Check Point 15600 Security Gateway | Datasheet
CHECK POINT
15600 NEXT GENERATION SECURITY GATEWAY
FOR THE LARGE ENTERPRISE
CHECK POINT 15600 NEXT OVERVIEW
GENERATION SECURITY The Check Point 15600 Next Generation Security Gateway combines the most
GATEWAY comprehensive security protections with data center grade hardware to maximize
uptime while safeguarding enterprise and data center networks. The 15600 is a 2U
Next Generation Security Gateway with three I/O expansion slots for high port
Large enterprise security,
capacity, redundant AC or DC power supplies and fans, a 2x 1TB (HDD) or 2x 480GB
performance and reliability
(SSD) RAID1 disk array, and Lights-Out Management (LOM) for remote management.
If you’re ready for 25, 40, or 100 GbE, so is the 15600 Next Generation Security
Gateway with the 40 and 100/25 GbE IO card options.
Product Benefits
High performance protection against
the most advanced cyber attacks COMPREHENSIVE THREAT PREVENTION
Unique “first time prevention” for the The rapid growth of malware, growing attacker sophistication and the rise of new
most sophisticated zero day attack unknown zero-day threats require a different approach to keep enterprise networks
Optimized for inspecting SSL and data secure. Check Point delivers fully integrated, comprehensive Threat
encrypted traffic Prevention with award-winning SandBlast™ Threat Emulation and Threat Extraction
Future-proofed technology for complete protection against the most sophisticated zero-day threats.
safeguards against tomorrow’s risks
Centralized control and LOM Unlike traditional solutions that are subject to evasion techniques, introduce
improves serviceability unacceptable delays, or let potential threats through while evaluating files, Check
Modular, expandable chassis with Point SandBlast stops more malware from entering your network. With our solution
flexible I/O options your employees can work safely no matter where they are and doesn’t compromise
their productivity.
Product Features
3,850 SecurityPower™ Units
Simple deployment and management
PERFORMANCE HIGHLIGHTS
1 2
Firewall IPS NGFW Threat Prevention
Virtual Systems consolidates security
76 Gbps 18 Gbps 17 Gbps 13.11 Gbps
onto one device
Performance measured under ideal testing conditions. Additional performance details on page 5.
High port density with 25, 40 and 100 1. Includes Firewall, Application Control, and IPS Software Blades.
GbE options 2. Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti -Bot and SandBlast Zero-Day Protection Software
Blades using R80.10.
Redundant AC or DC power supplies,
fans and disk drives eliminate single
point of failure
©2017 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non -confidential content | April 19, 2017 | Page 1
Check Point 15600 Security Gateway | Datasheet
ALL-INCLUSIVE SECURITY SOLUTIONS INCLUSIVE HIGH PERFORMANCE PACKAGE
Check Point 15600 Next Generation Security Gateways offer Customers with high connection capacity requirements can
a complete and consolidated security solution available in purchase the affordable High Performance Package (HPP).
two complete packages: This includes the base system plus one 4x 10Gb SFP+
NGTP: prevent sophisticated cyber-threats with interface cards, transceivers and 32 GB of memory for high
Application Control, URL Filtering, IPS, Antivirus, connection capacity.
Anti-Bot and Email Security.
NGTX: NGTP with SandBlast Zero-Day Protection,
Base HPP Max
which includes Threat Emulation and Threat
1 GbE ports (Copper) 10 10 26
Extraction.
10 GbE ports (Fiber) 2 6 12
PREVENT KNOWN AND ZERO-DAY THREATS Transceivers (SR) 2 6 12
The 15600 Next Generation Security Gateway protects 40 GbE ports (Fiber) 0 0 4
organizations from both known and unknown threats with 100/25 GbE ports (Fiber) 0 0 4
Antivirus, Anti-Bot, SandBlast Threat Emulation RAM 16GB 32GB 64GB
(sandboxing), and SandBlast Threat Extraction technologies. HDD or SSD 2 2 2
AC or DC Power Units 2 2 2
As part of the Check Point SandBlast Zero-Day Protection
solution, the cloud-based Threat Emulation engine detects Lights Out Management Included Included Included
malware at the exploit phase, even before hackers can apply
evasion techniques attempting to bypass the sandbox. Files A RELIABLE SERVICEABLE PLATFORM
are quickly quarantined and inspected, running in a virtual The Check Point 15600 Next Generation Security Gateway
sandbox to discover malicious behavior before it enters your delivers business continuity and serviceability through
network. This innovative solution combines cloud-based features such as hot swappable redundant AC or DC power
CPU-level inspection and OS-level sandboxing to prevent supplies, hot-swappable redundant disk drives (RAID),
infection from the most dangerous exploits, and zero-day and redundant fans and an advanced LOM card for out-of-band
targeted attacks. management. Combined together, these features ensure a
greater degree of business continuity and serviceability when
Furthermore, SandBlast Threat Extraction removes these appliances are deployed in the customer’s networks.
exploitable content, including active content and embedded
objects, reconstructs files to eliminate potential threats, and REMOTE MANAGEMENT AND MONITORING
promptly delivers sanitized content to users to maintain A Lights-Out-Management (LOM) card provides out-of-band
business flow. remote management to remotely diagnose, start, restart and
manage the Next Generation Security Gateway from a
NGTX remote location. Administrators can also use the LOM web
NGTP
(SandBlast)
interface to remotely install an OS image from an ISO file.
Prevent known Prevent known
threats and zero-day
attacks 25, 40 AND 100 GbE CONNECTIVITY
Firewall High speed connections are essential in modern enterprise
VPN (IPsec) and data center environments, especially those with high-
IPS density virtualized servers. If you’re ready to move from 10 to
25, 40 or 100 GbE, so is the 15600 Next Generation Security
Application Control
Gateway.
URL Filtering
Anti-Bot TAP THE POWER OF VIRTUALIZATION
Anti-Virus Check Point Virtual Systems enable organizations to
Anti-Spam consolidate infrastructure by creating multiple virtualized
SandBlast Threat Emulation security gateways on a single hardware device, offering
SandBlast Threat Extraction significant cost savings with seamless security and
infrastructure consolidation.
©2017 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non -confidential content | April 19, 2017 | Page 2
Check Point 15600 Security Gateway | Datasheet
1 2
15600 SECURITY GATEWAY
1 Graphic LCD display
2 2 x 1 TB (HDD) or 2x 480GB (SSD) RAID1
3 Three network card expansion slots
4 USB ports for ISO installation
5 Console port
6 Lights-Out Management port
7 Sync 10/100/1000Base-T RJ45
8 Management 10/100/1000Base-T RJ45 4 6 8
3 5 7
ORDERING INFORMATION
BASE CONFIGURATION 1
15600 Next Generation Security Gateway Base Configuration, includes 10x1GbE copper ports, 2 10GbE CPAP-SG15600-NGTP
SFP+ ports + 2 SR transceivers, 16GB RAM, 2 HDD, 2 AC Power Units, Lights Out Management (LOM),
Next Generation Threat Prevention (NGTP) Security Subscription Package for 1 Year .
15600 SandBlast Next Generation Security Gateway Base Configuration, includes 10x1GbE copper ports, CPAP-SG15600-NGTX
2 10GbE SFP+ ports + 2 SR transceivers, 16GB RAM, 2 HDD, 2 AC Power Units, Lights Out Management
(LOM), SandBlast (NGTX) Security Subscription Package for 1 Year
HIGH PERFORMANCE PACKAGES 1
15600 Next Generation Security Gateway with High Performance Package, includes10x1GbE copper CPAP-SG15600-NGTP-HPP
ports, 6x10Gb SFP+ ports, 6 SR transceivers, 32 GB RAM, 2 HDD, 2 AC Power Units, Lights Out
Management (LOM), Next Generation Threat Prevention (NGTP) Security Subscription Package for 1 Year
15600 Next Generation Security Gateway with High Performance Package, includes10x1GbE copper CPAP-SG15600-NGTX-HPP
ports, 6x10Gb SFP+ ports, 6 SR transceivers, 32 GB RAM, 2 HDD, 2 AC Power Units, Lights Out
Management (LOM), Next Generation Threat Extraction (SandBlast) Security Subscription Package for 1
Year
1
VIRTUAL SYSTEM PACKAGES
15600 Next Generation Security Gateway with High Performance Package, includes 10x1GbE copper CPAP-SG15600-NGTP-HPP-VS20
ports, 6x10GbE SFP+ ports + 6 SR transceivers, 32GB RAM, 2 HDD, 2 AC Power Units, Lights Out
Management (LOM), Next Generation Threat Prevention (NGTP) Security Subscription Package for 1 Year
and 20 Virtual Systems
Two 15600 Next Generation Security Gateways with High Performance Package, includes 10x1GbE CPAP-SG15600-NGTP-HPP-VS20-2
copper ports, 6x10GbE SFP+ ports + 6 SR transceivers, 32GB RAM, 2 HDD, 2 AC Power Units, Lights
Out Management (LOM), Next Generation Threat Prevention (NGTP) Security Subscription Package for 1
Year and 20 Virtual Systems
15600 Next Generation Security Gateways with High Performance Package, includes 10x1GbE copper CPAP-SG15600-NGTX-HPP-VS20
ports, 6x10GbE SFP+ ports + 6 SR transceivers, 32GB RAM, 2 HDD, 2 AC Power Units, Lights Out
Management (LOM), Next Generation Threat Extraction (SandBlast) Security Subscription Package for 1
Year and 20 Virtual Systems
Two 15600 Next Generation Security Gateways with High Performance Package, includes 10x1GbE CPAP-SG15600-NGTX-HPP-VS20-2
copper ports, 6x10GbE SFP+ ports + 6 SR transceivers, 32GB RAM, 2 HDD, 2 AC Power Units, Lights
Out Management (LOM), Next Generation Threat Extraction (SandBlast) Security Subscription Package
for 1 Year and 20 Virtual Systems
1
SKUs for 2 and 3 years and appliances with an SSD option are also available, see the online Product Catalog
©2017 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non -confidential content | April 19, 2017 | Page 3
Check Point 15600 Security Gateway | Datasheet
1 2
15600 SECURITY GATEWAY
1 Redundant AC or DC power supplies
2 Cooling fans
ACCESSORIES
INTERFACE CARDS AND TRANSCEIVERS
8 Port 10/100/1000 Base-T RJ45 interface card CPAC-8-1C-B
4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers CPAC-4-1F-B
SFP transceiver module for 1G fiber ports - long range (1000Base-LX) CPAC-TR-1LX-B
SFP transceiver module for 1G fiber ports - short range (1000Base-SX) CPAC-TR-1SX-B
SFP transceiver to 1000 Base-T RJ45 (Copper) CPAC-TR-1T-B
4 Port 10GBase-F SFP+ interface card CPAC-4-10F-B
SFP+ transceiver module for 10G fiber ports - long range (10GBase-LR) CPAC-TR-10LR-B
SFP+ transceiver module for 10G fiber ports - short range (10GBase-SR) CPAC-TR-10SR-B
2 Port 40GBase-F QSFP+ interface card CPAC-2-40F-B
QSFP+ transceiver module for 40G fiber ports - short range (40GBase-SR) CPAC-TR-40SR-QSFP-300m
QSFP+ transceiver module for 40G fiber ports - long range (40GBase-LR) CPAC-TR-40LR-QSFP-10K
Bi-directional QSFP+ transceiver for 40G fiber Ports - short range (40GBase-SR-BiDi) CPAC-TR-40SR-QSFP-BiDi
2 Port 100/25G QSFP28 interface card CPAC-2-100/25F-B
SFP28 transceiver module for 25G fiber ports with QSFP28 adaptor - short range (25GBase-SR) CPAC-TR-25SR-ADP-B
SFP28 transceiver module for 25G fiber ports with QSFP28 adaptor - long range (25GBase-LR) CPAC-TR-25LR-ADP-B
QSFP28 transceiver module for 100G fiber ports - short range (100GBase-SR4) CPAC-TR-100SR-B
QSFP28 transceiver module for 100G fiber ports - long range (100GBase-LR4) CPAC-TR-100LR-B
4 Port 1GE copper Bypass (Fail-Open) network interface card (10/100/1000 Base-T) CPAC-4-1C-BP-B
2 Port 10GE short-range Fiber Bypass (Fail-Open) network interface card (10GBase-SR) CPAC-2-10-FSR-B-BP
SPARES AND MISCELLANEOUS
Memory upgrade kit from 16GB to 32GB for 15600 appliance CPAC-RAM16GB-15600
Memory upgrade kit from 16GB to 64GB for 15600 appliance CPAC-RAM48GB-15600
Memory upgrade kit from 32GB to 64GB for 15600 appliance CPAC-RAM32GB-15600
Additional/Replacement 1 TB hard drive for 15000 and 23000 Appliances CPAC-HDD-1TB-B
Replacement AC power supply for 15000 Appliances CPAC-PSU-AC-15000
Dual DC power supplies for 15000 and 23000 appliances CPAC-PSU-DC-Dual-15000/23000
Replacement fan cartridge for 15000 and 23000 appliances CPAC-FAN-B
Slide rails for 15000 and 23000 Appliances (22” - 32”) CPAC-RAIL-L
Extended slide rails for 15000 and 23000 Appliances (26” - 36”) CPAC-RAIL-EXT-L
©2017 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non -confidential content | April 19, 2017 | Page 4
Check Point 15600 Security Gateway | Datasheet
Performance Network
Ideal Testing Conditions Network Connectivity
76 Gbps of UDP 1518 byte packet firewall throughput Total physical and virtual (VLAN) interfaces per appliance:
18 Gbps IPS 1024/4096 (single gateway/with virtual systems)
17 Gbps of NGFW
1 802.3ad passive and active link aggregation
13.11 Gbps of Threat Prevention
2
Layer 2 (transparent) and Layer 3 (routing) mode
15.8 Gbps of AES-128 VPN throughput High Availability
185,000 connections per second, 64 byte response Active/Active and Active/Passive - L3 mode
6.4/12.8/25.6M concurrent connections, 64 byte response
3
Session failover for routing change, device and link failure
Real-World Production Conditions ClusterXL or VRRP
3,850 SecurityPower Units IPv6
30 Gbps of firewall throughput NAT66, NAT64
8 Gbps IPS CoreXL, SecureXL, HA with VRRPv3
5.2 Gbps of NGFW
1
Unicast and Multicast Routing (see SK98226)
3 Gbps of Threat Prevention
2
OSPFv2 and v3, BGP, RIP
Virtual Systems Static routes, Multicast routes
Maximum VS (base/HPP/max memory): 60/80/125 Policy-based routing
Your performance may vary depending on different factors. PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
Visit [Link]/partnerlocator to find an appliance
that matches your unique requirements. Physical
1. Includes Firewall, Application Control and IPS Software Blades. 2. Includes Firewall, Application Power Requirements
Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection Software
Single Power Supply rating: AC(600W), DC(800W)
Blades using R80.10. 3. Performance measured with default/HPP/maximum memory.
AC power input: 110 to 240V (47-63Hz)
DC input current: -40.5V/24A -48V/19.2A, -60V/16.0A
Expansion Options
Power consumption avg/max: AC220/297W, DC225/297W
Base Configuration (using 2 of 3 expansion slots)
Maximum thermal output: 1013.4 BTU/hr.
2 on-board 10/100/1000Base-T RJ-45 ports
Dimensions
8x 10/100/1000Base-T RJ-45 IO card
2 x 10GBaseF SFP+ IO card Enclosure: 2RU
2x CPUs, 16x physical cores, 32x virtual cores (total) Dimensions (W x D x H): 17.4x20.84x3.5 in.( 442x529x88mm)
16 GB memory (32 and 64 GB options) Weight: 31.5 lbs. (14.3 kg)
Redundant dual hot-swappable 1TB HDD or 480GB SSD Environmental Conditions
Redundant dual hot-swappable power supplies (AC or DC) Operating: 0° to 40°C, humidity 5% to 95%
Lights-Out-Management (LOM) Storage: –20° to 70°C, humidity 5% to 95% at 60°C
Slide rails (22” – 32”) Certifications
Network Expansion Slot Options Safety: UL, CB, CE, TUV GS
8x 10/100/1000Base-T RJ45 port card, up to 24 ports Emissions: FCC, CE, VCCI, RCM/C-Tick
4x 1000Base-F SFP port card, up to 12 ports Environmental: RoHS, REACH , ISO14001
1 1
4x 10GBase-F SFP+ port card, up to 12 ports 1
factory certificate
2x 40G QSFP+ port card, up to 4 ports
2x 100/25G QSFP28 port card, up to 4 ports
Fail-Open/Bypass Network Options
4x 10/100/1000Base-T RJ45 port card
2x 10GBase-F SFP+ port card
Worldwide Headquarters | 5 Ha’Solelim Street, Tel Aviv 67897, Israel | Tel: 972-3-753-4555 | Fax: 972-3-624-1100 | Email: info@[Link]
CONTACT US
U.S. Headquarters | 959 Skyway Road, Suite 300, San Carlos, CA 94070 | Tel: 800-429-4391; 650-628-2000 | Fax: 650-654-4233 | [Link]
©2017 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non -confidential content | April 19, 2017 | Page 5
