DATA SHEETQUANTUM FORCE 19200

Quantum Force 19200
Security Gateway

YOU DESERVE THE BEST SECURITY

Top Security EffectivenessCheck Point #1 for the 2nd year in a row with
99.8% malware block rate in Miercom NextGeneration Firewall Security Benchmark(2024)
Named a Leader by Top Analyst Firms
Forrester Wave™ for Zero Trust Platform
Providers, Q3 2023
Gartner® Firewall Magic Quadrant™ (2022)

Quantum 19200 firewalls deliver up to 800 Gbps
of firewall and 36.9 Gbps of threat prevention
throughput with integrated AI/ML security,power efficiency and space savings in a modular2 RU platform.
Increase the efficiency of your datacenter’ssecurity operations. Prevent even the mostadvanced attacks before they can infect theirtarget. And manage your on-premises andcloud firewalls from a unified platform.

AI/ML powered Threat Prevention
Protect networks and users from zero-days,
phishing, DNS, and ransomware attacks

Fastest AI-PoweredThreat Prevention

Network Resilience &Power Efficiency

Unified Security
Management

Hyperscale Network Security
On-demand expansion, load balancing
firewall clustering, and resilient accessto mission-critical applications
Unified Management and Ops Efficiency
Increase protection and reduce TCO witha consolidated security architecture

19200 Performance Highlights
Firewall

Next Gen Firewall

Threat Prevention

245 Gbps

100 Gbps

36.9 Gbps© 2023 Check Point Software Technologies Ltd. All rights reserved.

DATA SHEETQUANTUM FORCE 19200

AI-Powered advanced security anduncompromising performance,
built for data centers

Quantum Force 19200 data center firewalls
deliver high threat prevention performancein a small 2 RU form factor to protect employees,
networks, and data from cyber-theft. Four network
I/O slots can be configured to fit your network witha high port density of up to 32x 1/10GbE, 18x 10/25
GbE or 8x 40/100GbE port capacity.

Comprehensive andIndustry-Leading Security• Next Generation Firewall• Site-to-Site and Remote Access VPN• Application and Web Filtering• Intrusion Prevention• Antivirus and Anti-Bot• Advanced DNS Security• Sandboxing with file sanitization• Zero-phishing (no agent required)

Highest Performance Threat Prevention

With the 19200, organizations can inspectencrypted traffic and prevent even the mostevasive attacks without impacting internal
network performance. Achieve 36.9 Gbps ofthreat prevention throughput or up to 800 Gbps
of UDP 1518B firewall throughput with asingle 2RU firewall.

Power Efficient, Resilient Design

With a low power consumption per Gbps ofthreat prevention throughput, these large
enterprise firewalls cut power costs in halfwhen compared with similar firewalls fromother vendors. Dual, redundant hot-swap power
supplies and dual 960 GB RAID-1 NVMe storage
provides complete redundancy.

Flexible, High Performance
HTTPS Inspection

While commonly used for good, HTTPS traffic
can also hide illegal user activity and malicious
traffic. Enterprises need the ability to inspect abroad range of encrypted TLS 1.3 and HTTP/2
channels while also excluding inspection ofsensitive industry traffic, such as Health Careand Financial that have special regulatory
requirements. Check Point makes it easy tofine-tune HTTPS security using customizable
dynamic security policies.

Modular, High Port Density 2RU Chassis
The 19200 offers the flexibility to fit yourchanging network requirments. Populate four
network I/O slots with your choice of network
cards: 2x 40/100G, 4x 10/25G and 8x1/10G.
The 40/100G network interface card is alsoavailable with ASIC firewall acceleration.

© 2023 Check Point Software Technologies Ltd. All rights reserved.

2DATA SHEETQUANTUM FORCE 19200

2x Management RJ45 1/10Gcopper ports

2x 960GB NVMe RAID-1
storage array (plus model)

12

RJ45 console port
1/10/1000Base-T RJ45
Lights-out Management port

62x USB 3.0 Type-A ports

73458

USB Type-C
2x Sync 1/10/25G console port
SFP28 fiber ports

Four network card
expansion slots
4x field
replaceable fans

2x redundant
power supplies

109Specifications
PerformanceAdditional Features

Enterprise Test Conditions1
Threat Prevention2 [Gbps]
NGFW3 [Gbps]
IPS [Gbps]
Firewall [Gbps]

36.9100
145
245

RFC 3511, 2544, 2647, 1242 Performance (Lab)Firewall 1518B UDP [Gbps]
Firewall Latency (avg)
VPN AES-GCM 1452B [Gbps]
Connections/sec
Concurrent connections (Base/Plus/Max)

HTTP/TLS Inspection Performance
Threat Prevention1,2 [Gbps]
Threat Prevention2 web mix4 [Gbps]
IPS web mix4 [Gbps]

8001.85μSec86
1,000,000
21M/31M/31M

Highlights• CPU: 40 physical cores, total of 80 logical cores• Storage: BASE x 1 SSD 960GB NVMe, PLUS x 2 SSD 960GB NVMe
• 2x AC power supplies• 96 and 128 GB memory options• Lights-Out-Management card (included in Plus package)

Network Expansion Slot Options• 8 x 1/10GBASE-F SFP+ port card, up to 32 ports• 4 x 10/25GBASE-F SFP28 port card, up to 18 ports• 2 x 40/100GBASE-F QSFP28 port card, up to 8 ports

18.6
11.2
15.7

Enterprise traffic profile measured with maximum memory
Includes Firewall, App Control, URLF, IPS, Anti Malware (Bot, Virus & Spam), DNS Security , Zero-Phishing and SandBlast Threat Emulation & Extraction with logging enabled
3Includes Firewall, App Control and IPS with logging enabled
4Web traffic mix is based on NetSecOpen web traffic profile12© 2023 Check Point Software Technologies Ltd. All rights reserved.

3

DATA SHEETQUANTUM FORCE 19200

Network

PhysicalNetwork Connectivity

Power Requirements• Integrated SD-WAN network optimization and resilience• Total physical and virtual (VLAN) interfaces per appliance: 1024/4096(single gateway/with virtual systems)• 802.3ad passive and active link aggregation• Layer 2 (transparent) and Layer 3 (routing) mode

• Single Power Supply rating AC: 850W
• Power input: 100 to 240VAC (47-63Hz)• Power consumption 110VAC avg/max: 378W/630W• Maximum thermal output AC: 2149.6 BTU/hr.

Dimensions

High Availability• Enclosure: 2RU• Dimensions (WxDxH): 17.25 x 24 x 3.5 in. (442 x 610 x 88mm)• Weight: 36.3 lbs. (16.5 kg)• Active/Active L2, Active/Passive L2 and L3• Session failover for routing change, device and link failure• ClusterXL or VRRP

Environmental Conditions

IPv6• NAT66, NAT64, NAT46• CoreXL, SecureXL, HA with VRRPv3• Operating: 0° to 40°C, humidity 5% to 95%• Storage: –20° to 70°C, humidity 5% to 95% at 60°C
• MTBF: > 10 years

Unicast and Multicast Routing (see SK98226)

Certifications• OSPFv2 and v3, BGP, RIP• Static routes, Multicast routes• Policy-based routing• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3• Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1• Emissions: CE, FCC IC, VCCI, ASNZS ACMA
• Environmental: ROHS, REACH, WEEE, ISO14001

Maximum Virtual System Capacity
Firewall VSFirewall +IPS VS

Next Gen Threat
Prevention VSBase model

300

16062

Plus model

300

16080

Max capacity

30016080

Maestro / MHS

300

16080

Ordering Quantum Force 19200 Security Gateway

The 19200 includes 2x 1/10 copper GbE management ports plus an additional 2x 1/10/25 SFP28 ports
for synchronization when using the 19200 in a cluster. With the four network I/O slots, modify the baseor plus configuration to meet your networking requirements. The 40/100G ports enable firewall traffic
acceleration at line-rate.
1/10 GbECopper

1/10 GbE
Fiber

10/25GbE Fiber

40/100*GbE Fiber

MemoryBase model

282096 GB

Plus model

2860128 GBMax capacity

232188128 GB

Maestro / MHS

2004128 GBRedundantPowerAvialable
Unavialable© 2023 Check Point Software Technologies Ltd. All rights reserved.

RedundantStorage

LOM

4DATA SHEETQUANTUM FORCE 19200

SECURITY APPLIANCE 1SKU

19200 Base configuration: 2x 1/10GbE copper management ports, 2x, 1/10/25GbE SFP28 fiber sync ports,
8x 1/10GbE SFP+ ports, 96 GB RAM, 1x 960 GB NVMe, 2x 10 GbE Short Range Transceivers, 2x AC PSUs, telescopicrails, SandBlast (SNBT) Security Subscription Package for 1 Year

CPAP-SG19200-SNBT

19200 Plus configuration: 2x 1/10GbE copper management ports, 2x 1/10/25GbE SFP28 fiber sync ports,
8x 1/10GbE SFP+ ports, 4x 10/25GbE SFP28 fiber ports, 128 GB RAM, 2x 960GB NVMe, 2x 10 GbE Short Range Transceivers, 2x AC PSUs, Lights-Out Management (LOM), telescopic rails, 5 Virtual Systems, SandBlast (SNBT) Security
Subscription Package for 1 Year

CPAP-SG19200-PLUS-SNBTQuantum Force 19200 Maestro / MHS HyperScale configuration: 2x2x40/100GbE QSFP fiber ports, 2x100GbE DAC 3m CPAP-SG19200-PLUS-MHS-SNBTtransceivers, 128 GB RAM, 2x 960GB NVMe, 2x AC PSUs, Lights-Out Management (LOM), Sliding rails, with SandBlast
subscription package for 1 year

1Quantum Force 19200 Maestro / MHS HyperScale configuration with 1 MHO-175 orchestrator and 2 Quantum Force
19200 appliances, each appliance includes 2x2x40/100GbE QSFP fiber ports, 2x100GbE DAC 3m transceivers, 128
GB RAM, 2x 960GB NVMe, 2x AC PSUs, Lights-Out Management (LOM), Sliding rails, with SandBlast subscription
package for 1 year

CPAP-MHS-19202-PLUS-SNBT

Quantum Force 19200 Maestro / MHS HyperScale configuration with 1 MHO-175 orchestrator and 3 Quantum Force
19200 appliances, each appliance includes 22x2x40/100GbE QSFP fiber ports, 2x100GbE DAC 3m transceivers, 128
GB RAM, 2x 960GB NVMe, 2x AC PSUs, Lights-Out Management (LOM), Sliding rails, with SandBlast subscription
package for 1 year

CPAP-MHS-19203-PLUS-SNBT

Next Generation Threat Prevention & SandBlast package for 1 year for Quantum Force 19200 appliance

CPSB-SNBT-19200-1Y

Next Generation Threat Prevention package for 1 year for Quantum Force 19200 appliance

CPSB-NGTP-19200-1Y

Next Generation Firewall Package for 1 year for Quantum Force 19200 appliance

CPSB-NGFW-19200-1Y

Quantum IoT Network Protection for 1 year for Quantum Force 19200 appliances

CPSB-IOTP-19200-1Y

Quantum SD-WAN subscription for 1 year for Quantum Force 19200 appliances

CPSB-SDWAN-19200-1Y

Data Loss Prevention (DLP) blade for 1 year for Quantum Force 19200 appliances

CPSB-DLP-19200-1Y

The Base package includes 2 virtual systems (VS)—one management VS and one production/data VS which are not additive or counted when adding additional VS licenses. Plus model 5 VS licenses which areadditive when adding additional VS licenses.

© 2023 Check Point Software Technologies Ltd. All rights reserved.

5DATA SHEETQUANTUM FORCE 19200

ACCESSORIESINTERFACE CARDSSKU

8 Port 1/10 G Base-F SFP+ interface card for 19000/29000 appliances

CPAC-8-1/10F-D

4 Port 10/25G Base-F SFP28 interface card for 19000/29000 appliances

CPAC-4-10/25F-D

2 Port 10/25/40/100G Base-F QSFP28 interface card for 19000/29000 appliances

CPAC-2-40/100F-D

TRANSCEIVERS

SKU

Compatible with the CPAC-8-1/10F-D and CPAC-4-10/25F-D, Interface Cards
SFP transceiver module for 1000 BASE fiber ports - long range (1000BASE-LX), SM Fiber, LC

CPAC-TR-1LX-D

SFP transceiver module for 1000 BASE fiber ports - short range (1000BASE-SX), MM Fiber, LC

CPAC-TR-1SX-D

SFP transceiver to 1000 BASE-T RJ45 (Copper), CU, RJ45

CPAC-TR-1T-D

SFP+ transceiver module for 10GbE fiber ports - long range (10GBASE-LR), SM Fiber, LC

CPAC-TR-10LR-D

SFP+ transceiver module for 10GbE fiber ports - short range (10GBASE-SR), MM Fiber, LC

CPAC-TR-10SR-D

SFP+ transceiver module for 10GbE fiber ports - for links up to 40km (10GBASE-ER), SM Fiber, LC

CPAC-TR-10ER-D

SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7, CU, RJ45

CPAC-TR-10T-D

Compatible with the CPAC-4-10/25F-D Interface Cards
SFP28 transceiver module for 25GbE fiber ports - short range (25GBASE-SR), MM Fiber, LC

CPAC-TR-25SR-D

Compatible with the CPAC-2-40/100F-D Interface Card
SFP+ transceiver module for 10GbE fiber ports - long range (10GBASE-LR), SM Fiber, LC with QSFP28 Adapter

CPAC-TR-10LR-D-ADP

SFP+ transceiver module for 10GbE fiber ports - short range (10GBASE-SR) MM Fiber, LC with QSFP28 Adapter

CPAC-TR-10SR-D-ADP

SFP+ transceiver module for 10GbE fiber ports - for links up to 40km (10GBASE-ER) SM Fiber,
LC with QSFP28 Adapter

CPAC-TR-10ER-D-ADP

SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7 with QSFP28 Adapter

CPAC-TR-10T-D-ADP

SFP28 transceiver module for 25GbE fiber ports - short range (25GBASE-SR) MM Fiber, LC with QSFP28 Adapter

CPAC-TR-25SR-D-ADP

QSFP+ transceiver for 40GbE fiber Ports - short range (40GBASE-SR4) , MM Fiber, MPO-12

CPAC-TR-40SR-QSFP-100m-D

QSFP+ transceiver module for 40GbE fiber ports - short range (40GBASE-eSR4), MM Fiber, MPO-12

CPAC-TR-40SR-QSFP-300m-D

QSFP Bi-directional transceiver for 40GbE fiber ports - short range (40GBASE-SR-BD), MM Fiber, LC

CPAC-TR-40SR-QSFP-BiDi-D

QSFP+ transceiver module for 40GbE fiber ports for links up to 75m (40GBASE-SWDM4) MM Fiber, LS

CPAC-TR-40SWDM4

QSFP+ transceiver module for 40GbE fiber ports - long range (40GBASE-LR5), SM Fiber, LC

CPAC-TR-40LR-QSFP-10Km-D

QSFP28 transceiver module for 100GbE fiber ports - long range (100GBASE-LR4), SM Fiber, LC

CPAC-TR-100LR-D

QSFP28 transceiver module for 100GbE fiber ports - short range (100GBASE-SR4), MM Fiber, MPO-12

CPAC-TR-100SR-D

QSFP28 Bi-directional transceiver for 100GbE fiber Ports - short range (100GBase-SR1.2 BiDi), MM Fiber, LCCPAC-TR-100SR-BiDi

QSFP28 transceiver module for 100GbE fiber ports - for links up to 75m (100GBASE-SWDM4),MM Fiber, LC

CPAC-TR-100SWDM4-D

QSFP28 transceiver module for 100GbE fiber ports - for links up to 2km (100GBASE-CWDM4), SM Fiber, LC

CPAC-TR-100CWDM4-D

QSFP28 transceiver module for 100GbE fiber ports, - for links up to 40km (100GBASE-ER4), SM Fiber, LC

CPAC-TR-100ERL4© 2023 Check Point Software Technologies Ltd. All rights reserved.

6DATA SHEETQUANTUM FORCE 19200

DIRECT ATTACH CABLES (DAC)

SKU

10GbE Direct Attach Cable (DAC), 3m length for CPAC-8-1/10F-D, CPAC-4-10/25F-D,and CPAC-2-40/100F-D

CPAC-DAC-10G-3M-D

25GbE Direct Attach Cable (DAC), 3m length for CPAC-4-10/25F-D, and CPAC-2-40/100F-D

CPAC-DAC-25G-3M-D

40GbE Direct Attach Cable (DAC), 3m length for CPAC-2-40/100F-D

CPAC-DAC-40G-3M-D

100GbE Direct Attach Cable (DAC), 3m length for CPAC-2-40/100F-D

CPAC-DAC-100G-3M-D

COMPATIBLE WITH SYNC PORT INTERFACESKU

SFP transceiver module for 1000 BASE fiber ports - short range (1000BASE-SX), MM Fiber, LC

CPAC-TR-1SX-D

SFP transceiver to 1000 BASE-T RJ45 (Copper), CU, RJ45

CPAC-TR-1T-D

SFP+ transceiver module for 10GbE fiber ports - short range (10GBASE-SR) MM Fiber, LC

CPAC-TR-10SR-D

SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7

CPAC-TR-10T-D

10GbE Direct Attach Cable (DAC), 3m length

CPAC-DAC-10G-3M-D

SFP28 transceiver module for 25GbE fiber ports - short range (25GBASE-SR) MM Fiber, LC

CPAC-TR-25SR-D

25GbE Direct Attach Cable (DAC), 3m length

CPAC-DAC-25G-3M-D

MEMORYSKU

32GB Memory upgrade kit for 19000 appliances

CPAC-RAM32GB-19000

64GB Memory upgrade kit for 19000 appliances

CPAC-RAM64GB-19000

SPARES AND MISCELLANEOUS

SKU

960GB SSD for 19000/29000 security gateways

CPAC-SSD-960G-D

Replacement AC Power Supply for 19000 appliances

CPAC-PSU-AC-19000

Lights-Out Management Module for 19000/29000 appliances

CPAC-NLOM-D

Slide rails for 19000/29000 Security Gateways (22” - 32”)

CPAC-RAIL-L

Telescopic slide rails for 19000/29000 Security Gateways (24” - 36”)

CPAC-RAIL-EXT-L

Blank NIC cover for 19000/29000 appliances

CPAC-NIC-COVER-D© 2023 Check Point Software Technologies Ltd. All rights reserved.

7DATA SHEETQUANTUM FORCE 19200

8

SUBSCRIPTION SERVICESSNBT(SandBlast)

NGFW

NGTP

aaaaaaaaaaaaaaaaaaa

IoT Network Protection

optional

optional

optional

SD-WAN Network Optimization

optional

optional

optional

Application ControlIPS
URL Filtering
Anti-Bot
Anti-Virus
Anti-SpamDNS Security
SandBlast Threat Emulation (sandboxing)
SandBlast Threat Extraction (CDR)
Zero Phishing

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years.

Worldwide Headquarters
5 Shlomo Kaplan Street, Tel Aviv 6789159, Israel | Tel: +972-3-753-4599
U.S. Headquarters
959 Skyway Road, Suite 300, San Carlos, CA 94070 | Tel: 1-800-429-4391
www.checkpoint.com© 2023 Check Point Software Technologies Ltd. All rights reserved.

© 2023 Check Point Software Technologies Ltd. All rights reserved.

QF240424A