STT | Tính năng | Checkpoint 23500 |
1 | Performance | |
| Enterprise Testing Conditions | |
| Threat Prevention throughput | 11 Gbps |
| NGFW throughput | 13.75 Gbps |
| IPS throughput | 14.45 Gbps |
| Firewall throughput | 52 Gbps |
| Ideal Testing Conditions | |
| Firewall throughput (UDP 1518 byte packet) | 116 Gbps |
| VPN throughput AES-128 | 26 Gbps |
| Connections per second (64 byte response) | 310,000 |
| Concurrent connections (64 byte response) | 6.4/25.6/51.2 M |
2 | Additional Features | |
| Highlights | |
| Sync 10/100/1000Base-T RJ45 port | 1 |
| Management port | 1 x 10/100/1000Base-T RJ45 port |
| USB Port | 2 x USB 3.0 ports for ISO installation |
| Console port | 1 x RJ45, 1 x Micro USB |
| Network Card Expansion Slots | 5 |
| Lights-Out-Management port | 1 |
| Graphic LCD display | 1 |
| CPU | 2 x CPUs, 20 x physical cores, 40 x virtual cores (total) |
| Disk Drives | 2x 1TB HDD or 480GB SSD RAID1 storage |
| RAM | 16, 64 and 128 GB memory options |
| Lights-Out-Management card | Included |
| Virtual Systems (base/HPP/max mem) | 60/250/250 |
| Network Expansion Slot Options (3 of 5 slots open) | |
| 1x 10/100/1000Base-T RJ45 port card, up to 42 ports | Optional |
| 4x 1000Base-F SFP port card, up to 20 ports | Optional |
| 4x 10GBase-F SFP+ port card, up to 20 ports | Optional |
| 2x 40G QSFP+ port card, up to 6 ports | Optional |
| 2x 100/25G QSFP28 port card, up to 6 ports | Optional |
| Fail-Open/Bypass Network Options | |
| 4x 10/100/1000Base-T RJ45 port card | Optional |
| 2x 10GBase-F SFP+ port card | Optional |
3 | Content Security | |
| First Time Prevention Capabilities | |
| CPU-level, OS-level and static file analysis | Yes |
| File disarm and reconstruction via Threat Extraction | Yes |
| Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds | Yes |
| Maximal file size for Emulation | 100 MB |
| Emulation OS Support | Windows XP, 7, 8.1, 10 |
| Applications | |
| Use 8,000+ pre-defined or customize your own applications | Yes |
| Accept, prevent, schedule, and apply traffic-shaping | Yes |
| Data Lost Prevention | |
| Classify 700+ pre-defined data types | Yes |
| End user and data owner incident handling | Yes |
| Dynamic User-based Policy | |
| Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3rd parties via a Web API | Yes |
| Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android and Apple iOS platforms | Yes |
4 | Network | |
| Network Connectivity | |
| Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems) | Yes |
| 802.3ad passive and active link aggregation | Yes |
| Layer 2 (transparent) and Layer 3 (routing) mode | Yes |
| High Availability | |
| Active/Active L2, Active/Passive L2 and L3 | Yes |
| Session failover for routing change, device and link failure | Yes |
| ClusterXL or VRRP | Yes |
| IPv6 | |
| NAT66, NAT64, NAT46 | |
| CoreXL, SecureXL, HA with VRRPv3 | |
| Unicast and Multicast Routing (see SK98226) | |
| OSPFv2 and v3, BGP, RIP | Yes |
| Static routes, Multicast routes | Yes |
| Policy-based routing | Yes |
| PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3 | Yes |
5 | Physical | |
| Power Requirements | |
| Single Power Supply rating | 800W |
| AC power input | 90 to 264V (47-63Hz) |
| DC input current | -40.5V/24A -48V/19.2A, -60V/16.0A |
| Power consumption avg/max | AC222/383W, DC324.8/376W |
| Maximum thermal output | 1306.9 BTU/hr |
| Dimensions | |
| Enclosure | 2RU |
| Dimensions (WxDxH) | 17.4×20.84×3.5 in. (442x529x88mm) |
| Weight | 34.8 lbs. (15.8 kg) |
| Environmental Conditions | |
| Operating | 0° to 40°C, humidity 5% to 95% |
| Storage | –20° to 70°C, humidity 5% to 95% at 60°C |
| Certifications | |
| Safety | UL, CB, CE, TUV GS |
| Emissions | FCC, CE, VCCI, RCM/C-Tick |
| Environmental | RoHS, WEEE, REACH1, ISO140011 |
| | |