QUANTUM 7000 SECURITY GATEWAY

Check Point Quantum 7000 Next Generation Firewalls enables enterprises to deploy the industry’s leading
threat prevention capabilities at all points of their infrastructure, scaling security according to their changing
business needs. This enables enterprises to prevent and block even the most advanced attacks, before they
can disrupt business — greatly increasing the efficiency of their security operations.

Always Protectedagainst Gen V Attacks

Security atHyperscale

EfficientOperations

Highest caliber prevention
with unified security

On-demand expansion
with hyperscalabilityCut operation management
time by up to 80%

PERFORMANCE HIGHLIGHTSGen II Security
FirewallGen III Security

Gen V Security

NGFW 1

Advanced Threat Prevention 248 Gbps

22 Gbps

9.5 Gbps

Performance measured with enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control,and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

© 2023 Check Point Software Technologies Ltd. All rights reserved. June 5, 2023

1

SPOTLIGHT
7000 SECURITY GATEWAY

128934567101.
2.
3.
4.
5.

Sync 10/100/1000 Base-T port
RJ45 console port
2x network card expansion slots
8x 10/100/1000 Base-T ports
Management 10/100/1000 Base-T port

6.
7.
8.
9.
10.

2x USB 3.0 ports
Lights-out Management port
USB Type-C console port
2x 480GB SSD RAID1
Redundant hot-swap power supplies

Prevent Known and Zero-day Threats
Check Point SandBlast Threat Emulation
is an evasion-resistant sandbox thatprovides zero-day protection fromadvancedandunknownthreats.
SandBlast Threat Extraction (CDR)
ensures quick delivery of safe email andweb content to users.

Autonomous IoT Security
Quantum IoT Protect now provides
autonomous threat prevention. QuantumFirewalls discover IoT assets, feed thoseto the IoT Cloud Service to automaticallymap IoT devices to profiles and thenapplies a zero-trust policy on thefirewalls to prevent IoT threats in 5minutes.
Next Generation Firewall, Next Generation Threat Prevention andSandBlast packages

Flexible I/O Options
Purchase the affordable Plus package
and get a base system plus 4x 10GbE
SFP+ ports with transceivers, 2x AC
power supplies, 2x SSD drives, Lightsout Management and 32 GB of memoryfor high connection capacity.

Integrated SD-WAN
Security
protects
youwhenyou’reconnected. SD-WAN ensures you’re always
connected, and the connection offers thebest user experience for the lowest cost.
Quantum SD-WAN in Quantum firewalls
keeps you secure and connected.

Remote Management and Monitoring
A Lights-Out-Management (LOM) card
provides out-of-band management toremotely diagnose, start, restart, andmanage the appliance from a remotelocation.

ENTERPRISE-GRADE PLATFORM
1 GbE(copper)

1 GbE(fiber)

10 GbE

100/40/25GbE

MemoryBase model

1000016 GB

Plus model

1004032 GB

8264 GBMax capacity

268

Redundant
StorageRedundant
PowerLOM

optional accessory© 2023 Check Point Software Technologies Ltd. All rights reserved. June 5, 2023

2SPECIFICATIONS
PerformanceContent Security (continued)

Enterprise Test Conditions

Dynamic User-based Policy

Threat Prevention Gbps)

9.5

NGFW (Gbps)

22

IPS (Gbps)

25

Firewall (Gbps)

481(2RFC 3511, 2544, 2647, 1242 PERFORMANCE (LAB)
Firewall 1518B UDP (Gbps)

76.8

VPN AES-128 (Gbps)

11.9
330,000

Connections/sec

4/8/16M

Concurrent connections

3• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid,
Terminal Servers and with 3 parties via a Web APIrd• Enforce consistent policy for local and remote users on Windows,macOS, Linux, Android and Apple iOS platforms

NetworkNetwork Connectivity• Integrated SD-WAN network optimization and resilience• Total physical and virtual (VLAN) interfaces per appliance:
1024/4096 (single gateway/with virtual systems)

1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast• 802.3ad passive and active link aggregation

Zero-Day Protection with logging enabled. 2: Includes Firewall, Application Control and IPS with• Layer 2 (transparent) and Layer 3 (routing) mode
High Availability

logging enabled. 3: Performance measured with default/Plus/maximum memory.

• Active/Active L2, Active/Passive L2 and L3

Additional Features• Session failover for routing change, device and link failureHighlights• 1x CPUs, 16 physical cores, 32 virtual cores• 1x 480 GB SSD storage (2x in Plus)• ClusterXL or VRRP
IPv6
• NAT66, NAT64, NAT46• 1 AC power supply (2x in Plus)• CoreXL, SecureXL, HA with VRRPv3• 16, 32 and 64 GB memory options• Lights-Out-Management (included in Plus)

Unicast and Multicast Routing (see SK98226)• Virtual Systems (Base/Plus/max mem): 10/20/20
Network Expansion Slot Options (2 of 2 slots open)• OSPFv2 and v3, BGP, RIP• 8x 10/100/1000Base-T RJ45 port card, up to 26 ports• Policy-based routing• 4x 1000Base-F SFP port card, up to 8 ports• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3• 4x 10GBase-F SFP+ port card, up to 8 ports• 2x 100/40/25G QSFP28 port double-slot-width card

• Static routes, Multicast routes

PhysicalPower Requirements• Single Power Supply rating: 500W

Content Security
First Time Prevention Capabilities• CPU-level, OS-level and static file analysis• File disarm and reconstruction via Threat Extraction• Average emulation time for unknown files that require fullsandbox evaluation is under 100 seconds• Maximal file size for Emulation is 100 MB• Emulation OS Support: Windows XP, 7, 8.1, 10Applications• Use 10,000+ pre-defined or customize your own applications• Accept, prevent, schedule, and apply traffic-shaping

Data Loss Prevention• Classify 700+ pre-defined data types• End user and data owner incident handling• AC power input: 100 to 240V (47-63Hz)• Power consumption avg/max: 144W/190W• Maximum thermal output: 648.3 BTU/hr.
Dimensions• Enclosure: 1RU• Dimensions (WxDxH): 17.2 x 22.83 x 1.73 in. (438 x 580 x 44mm)• Weight (Base/Plus): 17.6/19.8 lbs. (8.45/9 kg)
Environmental Conditions• Operating: 0° to 40°C, humidity 5 to 95%• Storage: –20° to 70°C, humidity 5 to 95%

Certifications• Safety: UL, CB, CE, TUV GS• Emissions: FCC, CE, VCCI, RCM/C-Tick• Environmental: RoHS, WEEE, REACH , ISO14001
11. factory certificate

1© 2023 Check Point Software Technologies Ltd. All rights reserved. June 5, 2023

3

ORDERING QUANTUM 7000 SECURITY GATEWAYS
BASE CONFIGURATIONSKU

17000 Security Gateway Base configuration, includes 10x 1GbE copper ports, 16 GB RAM, 1 SSD, 1 AC PSU, telescopic rails,SandBlast (SNBT) Security Subscription Package for 1 Year

CPAP-SG7000-SNBT

7000 Security Gateway Plus configuration, includes 10x 1GbE copper ports, 4x 10GbE SFP+ ports, 4x SR transceivers, 32
GB RAM, 2x SSD, 2x AC PSU, Lights-out Management, telescopic rails, SandBlast (SNBT) Security Subscription Packagefor 1 Year

CPAP-SG7000-PLUS-SNBT

Quantum IoT Network Protection for 1 year for 7000 appliances

CPSB-IOTP-7000-1Y

Quantum IoT Network Protection for 1 year for 7000 PLUS appliances

CPSB-IOTP-7000-PLUS-1Y

Quantum SD-WAN subscription for 1 year for 7000 appliances

CPSB-SDWAN-7000-1Y

Quantum SD-WAN subscription for 1 year for 7000 PLUS appliances

CPSB-SDWAN-7000-PLUS-1Y

The Base and Plus packages include 2 trial virtual systems (VS). These are not additive or counted when adding additional VS licenses.
1Renewal NGFW, NGTP and SandBlast (SNBT) packages and optional IoT and SD-WAN a la carte services are available in the online product catalog.

Accessories
INTERFACE CARDS AND TRANSCEIVERS
8 Port 10/100/1000 Base-T RJ45 interface card

CPAC-8-1C-C

4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers

CPAC-4-1F-C

SFP transceiver module for 1G fiber ports - long range (1000Base-LX)

CPAC-TR-1LX-C

SFP transceiver module for 1G fiber ports - short range (1000Base-SX)

CPAC-TR-1SX-C

SFP transceiver to 1000 Base-T RJ45 (Copper)

CPAC-TR-1T-C

4 Port 10GBase-F SFP+ interface card

CPAC-4-10F-C

SFP+ transceiver module for 10G fiber ports - for links up to 40km (10GBASE-ER)

CPAC-TR-10ER-C

SFP+ transceiver module for 10G fiber ports - long range up to 10km (10GBase-LR)

CPAC-TR-10LR-C

SFP+ transceiver module for 10G fiber ports - short range (10GBase-SR)

CPAC-TR-10SR-C

SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7

CPAC-TR-10T-C

10G SFP+ Direct Attach Copper (DAC) cable, 3 meters

CPAC-DAC-10G-3M

2 Port 10/25/40/100G QSFP28 Dual Width interface card *CPAC-2-40/100F-CQSFP28 transceiver module for 100G fiber ports - short range (100GBase-SR4)

CPAC-TR-100SRQSFP28 transceiver module for 100G fiber ports - long range (100GBase-LR4)

CPAC-TR-100LR

100G SWDM4, LC connector, 75m/OM3 fiber

CPAC-TR-100SWDM4100G CWDM4, LC connector, 2Km/ single mode fiber

CPAC-TR-100CWDM4QSFP+ transceiver module for 40G fiber ports - short range (40GBase-SR)

CPAC-TR-40SR-QSFP-300m

QSFP+ transceiver module for 40G fiber ports - long range (40GBase-LR)

CPAC-TR-40LR-QSFP-10Km

Bi-directional QSFP transceiver for 40G fiber ports - short range (40GBase-SR-BD)

CPAC-TR-40SR-QSFP-BIDI

QSFP28 to SFP28 Adapter - 10G/25G fiber adaptor

CPAC-TR-QSFP28-SFP28

SFP28 transceiver module for 25G fiber ports with QSFP28 adaptor - short range (25GBase-SR)

CPAC-TR-25SR-ADP

SFP28 transceiver module for 25G fiber ports with QSFP28 adaptor - long range (25GBase-LR)

CPAC-TR-25LR-ADP

SFP+ transceiver module for 10G fiber with QSFP28 adaptor - for links up to 40km (10GBASE-ER)

CPAC-TR-10ER-ADP

SFP+ transceiver module for 10G fiber with QSFP28 adaptor - long range up to 10km (10GBase-LR)

CPAC-TR-10LR-ADP

SFP+ transceiver module for 10G fiber with QSFP28 adaptor - short range (10GBase-SR)

CPAC-TR-10SR-ADP

SFP+ transceiver 10GBASE-T RJ45 (Copper) with QSFP28 adaptor - for links up to 30m over CAT6a/CAT7

CPAC-TR-10T-ADP100G Direct Attach Copper cable (QSFP28), 3 meters

CPAC-DAC-100G-3M

40G Direct Attach Copper cable (QSFP28), 3 meters

CPAC-DAC-40G-3M

25G Direct Attach Copper cable (QSFP28), 3 meters

CPAC-DAC-25G-3M

10G Direct Attach Copper cable, (10BASE-CU) 3 meters

CPAC-DAC-10G-3M* CPAC-2-40/100F-C 25G transceivers will be supported in a future Jumbo Hot Fix© 2023 Check Point Software Technologies Ltd. All rights reserved. June 12, 2023

4

ORDERING QUANTUM 7000 (Continued)
BYPASS (FAIL-OPEN) NETWORK INTERFACE CARDSSKU

4 Port 1GE copper Bypass (Fail-Open) Network interface card (10/100/1000 Base-T)

CPAC-4-1C-BP-C

2 Port 10GE Short-range Fiber Bypass (Fail-Open) Network interface card (10GBase-SR)

CPAC-2-10FSR-BP-C

MEMORY

SKU

Memory upgrade kit from 16GB to 32GB for 7000 appliances

CPAC-RAM16GB-7000

Memory upgrade kit from 16GB to 64GB for 7000 appliances

CPAC-RAM48GB-7000

Memory upgrade kit from 32GB to 64GB for 7000 appliances

CPAC-RAM32GB-7000

SPARES AND MISCELLANEOUS

SKU

Additional/Replacement AC Power Supply for 7000 appliances

CPAC-PSU-AC-7000

Additional/Replacement DC Power Supply for 7000 appliances

CPAC-PSU-DC-7000

480GB SSD for 7000 Security Gateways

CPAC-SSD-480G-7000

Lights Out Management module

CPAC-NLOM-C

Slide rails for 6000 and 7000 Security Appliances (22” - 32”)

CPAC-RAILS-6000/7000

Telescopic slide rails for 6000 and 7000 Security Appliances (24” - 36”)

CPAC-RAILS-EXT-6000/7000

All-inclusive Security

SNBT(SandBlast)
Prevent known and zeroday attacks

NGFW

NGTP

Basic access control
plus IPS

Prevent known threats

IoT Network Protection

optional

optional

optionalSD-WAN Network Optimization

optional

optional

optional

Firewall
VPN (IPsec)
Mobile Access
Identity AwarenessApplication Control
Content AwarenessIPS
URL Filtering
Anti-Bot
Anti-Virus
Anti-SpamDNS Security
SandBlast Threat Emulation
SandBlast Threat Extraction
Zero-phishing

The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years. Optional security
capabilities can be ordered a-la-carte or separately.

CONTACT US

North America - +1-866-488-6691 | International - +44-125-333-5558 | www.checkpoint.com© 2023 Check Point Software Technologies Ltd. All rights reserved. June 12, 20235