QUANTUM 3800 SECURITY GATEWAY

Check Point Quantum 3800 Next Generation Firewalls enables enterprises to deploy the industry’s leading
threat prevention capabilities at all points of their infrastructure, scaling security according to their changing
business needs. This enables enterprises to prevent and block even the most advanced attacks, before they
can disrupt business — greatly increasing the efficiency of their security operations.

Strengthen yourPerimeter Protection

Always Protectedagainst Gen V Attacks

EfficientOperations

Extend enterprise security toremote branch offices

Highest caliber preventionwith unified security

Cut operation management
time by up to 80%

PERFORMANCE HIGHLIGHTSGen II Security

Gen III Security

Gen V SecurityFirewall

NGFW 1

Advanced Threat Prevention 2

3.6 Gbps

3 Gbps

1.5 Gbps

Performance measured with enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control,and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

© 2023 Check Point Software Technologies Ltd. All rights reserved. | June 12, 2023

1SPOTLIGHT
3800 SECURITY GATEWAY1234561.
2.
3.

5x 10/100/1000 Base-T ports
Management 10/100/1000 Base-T port
2x USB 3.0 ports

4.
5.
6.

RJ45 console port
USB Type-C console port
2x connectors to external power supply adaptors

IoT Security
Quantum IoT Protect now provides
autonomous threat prevention. Quantum
Firewalls discover IoT assets, feed thoseto the IoT Cloud Service to automaticallymap IoT devices to profiles and thenapply a zero-trust policy on the firewalls
to prevent IoT threats in 5 minutes.

Prevent Known and Zero-day Threats
Check Point SandBlast Threat Emulation
is an evasion-resistant sandbox thatprovides zero-day protection fromadvancedandunknown
threats.
SandBlast Threat Extraction (CDR)
ensures quick delivery of safe email andweb content to users.
Next Generation Firewall, Next Generation Threat Prevention andSandBlast packages

Integrated SD-WAN
Security protects you when you’reconnected. SD-WAN ensures you’realways connected, and the connection
offers the best user experience for thelowest cost. Quantum SD-WAN in
Quantum firewalls keeps you secure andconnected.

Best-in-class Security Management
Unified management across networksand cloud environments increases
operational efficiency and lowers thecomplexity of managing your security.
One console can manage all aspects ofsecurity from policy to threat prevention.

ENTERPRISE-GRADE PLATFORM
1 GbE (copper)
6
optional accessory

MemoryRedundant Power

16 GB© 2023 Check Point Software Technologies Ltd. All rights reserved. | June 12, 2023

2

SPECIFICATIONS
Performance

Network

Enterprise Test Conditions

Network Connectivity

Threat Prevention Gbps)

1.5• Integrated SD-WAN network optimization and resilience

NGFW (Gbps)

3IPS (Gbps)

3.3• Total physical and virtual (VLAN) interfaces per appliance:
1024/4096 (single gateway/with virtual systems)

Firewall (Gbps)

3.61(2RFC 3511, 2544, 2647, 1242 Performance (Lab)Firewall 1518B UDP (Gbps)

4VPN AES-128 (Gbps)

2.75

Connections/sec

60,0004M

Concurrent connections

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast
Zero-Day Protection with logging enabled. 2: Includes Firewall, Application Control and IPS withlogging enabled.

• 802.3ad passive and active link aggregation• Layer 2 (transparent) and Layer 3 (routing) mode
High Availability• Active/Active L2, Active/Passive L2 and L3• Session failover for routing change, device and link failure• ClusterXL or VRRP
IPv6
• NAT66, NAT64, NAT46• CoreXL, SecureXL, HA with VRRPv3

Additional Features

Unicast and Multicast Routing (see SK98226)

Highlights• OSPFv2 and v3, BGP, RIP• 1x CPUs, 8 physical cores• Static routes, Multicast routes• Policy-based routing• 1x 240 GB SSD storage• 16 GB memory• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3• Virtual Systems (maximum): 10

PhysicalContent Security

Power RequirementsFirst Time Prevention Capabilities• Single Power Supply rating: 40W• CPU-level, OS-level and static file analysis• File disarm and reconstruction via Threat Extraction• Average emulation time for unknown files that require fullsandbox evaluation is under 100 seconds• AC power input: 100 to 240V (50-60Hz)• Power consumption avg/max: 30W/36W• Maximum thermal output: 123 BTU/hr.
Dimensions• Maximal file size for Emulation is 100 MB• Enclosure: Desktop• Emulation OS Support: Windows XP, 7, 8.1, 10• Dimensions (WxDxH): 8.3 x 8.3 x 1.65 in. (210 x 210 x 42mm)

Applications• Weight: 3.1 lbs. (1.4 kg)• Use 10,000+ pre-defined or customize your own applications

Environmental Conditions• Accept, prevent, schedule, and apply traffic-shaping• Operating: 0° to 40°C, humidity 5 to 95%

Data Loss Prevention• Storage: –20° to 70°C, humidity 5 to 95%• Classify 700+ pre-defined data types

Certifications• End user and data owner incident handling• Safety: UL, CB, CE, TUV GS

Dynamic User-based Policy• Emissions: FCC, CE, VCCI, RCM/C-Tick• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid,Terminal Servers and with 3 parties via a Web API• Environmental: RoHS, WEEE, REACH , ISO14001rd• Enforce consistent policy for local and remote users on Windows,

11. factory certificate

1macOS, Linux, Android and Apple iOS platforms© 2023 Check Point Software Technologies Ltd. All rights reserved. | June 12, 2023

3

ORDERING QUANTUM 3800 SECURITY GATEWAYS
BASE CONFIGURATION

SKU

13800 Security Gateway Configuration, includes 6x 1GbE copper ports, 16 GB RAM, 1 240 GB SSD, 1 external AC poweradaptor, SandBlast (SNBT) Security Subscription Package for 1 Year

CPAP-SG3800-SNBT

Quantum IoT Network Protection for 1 year for 3800 appliances

CPSB-IOTP-3800-1Y

Quantum SD-WAN subscription for 1 year for 3800 appliances

CPSB-SDWAN-3800-1Y

The Base package includes 2 trial virtual systems (VS). These are not additive or counted when adding additional VS licenses.
1

Renewal NGFW, NGTP and SandBlast (SNBT) packages are available in the online product catalog.

SPARES AND MISCELLANEOUS

SKU

Replacement/Additional Power Supply for 3600 and 3800 Security Gateways

CPAC-PSU-3600/3800

Rack Mount kit for the 1500, 3600 and 3800 Security Gateways

CPAC-1500/3600/3800-RM-DUAL

All-inclusive Security

SNBT(SandBlast)
Prevent known and zeroday attacks

NGFW

NGTP

Basic access control
plus IPS

Prevent known threats



































IoT Network Protection

optional

optional

optional

SD-WAN Network Optimization

optional

optional

optional

Firewall
VPN (IPsec)
Mobile Access
Identity AwarenessApplication Control
Content AwarenessIPS
URL Filtering
Anti-Bot
Anti-Virus
Anti-SpamDNS Security
SandBlast Threat Emulation
SandBlast Threat Extraction
Zero Phishing

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years. Optional security
capabilities can be ordered a-la-carte or separately.

CONTACT US

North America - +1-866-488-6691 | International - +44-125-333-5558 | www.checkpoint.com© 2023 Check Point Software Technologies Ltd. All rights reserved. | June 12, 2023

4