Yes Yes Yes Software Edition R7.x, R75.x, R7.x, R75.x, R7.x, R75.x, R7.x, R75.x, R7.x, R75.x, Storage 250 GB 250 GB 250 GB 250 GB 250 GB Memory / Max 2/2 GB 4/4 GB 4/4 GB 4/4 GB 4/8 GB LOM Card NA NA NA NA Included Default/Max VS Supported 3/3 3/3 0/0 0/0 25/25 Enclosure Desktop U U U U Weight 2kg (4.4 lbs) 4kg (8.82 lbs) 7.5kg (6.53 lbs) 7.5kg (6.53 lbs) 7.6kg (6.76 lbs) Dual, Hot-Swappable Supplies No No No No Optional Input VAC, 47-63Hz Single Supply Rating 40W 00W 250W 250W 275W Consumption (Max) 35W 57W 90W 90W 40W DC Option No No No Optional 6 Optional 6 With Security Acceleration Module 2 With memory upgrade and the GAiA OS 3 Not including Security Switch Module Management Ports 4 Per Security Gateway Module 5 Includes 5 AC PSUs or 2 DC PSUs 6 Via a Solutions Center request

2 202 Appliances continued Data Center Grade Ultra-High End Production Performance (Security Benchmark) Security / / / to 4600 Firewall (Gbps) Firewall and IPS (Gbps) RFC 35, 2544, 2647, 242 performance tests (LAB) Firewall Throughput (Gbps) /0 75/0 78/0 Up to 200 VPN Throughput (Gbps) /50 8.5/50 /50 - IPS Recommended Profile (Gbps) Up to 40 Connections Per Second (K) /300 40/300 70/300 Up to 600 Concurrent Sessions (M) Up to 70 0/00/000Base-T/Max Ports 8/6 0/26 4/26 3/37 3/37 3/37 NA 000Base-F SFP (MAX Ports) NA 3 0GBase-F SFP+ (MAX Ports) / GBase-F MAX Ports NA NA NA NA NA NA 4 3 Expansion Slot FONIC Option Yes Yes Yes No No No No Software Edition R7.x, R75.x, R7.x, R75.x, R7.x, R75.x, R7.x, R75.x, R7.x, R75.x, R7.x, R75.x, R75.x Storage GB GB 2x500 GB RAID 2x500 GB RAID 2x500GB RAID 2x500GB RAID - Memory / Max 4/2 GB 4/2 GB 6/2 GB 2/24 GB 6/32 GB 6/32 GB 2/24 GB 4 LOM Card Included Included Included Included Included Included Included Default/Max VS Supported 25/ / / / / / /250 2 Enclosure U 2U 2U 2U 2U 2U 5U Weight 7.6kg (6.76 lbs) 23.4kg (5.6 lbs) 23.4kg (5.6 lbs) 26kg (57.4 lbs) 26kg (57.4 lbs) 26kg (57.4 lbs) Max: 90kg (98.4 lbs) Dual, Hot-Swappable Supplies Optional Yes Yes Yes Yes Yes Yes 5 Input VAC, 47-63Hz Single Supply Rating 275W 300W 400W 90W 200W 200W 0V, 220V Consumption (Max) 2W 32W 220W 449W/744W 449W/744W 489W/784W 5000W DC Option Optional 6 Optional 6 Optional 6 Optional 6 Optional 6 Optional 6 Yes With Security Acceleration Module 2 With memory upgrade and the GAiA OS 3 Not including Security Switch Module Management Ports 4 Per Security Gateway Module 5 Includes 5 AC PSUs or 2 DC PSUs 6 Via a Solutions Center request 2

3 UTM- Edge and Series 80 Appliances Performance UTM- Edge N Industrial UTM- Edge N Series 80 Firewall Throughput.0 Gbps.0 Gbps.5 Gbps VPN Throughput 200 Mbps 200 Mbps 220 Mbps IPS Default Profile 80 Mbps 80 Mbps 720 Mbps Connections Per Second (K) - - 5,000 Concurrent Sessions 60,000 60,000 50,000 Wireless Option - Yes - 0/00/000Base-T/Max Ports Base-F SFP (MAX Ports) (N ADSL) - VLANs Software Edition Embedded NGX Embedded NGX Embedded R7 3G Modem Yes Yes No Licensed Users 8/6/32/U 8/6/32/U Unlimited Multisite Management No No No Support No No No Enclosure Desktop Desktop Desktop Weight 0.68kg (.49 lbs) 0.7kg (.6lbs).09kg (2.4 lbs) Input AC (00/240V, 50/60Hz), DC (+2V DC@2A, +2 to +60V DC@2A to 0.4A, -48V DC@0.5A) 00/240V, 50/60Hz Single Supply Rating 24W 24W 2V/2A DC 24W Consumption (Max).5W 2W (including USB devices) 6.68W 3

4 IP Appliances Performance IP282 IP297 IP397 IP567 IP697 IP287 IP2457 Security Firewall Throughput (Gbps) / /7.5 2 /30 2 VPN Throughput (Gbps) Mbps.7.9/ / /8.3 2 IPS Default Profile (Gbps) Connections Per Second (K) Concurrent Sessions 900, ,000 million million million million million 0/00/000Base-T/Max Ports 6 6/8 4/8 4/2 4/6 4/28 4/32 000Base-F SFP Max Ports NA GBase-F SFP+ Max Ports NA NA NA NA Expansion Slots NA VLANs Software Edition R70, R76 R70, R76 R70, R76 R70, R76 R70, R76 R70, R76 R70, R76 Storage 40 GB 40 GB 80 GB 80 GB 80 GB 80 GB 80 GB Disk-Based or Flash Disk Disk or Flash Disk or Flash Disk or Flash Disk or Flash Disk or Flash Disk or Flash Memory / Max /2 /2 /2 /2 2/4 4/8 4/8 ADP Module NA NA NA NA Optional Optional Optional VPN Acceleration Optional Optional Included Included Included Included Included Support No No No No No Yes Yes Default/Max VS Supported N/A N/A N/A N/A N/A 0/50 50/75 Enclosure U/Half rack U/half rack U U U 2U 2U Weight 5.kg (.25 lbs) 5.kg (.25 lbs) 7.7kg (7.0 lbs).84kg (26. lbs) 2.38kg (27.3 lbs) 9.6kg (43.2 lbs) 20.57kg (45.35 lbs) Dual, Hot-Swappable Supplies No No No No Included Included Included Input 00/240V 50/60Hz 00/240V, 50/60Hz Single Supply Rating 33W 33W 50W 225W 250W 700W 700W Consumption (Max) W 65W DC Option NA NA NA NA NA Optional Optional Optional 2 Performance without ADP/with ADP 3 Maximum of 256 VLANs per interface 4

5 IAS Series Appliances IAS D IAS D2 IAS D6 IAS D8 IAS M2 IAS M6 IAS M8 IAS R IAS R2 IAS R6 IAS R8 Performance Firewall Throughput 2 (Gbps) VPN Throughput 2 (Gbps) IPS Default Profile 3 (Gbps) Concurrent Sessions (M) /00/000Base-T/Max Ports 4/0 6/2 2/2 6/28 4/0 0/0 4/8 6/0 4/4 0/4 4/26 000Base-F SFP (MAX Ports) 0/8 0/8 0/8 0/24 0/8 0/8 0/6 0/4 0/6 0/6 0/2 0GBase-F SFP+ (MAX Ports) 0/4 0/4 0/4 0/2 0/4 0/4 0/6 0/0 0/6 0/6 0/2 Expansion Slot VLANs Software Edition Storage 2 x 60 GB 2 x 46 GB 2 x 46 GB 2 x 46 GB 2 x 46 GB 2 x 46 GB 2 x 46 GB 2 x 256 GB 2 x 46 GB 2 x 46 GB 2 x 46 GB Memory / Max /6 4/24 6/24 8/24 4/24 6/24 8/24 2/32 4/24 4/24 8/24 UTM Out of the Box Optional Optional Optional Optional Yes Optional Optional Optional Optional Optional Optional Multisite Management Optional Optional Optional Optional Optional Optional Optional Optional Optional Optional Optional Support Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Enclosure U U U 2U U U 2U U U U 2U Weight Dual, Hot-Swappable Supplies Input 4.3kg (3.5 lbs) 7.92kg (39.5 lbs) 7.92kg (39.5 lbs) 20.3kg (44 lbs) 6.kg (35.5 lbs) 6.kg (35.5 lbs) 26.kg (57.5 lbs) 4kg (3 lbs) 7kg (37.5 lbs) 7.92kg (39.5 lbs) Optional Optional Optional Included Optional Optional Included Optional Optional Optional Included 00~240V, 47~63Hz 00~240V, 50~60Hz 00~240V, 47~63Hz Single Supply Rating 400W 750W 750W 200W 675W 675W 300W 300W 450W 450W 730W Consumption (Max) 80W 22W 22W 342W 80W 22W 342W 95W 78W (min) 78W (min) 504W 2 IAS = Integrated Appliance Solutions Performance data represents the maximum capabilities of the systems as measured under optimal testing conditions. Deployment and policy considerations may impact performance results Test based on real-world traffic blend using the default profile Maximum of 256 VLANs per interface With memory upgrade and GAiA OS 25kg (55 lbs) 5

6 Bladed Hardware Integrated Appliance Solution (IAS) Crossbeam X60 Crossbeam X80-S Performance Throughput (IMIX) Up to 6 Gbps per APM; up to 75 Gbps per chassis Up to 6 Gbps per APM; up to 40 Gbps per chassis Interfaces / Connections Up to 32 x Gb SFP / 0Gb SFP+ (6 per NPM) Up to 64 x Gb SFP / 0Gb SFP+ (6 per NPM) Module Support Up to 2 NPM-x, up to 5 APM-x, up to 2 CPM-x; Support 7 modules total Up to 4 NPM-x, up to 0 APM-x, up to 2 CPM-x; Support 4 modules total Check Point Software Security Gateway R70, R70 HCC Release, R70 IPv6 Pack, R7, R75.20, R75.40 and R75.40VS; VPN- VSX R65, R67 & R68; Firewall- GX 4.0, 5.0 Supported Operating System XOS 7.2., , 8.0., 8..0, 8.5.0, 9.0, 9.5 & 9.6 High Availability Options Processors System Memory Disk Size Management Single or Dual System High Availability 4-Core, 8-Core or 2-Core Application Processor Module (APM) options Up to 24GB per Application Processor Module (APM) Up to 2 x 450 GB HDD with RAID per Application Processor Module (APM) X-Series Management System (XMS), Greenlight Elelment Manager (GEM), Command line interface (CLI) with automated workflow system (AWS), SNMP v, v2, v3 and NetFlow v5, v9, v0 support Support Yes Yes Form Factor / Size 3.5 H, 7.5 W. 9 D 29 H, 7.5 W, 7.5 D Environment Temperature 0 to 40 C (32-04 F); Humidity: 0% - 90% non-condensing Certification Equipment Building System (NEBS) Compliant; Under evaluation for Common Criteria EAL4+ Chassis Regulatory Compliance RoHS, UL 60950, IEC 950, FCC 47 CFR Part 5 Class A, EN : EN 55024, VCCI V-3 : AS/NZS 3548 : 995 : CNS 3438 Class A Green IT Compliancy High-efficiency power system up to 9 percent, WEEE Directive, ISO 400, RoHS compliant VAC 2,700W Rated Maximum X80-S AC: VAC 5,00W Rated Maximum X80-S DC: 48V DC 00A Status Indicators Supply and Module Active / Failed status LED, Port Link (NPM, CPM), Minor/Major/Critical Alarm LEDs 6

7 DDoS Protector Performance Actual performance figures may change per network configuration, traffic type, etc. 2 Capacity is measured as maximum traffic forwarding when no security profiles are configured 3 Throughput is measured with behavioral protections and signature protections using ecommerce protection profile 4 External fiber fail-open switch with SFP ports is available at additional cost 5 External fiber fail-open switches with SFP or XFP ports are available at additional cost Capacity 2 500Mbps Gbps 2Gbps 3Gbps 4Gbps 8Gbps 4Gbps Throughput 3 500Mbps Gbps 2Gbps 3Gbps 4Gbps 8Gbps 2Gbps Max Concurrent Sessions (M) Max DoS Flood Attack Prevention Rate (M, packets-per-second) Latency Real-time Signatures Inspection Ports < 60 micro seconds Detect and protect against attacks in less than 8 seconds 0/00/000 Copper Ethernet GbE Fiber (SFP) GbE Fiber (XFP) Management Ports 0/00/000 Copper Ethernet RS-232 Operation Mode Operation Deployment Modes Tunneling protocols support IPv6 Policy Action Block Actions High Availability Fail-open / Fail-close Transparent L2 Forwarding In-line; span port monitoring; copy port monitoring; local out-of-path; out-of-path mitigation VLAN Tagging, L2TP, MPLS, GRE, GTP Support IPv6 networks and block IPv6 attacks Block and Report; Report Only Drop packet, reset (source, destination, both), suspend (source, src port, destination, dest port or any combination); Challenge-Response for HTTP and DNS attacks Internal fail-open/fail-close for copper ports; internal fail-close for SFP ports; optional fail-open for SFP ports 4 Internal fail-open/fail-close for copper ports; internal fail-close for SFP and XFP ports; optional fail-open for SFP and SFP ports 5 Enclosure U 2U Weight (lb/kg) 5.9 / / 8.0 Input Auto Range: 00V-20V/200V-240VAC; 47-63Hz or 38-72VDC Auto Range: 00V-20V/200V-240VAC; 50-60Hz or 38-72VDC Consumption (Max) 77W 476W 7

8 Secure Web Gateway Appliances SWG-4400 SWG-4600 SWG-4800 SWG-2400 SWG-2600 Sizing Users (recommended) up to 250 up to 500 up to,000 up to 5,000 up to 0,000 Concurrent Connections 20,000 32,000 50,000 66,000 60,000 Connections per Second 650,000,800 2,500 5,700 HTTP Transactions per Second 2,700 4,200 7,700 0,000 22,000 Memory (default/max) 4/4 4/4 8/8 8/2 2/2 FONIC Optional Optional Optional Optional Optional Software Blades Security Gateway Firewall, VPN, Identity Awareness, Advanced ing and Clustering, URL Filtering, Application Control and Antivirus Security Management Policy Management, Logging and Status, SmartEvent 8

9 202 Appliances Performance Appliances Firewall Throughput (Gbps) VPN Throughput (Gbps) Concurrent Sessions (M) Software Edition R75.40VS, R75.40VS, R75.40VS, R75.40VS, R75.40VS, R75.40VS, R75.40VS, R75.40VS, R67 VSX Option No No No No No No Yes Yes (Included/Capacity) 5/0 5/0 5/0 5/0 0/25 0/25 0/50 0/50 Software Blades Security Gateway Performance Firewall, VPN, Identity Awareness, Advanced ing and Clustering, Mobile Access, IPS, and Application Control Firewall Throughput (Gbps) VPN Throughput (Gbps) Concurrent Sessions (M) Software Edition R75.40VS, R75.40VS, R75.40VS, R75.40VS, R75.40VS, R75.40VS, R75.40VS 2, R75.40VS 2, R75.40VS 2, R67 VSX Option Yes Yes Yes Yes Yes Yes No No No No (Included/Capacity) Software Blades Security Gateway With memory upgrade and GAiA OS 2 Available Q R75.40VS 2, 0/75 0/75 20/50 20/50 20/250 20/250 20/250 20/250 20/250 20/250 Firewall, VPN, Identity Awareness, Advanced ing and Clustering, Mobile Access, IPS, and Application Control 9

10 Software Blades Appliance Comparison Chart Security Gateway Software Blades FW NGFW NGDP NGTP FW NGFW NGDP NGTP NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG Firewall Identity Awareness IPsec VPN Advanced ing & Clustering Mobile Access * * * IPS * * * * * Application Control * * DLP URL Filtering Antivirus Anti-Spam & Security Anti-Bot Security Management Software Blades * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * Policy Management Logging & Status SmartEvent Mobile Access for 5 users is included in default package to extend the package use the Mobile Access packages * * * * * * * * * * * * * * * * * Optional Security Management Software Blades available: SmartWorkflow, Monitoring, Management Portal, User Directory, SmartProvisioning, SmartReporter, SmartEvent, Endpoint Policy Management = Included * = Optional NA = Not Available 0

11 Software Blades Appliance Comparison Chart continued Security Gateway Software Blades Mobile Access for 5 users is included in default package to extend the package use the Mobile Access packages NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG Firewall Identity Awareness IPsec VPN Advanced ing & Clustering Mobile Access * * * IPS * * * Application Control DLP URL Filtering Antivirus Anti-Spam & Security Anti-Bot Security Management Software Blades * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * Policy Management Logging & Status SmartEvent * * * * * * * * * Optional Security Management Software Blades available: SmartWorkflow, Monitoring, Management Portal, User Directory, SmartProvisioning, SmartReporter, SmartEvent, Endpoint Policy Management = Included * = Optional NA = Not Available

12 Software Blades Appliance Comparison Chart continued Security Gateway Software Blades NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG NGFW NGDP NGTP SWG 6005 Firewall Identity Awareness IPsec VPN Advanced ing & Clustering 2 Mobile Access * * * * IPS * * * * Application Control * DLP URL Filtering Antivirus Anti-Spam & Security Anti-Bot Security Management Software Blades * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * NA * * * * * * * * * * Policy Management NA Logging & Status NA SmartEvent Mobile Access for 5 users is included in default package to extend the package use the Mobile Access packages 2 Counted separately in the 6005 * * * * * * * * * NA Optional Security Management Software Blades available: SmartWorkflow, Monitoring, Management Portal, User Directory, SmartProvisioning, SmartReporter, SmartEvent, Endpoint Policy Management = Included * = Optional NA = Not Available 2

13 Software Blades Appliance Comparison Chart continued Security Gateway Software Blades IP282 IP297 IP397 IP567 IP697 IP287 IP2457 Firewall IPsec VPN Application Control * Identity Awareness * IPS * Advanced ing * Acceleration & Clustering * URL Filtering * * * * * * * Antivirus * * * * * * * Anti-Spam & Security * * * * * * * DLP * * * * * * * Mobile Access * * * * * * * Anti-Bot * * * * * * * Optional Security Gateway Software Blades available: Web Security = Included * = Optional NA = Not Available 3