QUANTUM 6600 SECURITY GATEWAY

Check Point Quantum 6600 Next Generation Firewalls enables enterprises to deploy the industry’s leading
threat prevention capabilities at all points of their infrastructure, scaling security according to their changing
business needs. This enables enterprises to prevent and block even the most advanced attacks, before they
can disrupt business — greatly increasing the efficiency of their security operations.

Always Protectedagainst Gen V Attacks

Security atHyperscale

EfficientOperations

Highest caliber prevention
with unified security

On-demand expansion
with hyperscalabilityCut operation management
time by up to 80%

PERFORMANCE HIGHLIGHTSGen II Security
FirewallGen III Security

Gen V Security

NGFW 1

Advanced Threat Prevention 218 Gbps

6.2 Gbps

3.7 Gbps

Performance measured with enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control,and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

© 2023 Check Point Software Technologies Ltd. All rights reserved. | June 12, 2023

1SPOTLIGHT
16600 SECURITY GATEWAY

284356791.

Sync 10/100/1000 Base-T port

6.

2x USB 3.0 ports

2.
3.

RJ45 console port
1 network expansion slot

7.
8.

Lights-out Management port
USB Type-C console port

4.
5.

8x 10/100/1000 Base-T ports
Management 10/100/1000 Base-T port

9.

Redundant hot-swap power supplies

IoT Security
Quantum IoT Protect now provides
autonomous threat prevention. Quantum
Firewalls discover IoT assets, feed thoseto the IoT Cloud Service to automaticallymap IoT devices to profiles and thenapplies a zero-trust policy on thefirewalls to prevent IoT threats in 5minutes.

Prevent Known and Zero-day Threats
Check Point SandBlast Threat Emulation
is an evasion-resistant sandbox thatprovides zero-day protection fromadvancedandunknownthreats.
SandBlast Threat Extraction (CDR)
ensures quick delivery of safe email andweb content to users.
Next Generation Firewall, Next Generation Threat Prevention andSandBlast packages

Integrated SD-WAN
Security protects you when you’reconnected. SD-WAN ensures you’realways connected, and the connection
offers the best user experience for thelowest cost. Quantum SD-WAN inQuantum firewalls keeps you secure andconnected.

High Performance Options
Purchase the affordable Plus package
and get a base system plus 4x 10GbE
SFP+ ports with transceivers, 2x AC
power supplies, Lights-out Management
and 16 GB of memory for highconnection capacity.

ENTERPRISE-GRADE PLATFORM
1 GbE (copper)

1 GbE (fiber)

10 GbE

MemoryBase model

10008 GB

Plus model

100416 GB

Max capacity

184432 GB

Redundant
PowerLOM

optional accessory© 2023 Check Point Software Technologies Ltd. All rights reserved. | June 12, 2023

2SPECIFICATIONS
PerformanceContent Security (continued)Enterprise Test Conditions

Dynamic User-based Policy

Threat Prevention Gbps)

3.7

NGFW (Gbps)

6.2

IPS (Gbps)

10.14

Firewall (Gbps)

181(2RFC 3511, 2544, 2647, 1242 Peformance (Lab)Firewall 1518B UDP (Gbps)

32

VPN AES-128 (Gbps)

4.9
116,000

Connections/sec

2/4/8M

Concurrent connections

3• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid,
Terminal Servers and with 3 parties via a Web APIrd• Enforce consistent policy for local and remote users on Windows,
macOS, Linux, Android and Apple iOS platforms

NetworkNetwork Connectivity• Integrated SD-WAN network optimization and resilience• Total physical and virtual (VLAN) interfaces per appliance:
1024/4096 (single gateway/with virtual systems)

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast• 802.3ad passive and active link aggregation

Zero-Day Protection with logging enabled. 2: Includes Firewall, Application Control and IPS with• Layer 2 (transparent) and Layer 3 (routing) mode

logging enabled. 3: Performance measured with default/Plus/maximum memory.

High Availability

Additional Features• Active/Active L2, Active/Passive L2 and L3• Session failover for routing change, device and link failureHighlights• ClusterXL or VRRP

• 1x CPUs, 6x physical cores

IPv6• 1x 240 GB SSD storage• 1 AC or DC power supply (2x in Plus)• NAT66, NAT64, NAT46• 8, 16 and 32 GB memory options• CoreXL, SecureXL, HA with VRRPv3• Lights-Out-Management (included in Plus)

Unicast and Multicast Routing (see SK98226)• Virtual Systems (Base/Plus/max mem): 10/20/20• OSPFv2 and v3, BGP, RIP

Network Expansion Slot Options (1 of 1 slots open)• Static routes, Multicast routes• 8x 10/100/1000Base-T RJ45 port card, up to 18 ports• Policy-based routing• 4x 1000Base-F SFP port card, up to 4 ports• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3• 4x 10GBase-F SFP+ port card, up to 4 ports

PhysicalContent Security

Power Requirements

First Time Prevention Capabilities• Single Power Supply rating: 300W

• CPU-level, OS-level and static file analysis• AC power input: 100 to 240V (50-60Hz)• File disarm and reconstruction via Threat Extraction• Power consumption avg/max: 84W/147W• Average emulation time for unknown files that require fullsandbox evaluation is under 100 seconds

Dimensions• Maximal file size for Emulation is 100 MB• Emulation OS Support: Windows XP, 7, 8.1, 10Applications• Maximum thermal output: 501.6 BTU/hr.

• Enclosure: 1RU• Dimensions (WxDxH): 17.2 x 20 x 1.73 in.(438 x 508 x 44mm)• Weight (Base/Plus): 16.5/17.4 lbs. (7.5/7.9 kg)• Use 10,000+ pre-defined or customize your own applications• Accept, prevent, schedule, and apply traffic-shaping
Data Loss Prevention

Environmental Conditions• Operating: 0° to 40°C, humidity 5 to 95%• Storage: –20° to 70°C, humidity 5 to 95%• Classify 700+ pre-defined data types• End user and data owner incident handlingCertifications• Safety: UL, CB, CE, TUV GS• Emissions: FCC, CE, VCCI, RCM/C-Tick• Environmental: RoHS, WEEE, REACH , ISO14001
1© 2023 Check Point Software Technologies Ltd. All rights reserved. | June 12, 2023

13

ORDERING QUANTUM 6600 SECURITY GATEWAYSBASE CONFIGURATIONSKU

16600 Security Gateway Base Configuration, includes 10x 1GbE copper ports, 8 GB RAM, 1 SSD, 1 AC PSU, telescopic rails,SandBlast (SNBT) Security Subscription Package for 1 Year.

CPAP-SG6600-SNBT

6600 Security Gateway Plus Configuration, includes 10x 1GbE copper ports, 4x 10GbE SFP+ ports, 4x SFP+ SR
transceivers, 16 GB RAM, 1 SSD, 2x AC PSU, Lights-out Management, telescopic rails, SandBlast (SNBT) Security
Subscription Package for 1 Year.

CPAP-SG6600-PLUS-SNBT

Quantum IoT Network Protection for 1 year for 6600 appliances

CPSB-IOTP-6600-1Y

Quantum IoT Network Protection for 1 year for 6600 PLUS appliances

CPSB-IOTP-6600-PLUS-1Y

Quantum SD-WAN subscription for 1 year for 6600 appliances

CPSB-SDWAN-6600-1Y

Quantum SD-WAN subscription for 1 year for 6600 PLUS appliances

CPSB-SDWAN-6600-PLUS-1Y

The Base and Plus packages include 2 trial virtual systems (VS). These are not additive or counted when adding additional VS licenses.
1. Renewal NGFW, NGTP and SandBlast (SNBT) packages are available in the online product catalog.

Accessories
INTERFACE CARDS AND TRANSCEIVERS
8 Port 10/100/1000 Base-T RJ45 interface card

CPAC-8-1C-C4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers

CPAC-4-1F-C

SFP transceiver module for 1G fiber ports - long range (1000Base-LX)

CPAC-TR-1LX-C

SFP transceiver module for 1G fiber ports - short range (1000Base-SX)

CPAC-TR-1SX-C

SFP transceiver to 1000 Base-T RJ45 (Copper)

CPAC-TR-1T-C

4 Port 10GBase-F SFP+ interface card

CPAC-4-10F-C

SFP+ transceiver module for 10G fiber ports - for links up to 40km (10GBASE-ER)

CPAC-TR-10ER-C

SFP+ transceiver module for 10G fiber ports - long range up to 10km (10GBase-LR)

CPAC-TR-10LR-C

SFP+ transceiver module for 10G fiber ports - short range (10GBase-SR)

CPAC-TR-10SR-C

SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7

CPAC-TR-10T-C

10G SFP+ Direct Attach Copper (DAC) cable, 3 meters

CPAC-DAC-10G-3M

4 Port 1GE copper Bypass (Fail-Open) Network interface card (10/100/1000 Base-T)

CPAC-4-1C-BP-C

2 Port 10GE Short-range Fiber Bypass (Fail-Open) Network interface card (10GBase-SR)

CPAC-2-10FSR-BP-C

MEMORYSKUMemory upgrade kit from 8GB to 16GB for 6600 appliances

CPAC-RAM8GB-6600

Memory upgrade kit from 8GB to 32GB for 6600 appliances

CPAC-RAM24GB-6600

Memory upgrade kit from 16GB to 32GB for 6600 appliances

CPAC-RAM16GB-6600

SPARES AND MISCELLANEOUS

SKU

Additional/Replacement AC Power Supply for 6600, 6700, 6900 appliances

CPAC-PSU-AC-6600/6700/6900

Additional/Replacement DC Power Supply for 6600, 6700, 6900 appliances

CPAC-PSU-DC-6600/6700/6900

Lights Out Management module

CPAC-NLOM-C

Slide rails for 6000 and 7000 Security Appliances (22” - 32”)

CPAC-RAILS-6000/7000

Telescopic slide rails for 6000 and 7000 Security Appliances (24” - 36”)

CPAC-RAILS-EXT-6000/7000© 2023 Check Point Software Technologies Ltd. All rights reserved. | June 12, 2023

4

ORDERING QUANTUM 6600 (Continued)
All-inclusive Security

SNBT(SandBlast)
Prevent known and zeroday attacks

NGFW

NGTP

Basic access control
plus IPS

Prevent known threats




































IoT Network Protection

optional

optional

optional

SD-WAN Network Optimization

optional

optional

optional

Firewall
VPN (IPsec)
Mobile Access
Identity AwarenessApplication ControlContent AwarenessIPS
URL Filtering
Anti-Bot
Anti-Virus
Anti-SpamDNS Security
SandBlast Threat Emulation
SandBlast Threat Extraction
Zero Phishing

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years. Optional security
capabilities can be ordered a-la-carte or separately.

CONTACT US

North America - +1-866-488-6691 | International - +44-125-333-5558 | www.checkpoint.com© 2023 Check Point Software Technologies Ltd. All rights reserved. | June 12, 2023

5