DATA SHEETQUANTUM FORCE 9100

Quantum Force 9100
Security Gateway

YOU DESERVE THE BEST SECURITY

Top Security EffectivenessCheck Point #1 for the 2nd year in a row
with 99.8% malware block rate in Miercom
Next-Generation Firewall Security
Benchmark (2024)
Named a Leader by Top Analyst Firms
Forrester Wave™ for Zero Trust Platform

Quantum 9100 firewalls deliver up to 55 Gbps
of firewall and 4.95 Gbps of threat prevention
throughput with integrated AI/ML security, power
efficiency and space savings in a modular 1 RU
platform.
Increase the efficiency of your datacenter’s security operations. Prevent even the most advanced
attacks before they can infect their target. And
manage your on-premises and cloud firewalls
from a unified platform.

Providers, Q3 2023
Gartner® Firewall Magic Quadrant™ (2022)
AI/ML powered Threat Prevention
Protect networks and users from zero-days,
phishing, DNS, and ransomware attacks

Fastest AI-Powered
Threat Prevention

Network Resilience &Power Efficiency

Unified Security
Management

Hyperscale Network Security
On-demand expansion, load balancing
firewall clustering, and resilient accessto mission-critical applications
Unified Management and Ops Efficiency

9100 Performance Highlights
Firewall

Next Gen Firewall

Threat Prevention

55 Gbps

18.6 Gbps

4.95 Gbps

Increase protection and reduce TCO witha consolidated security architecture© 2024 Check Point Software Technologies Ltd. All rights reserved.

DATA SHEETQUANTUM FORCE 9100

AI-Powered advanced security anduncompromising performance,
built for perimeter applications
Quantum Force 9100 data center firewalls deliver
high threat prevention performance in a small 1
RU form factor to protect employees, networks,
and data from cyber-theft. One network I/O slot
can be configured to fit your network with a highport density of up to 8x1/10G or 4x10/25G port
capacity.

Comprehensive andIndustry-Leading Security• Next Generation Firewall• Site-to-Site and Remote Access VPN• Application and Web Filtering• Intrusion Prevention• Antivirus and Anti-Bot• Advanced DNS Security• Sandboxing with file sanitization• Zero-phishing (no agent required)

Highest Performance Threat Prevention

With the 9100, organizations can inspect encrypted traffic and prevent even the most evasive
attacks without impacting internal network performance. Achieve 4.95 Gbps of threat prevention throughput or up to 80 Gbps of UDP 1518B
firewall throughput with a single 1RU firewall.

Power Efficient, Resilient Design

With a low power consumption per Gbps ofthreat prevention throughput, these large enterprise firewalls cut power costs in half whencompared with similar firewalls from othervendors.

Flexible, High Performance
HTTPS Inspection

While commonly used for good, HTTPS traffic
can also hide illegal user activity and malicious
traffic. Businesses need the ability to inspect a
broad range of encrypted TLS 1.3 and HTTP/2
channels while also excluding inspection of sensitive regulated industry traffic, such as HealthCare and Financial. Check Point makes it easy tofine-tune HTTPS security using customizeable
dynamic security policies.

Modular, High Port Density 1RU Chassis

The 9100 offers the flexibility to fit your changing network requirments. Populate the network
I/O slots with your choice of network cards:
8x1/10G, 4x10/25G.

© 2024 Check Point Software Technologies Ltd. All rights reserved.

2

DATA SHEETQUANTUM FORCE 9100

On-Board RJ45
network ports

Expansion slot

RJ45 console port

RJ45 Syncport

1

2

RJ45 Lights Out Managementport
USB Type-C console ports

3546782x USB 3.0 Type-A ports

RJ45 Management port

Dual Internal Power Supplies

Dual Fan AssemblyPower Switch

91011Specifications
Performance

Additional Features

Enterprise Test Conditions1
Threat Prevention2 [Gbps]
NGFW3 [Gbps]
IPS [Gbps]
Firewall [Gbps]

4.95
18.6
25.7
55

RFC 3511, 2544, 2647, 1242 Performance (Lab)Firewall 1518B UDP [Gbps]
Firewall Latency (avg)
VPN AES-GCM 1452B [Gbps]
Connections/sec
Concurrent connections (Base/Plus/Max)

HTTP/TLS Inspection Performance
Threat Prevention1,2 [Gbps]
Threat Prevention2 web mix4 [Gbps]
IPS web mix4 [Gbps]

8010μSec22.1
190,000
2.75/7.27M/16.2M

Highlights• CPU: 4 physical cores, total of 8 logical cores• Storage: 1 SSD 480GB SATA
• 2x Internal AC power supply• 16 to 64 GB memory options• Lights-Out-Management card – optional (included in Plus package)

Network Expansion Slot Options• 8 x 1/10GBASE-F SFP+ port card
• 4 x 10/25GBASE-F SFP28 port card

2.96
1.6
2.3

Enterprise traffic profile measured with maximum memory
Includes Firewall, App Control, URLF, IPS, Anti Malware and SandBlast (Incl. DNS Security & Zero Phishing) with logging enabled
3Includes Firewall, App Control and IPS with logging enabled
4
Web traffic mix is based on NetSecOpen web traffic profile12© 2024 Check Point Software Technologies Ltd. All rights reserved.

3

DATA SHEETQUANTUM FORCE 9100

Network

PhysicalNetwork Connectivity

Power Requirements• 802.3ad passive and active link aggregation• Layer 2 (transparent) and Layer 3 (routing) mode

• Single Power Supply rating AC: 200W
• Power input: 100 to 240VAC (47-63Hz)• Power consumption avg/max: 84.4W /140.8W• Maximum thermal output AC: 480.1BTU/sHigh Availability• Active/Active L2, Active/Passive L2 and L3• Session failover for routing change, device and link failure• ClusterXL or VRRPDimensions• Enclosure: 1RU• Dimensions: (WxDxH): 17.2 x 20 x 1.73 in.(438 x 508 x 44mm)• Weight: (gross; Kg): 14.8

IPv6

• NAT66, NAT64, NAT46• CoreXL, SecureXL, HA with VRRPv3

Environmental Conditions• Operating: 0° to 40°C, humidity 5% to 95• Storing: –20° to 70°C, humidity 5% to 95% at 60°C
• MTBF: > 10 years

Unicast and Multicast Routing (see SK98226)• OSPFv2 and v3, BGP, RIP• Static routes, Multicast routes• Policy-based routing• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

Certifications• Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1• Emissions: CE, FCC IC, VCCI, ASNZS ACMA
• Environmental: ROHS, REACH, WEEE, ISO14001

Maximum Virtual System Capacity
Firewall VS

Firewall +IPS VS

Next Gen Threat
Prevention VSBase model

48

249Plus model482412Max capacity

482412Maestro / MHS

482412Ordering Quantum Force 9100 Security Gateway

The 9100 includes 1x RJ45 (1 GbE copper) management port plus an additional 1x RJ45 (1 GbE copper)
port for synchronization when using the 9100 PLUS in a cluster. With one network I/O slot, modify thebase or plus configuration to meet your networking requirements.

1On-Board1
RJ45

1/10
GbE fiber

10/25**
GbE FiberMemory

Base model

100016 GB

Plus model

108032 GBMax capacity

108464 GB

Maestro / MHS

100432 GBRedundantPowerThe RJ45 port count includes the Management & Sync ports
Avialable
Unavialable© 2024 Check Point Software Technologies Ltd. All rights reserved.

RedundantStorage

LOM

4DATA SHEETQUANTUM FORCE 9100

1SECURITY APPLIANCE 1SKU

9100 Base configuration: 1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync port, on-board
8x RJ45 ports, 16 GB RAM, 1x 480 GB SSD SATA, 2x AC PSUs, fixed rails, SandBlast (SNBT) Security Subscription
Package for 1 Year

CPAP-SG9100-SNBT

9100 Plus configuration: 1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync port, on-board 8xRJ45 ports, 8x 1/10GbE SFP+ ports, 32 GB RAM, 1x 480 GB SSD SATA, 2x AC PSUs, Lights-Out Management (LOM),fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year

CPAP-SG9100-PLUS-SNBT

Quantum Force 9100 Maestro / MHS HyperScale configuration: 1x RJ45 (1GbE Copper) management port & 1x RJ45(1GbE Copper) sync port, on-board 8x RJ45 ports, 4x 10/25GbE SFP+ ports, 32 GB RAM, 1x 480 GB SSD SATA, 2xAC PSUs, Lights-Out Management (LOM), 2x 25GbE DAC 3M, fixed rails, SandBlast (SNBT) Security Subscription
Package for 1 Year

CPAP-SG9100-PLUS-MHS-SNBTQuantum Force 9100 Maestro / MHS HyperScale configuration with 1 MHO-140 orchestrator and 2 Quantum Force
9100 appliances, each appliance includes 1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) sync
port, on-board 8x RJ45 ports, 4x 10/25GbE SFP+ ports, 32 GB RAM, 1x 480 GB SSD SATA, 2x AC PSUs, Lights-Out
Management (LOM), 2x 25GbE DAC 3M, fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year

CPAP-MHS-9102-PLUS-SNBT

Quantum Force 9100 Maestro / MHS HyperScale configuration with 1 MHO-140 orchestrator and 3 Quantum Force
9100 appliances, each appliance includes 1x RJ45 (1GbE Copper) management port & 1x RJ45 (1GbE Copper) syncport, on-board 8x RJ45 ports, 4x 10/25GbE SFP+ ports, 32 GB RAM, 1x 480 GB SSD SATA, 2x AC PSUs, Lights-Out
Management (LOM), 2x 25GbE DAC 3M, fixed rails, SandBlast (SNBT) Security Subscription Package for 1 Year

CPAP-MHS-9103-PLUS-SNBT

Next Generation Threat Prevention & SandBlast package for 1 year for Quantum Force 9100 appliance

CPSB-SNBT-9100-1Y

Next Generation Threat Prevention package for 1 year for Quantum Force 9100 appliance

CPSB-NGTP-9100-1Y

Next Generation Firewall Package for 1 year for Quantum Force 9100 appliance

CPSB-NGFW-9100-1Y

Quantum IoT Network Protection for 1 year for Quantum Force 9100 appliances

CPSB-IOTP-9100-1Y

Quantum SD-WAN subscription for 1 year for Quantum Force 9100 appliances

CPSB-SDWAN-9100-1Y

Data Loss Prevention (DLP) blade for 1 year for Quantum Force 9100 appliances

CPSB-DLP-9100-1Y

The Base & Plus packages include 2 virtual systems (VS)—one management VS and one production/data VS which are not additive or counted when adding additional VS licenses.

ACCESSORIESINTERFACE CARDS & TRANSCEIVERS

SKU

8 Port 1/10 G Base-F SFP+ interface card for 9000/19000/29000 appliances

CPAC-8-1/10F-D

4 Port 10/25G Base-F SFP28 interface card for 9000/19000/29000 appliances

CPAC-4-10/25F-D

Compatible with the CPAC-4-10/25F-D Interface Cards
SFP28 transceiver module for 25GbE fiber ports - short range (25GBASE-SR), MM Fiber, LC

CPAC-TR-25SR-D

SFP28 transceiver module for 25GbE fiber ports - long range (25GBASE-LR), SM Fiber, LC

CPAC-TR-25LR-D

SFP+ transceiver module for 10GbE fiber ports - long range (10GBASE-LR), SM Fiber, LC

CPAC-TR-10LR-D

SFP+ transceiver module for 10GbE fiber ports - short range (10GBASE-SR), MM Fiber, LC

CPAC-TR-10SR-D

SFP+ transceiver module for 10GbE fiber ports - for links up to 40km (10GBASE-ER), SM Fiber, LC

CPAC-TR-10ER-D

SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7, CU, RJ45

CPAC-TR-10T-D© 2024 Check Point Software Technologies Ltd. All rights reserved.

5

DATA SHEETQUANTUM FORCE 9100

INTERFACE CARDS & TRANSCEIVERS Cont.

6SKU

Compatible with the CPAC-8-1/10F-D and CPAC-4-10/25F-D, Interface Cards
SFP transceiver module for 1000 BASE fiber ports - long range (1000BASE-LX), SM Fiber, LC

CPAC-TR-1LX-D

SFP transceiver module for 1000 BASE fiber ports - short range (1000BASE-SX), MM Fiber, L

CPAC-TR-1SX-D

SFP transceiver to 1000 BASE-T RJ45 (Copper), CU, RJ45

CPAC-TR-1T-D

SFP+ transceiver module for 10GbE fiber ports - long range (10GBASE-LR), SM Fiber, LC

CPAC-TR-10LR-D

SFP+ transceiver module for 10GbE fiber ports - short range (10GBASE-SR), MM Fiber, LC

CPAC-TR-10SR-D

SFP+ transceiver module for 10GbE fiber ports - for links up to 40km (10GBASE-ER), SM Fiber, LC

CPAC-TR-10ER-D

SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7, CU, RJ45

CPAC-TR-10T-D

DIRECT ATTACH CABLES (DAC)

SKU

10GbE Direct Attach Cable (DAC), 3m length for CPAC-8-1/10F-D, CPAC-4-10/25F-D

CPAC-DAC-10G-3M-D25GbE Direct Attach Cable (DAC), 3m length for CPAC-4-10/25F-D

CPAC-DAC-25G-3M-D

COMPATIBLE WITH SYNC PORT INTERFACESKU

SFP transceiver module for 1000 BASE fiber ports - short range (1000BASE-SX), MM Fiber, LC

CPAC-TR-1SX-D

SFP transceiver to 1000 BASE-T RJ45 (Copper), CU, RJ45

CPAC-TR-1T-D

SFP+ transceiver module for 10GbE fiber ports - short range (10GBASE-SR) MM Fiber, LC

CPAC-TR-10SR-D

SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7

CPAC-TR-10T-D

10GbE Direct Attach Cable (DAC), 3m length

CPAC-DAC-10G-3M-D

SFP28 transceiver module for 25GbE fiber ports - short range (25GBASE-SR) MM Fiber, LC

CPAC-TR-25SR-D

25GbE Direct Attach Cable (DAC), 3m length

CPAC-DAC-25G-3M-D

MEMORYSKU

16GB Memory upgrade kit for 9100-9400 appliances

16GB Memory upgrade kit for 9100-9400 appliances

32GB Memory upgrade kit for 9100-9400 appliances

32GB Memory upgrade kit for 9100-9400 appliances

48GB Memory upgrade kit for 9100-9400 appliances

48GB Memory upgrade kit for 9100-9400 appliances

SPARES AND MISCELLANEOUS

SKU

Lights-Out Management Module for 9000/19000/29000 appliances

CPAC-NLOM-DSlide rails for 9000 Security Gateways (22” - 32”)

CPAC-Rails-9000

Telescopic slide rails for 9000 Security Gateways (24” - 36”)

CPAC-RAILS-EXT-9000

Blank NIC cover for 9000/19000/29000 appliances

CPAC-NIC-COVER-D© 2024 Check Point Software Technologies Ltd. All rights reserved.

DATA SHEETQUANTUM FORCE 9100

7

SUBSCRIPTION SERVICESSNBT(SandBlast)

NGFW

NGTPaaaaaaaaaaaaaaaaaaa

IoT Network Protection

optional

optional

optional

SD-WAN Network Optimization

optional

optional

optional

Application ControlIPSURL Filtering
Anti-Bot
Anti-Virus
Anti-SpamDNS Security
SandBlast Threat Emulation (sandboxing)
SandBlast Threat Extraction (CDR)
Zero Phishing

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years.

Worldwide Headquarters
5 Shlomo Kaplan Street, Tel Aviv 6789159, Israel | Tel: +972-3-753-4599
U.S. Headquarters
959 Skyway Road, Suite 300, San Carlos, CA 94070 | Tel: 1-800-429-4391
www.checkpoint.com© 2024 Check Point Software Technologies Ltd. All rights reserved.						© 2024 Check Point Software Technologies Ltd. All rights reserved.
QF240424A