5100 Security Gateway | Datasheet

5100 SECURITY GATEWAY

防火牆為硬體式設計

Check Point’s 5100 Next Generation Firewall offers a fully integrated, unified solution tuned to deliver
maximum security against 5th generation threats without compromising performance. 5100 Security
Gateway provides the most advanced threat prevention security for demanding enterprise networks.

The Most Advanced Full Security Designed to Secure

Threat Prevention Uncompromising Performance Encrypted Traffic
Equipped with our SandBlast Highly optimized with up to 1.01 Gbps of Powerful platforms for inspection
technology, protecting against threat prevention throughput of SSL traffic
unknown threats and zero-day attacks
支援SSL

PERFORMANCE HIGHLIGHTS
Gen II Security Gen III Security Gen V Security
Firewall NGFW 1 Threat Prevention + SandBlast2
6.45 Gbps 2.1 Gbps 1.01 Gbps

Performance measured with enterprise testing conditions. Additional performance details on page 4. 1: Includes Firewall, Application Control,
and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content | June 15, 2020 1
 5100 Security Gateway | Datasheet

5100
Enterprise-grade security, performance and reliability
The Check Point 5100 Next Generation Security Gateway combines the most comprehensive
security protections to safeguard your small enterprise and branch office deployments.

The 5100 is a 1U Next Generation Security Gateway with one I/O expansion slot for higher port
capacity, an AC or DC power supply, a 1TB (HDD) or 240GB (SSD) disk, and optional Lights-Out
Management (LOM) for remote management. This powerful Next Generation Security Gateway is
optimized to deliver real-world threat prevention to secure your critical assets and environments.

Key Features & Benefits

Advanced Threat Prevention ….… 1st time prevention of known and zero-day threats
Uncompromising Performance .… Achieve up to 1.01 Gbps of threat prevention throughput
Secure Encrypted Traffic ………... Consolidate SSL inspection into one integrated security platform

© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content | June 15, 2020 2
 5100 Security Gateway | Datasheet

SPOTLIGHT

1 2 2
5100 SECURITY GATEWAY
1 Management 10/100/1000Base-T RJ45 port
2 RJ45/micro USB console port
3 One network card expansion slot
4 5x 10/100/1000Base-T RJ45 ports
5 2x USB ports for ISO installation
6 Lights-Out Management port

3 4 5 6

All-inclusive Security Solutions

Prevent Known and Zero-day Threats
Check Point 5100 Next Generation
Zero-day protection offering network
Security Gateway offers a complete and
security with evasion-resistant malware
consolidated security solution available
detection and complete protection from
in two complete packages:
the most advanced attacks, ensuring
 Threat Prevention
quick delivery of safe content to users.
 Threat Prevention + SandBlast

Remote Management and Monitoring

Integrated Security Management
A Lights-Out-Management (LOM) card
5100 Security Appliances with the HDD
provides out-of-band remote
option can manage itself and one
management to remotely diagnose,
adjacent appliance in a high availability
start, restart and manage the appliance
deployment. Or manage the gateways
from a remote location. Also use the
via central unified management.
LOM web interface to remotely install
an OS image from an ISO file.

ENTERPRISE-GRADE PLATFORM

1 1
Memory LOM
GbE (copper) GbE (fiber)
Base 6 0 8 GB
5100

HPP 6 4 16 GB
Maximums 14 4 16 GB

this is optional

© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content | June 15, 2020 3
 5100 Security Gateway | Datasheet

Performance Content Security (continued)

Enterprise Testing Conditions Dynamic User-based Policy
• 1.01 Gbps of Threat Prevention1 • Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid,
• 2.1 Gbps of NGFW 2 Terminal Servers and with 3rd parties via a Web API
• 2.45 Gbps IPS IPS650Mbps以上 • Enforce consistent policy for local and remote users on
Windows, macOS, Linux, Android and Apple iOS platforms
• 6.45 Gbps of firewall throughput 防火牆效能5Gbps 以上
Ideeal Testing Conditions
802.1Q VLAN tag、802.3ad、
Network Transparent mode、Route mode
• 14.5 Gbps of UDP 1518 byte packet firewall throughput Network Connectivity
• 1.6 Gbps of AES-128 VPN throughput VPN 1.2 Gbps以上 • Total physical and virtual (VLAN) interfaces per appliance:
• 110,000 connections per second, 64 byte response3 1024/4096 (single gateway/with virtual systems)
• 3.2/6.4M concurrent connections, 64 byte response3 • 802.3ad passive and active link aggregation
1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast • Layer 2 (transparent) and Layer 3 (routing) mode
Zero-Day Protection. 2: Includes Firewall, Application Control and IPS. 3: Performance High Availability
measured with default/maximum memory with R80.10. Concurrent Session • Active/Active L2, Active/Passive L2 and L3 Fail Over A/A、A/S
50萬以上 • Session failover for routing change, device and link failure
Additional Features
• ClusterXL or VRRP
Highlights
IPv6
• 1x CPUs, 2x physical cores (total)
• NAT66, NAT64, NAT46
• 1x 1TB HDD or 240GB SSD storage
• CoreXL, SecureXL, HA with VRRPv3
• 8 and 16 GB memory options
• 1x AC or DC power supply Unicast and Multicast Routing (see SK98226)

• Lights-Out-Management card is optional • OSPFv2 and v3, BGP, RIP 具備RIP、OSPF路由

Network Expansion Slot Options (1 of 1 slots open) • Static routes, Multicast routes
• 8x 10/100/1000Base-T RJ45 port card, up to 14 ports • Policy-based routing
• 4x 1000Base-F SFP port card, up to 4 ports 8 port GE網路介面 • PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
Fail-Open/Bypass Network Options
Physical
• 4x 10/100/1000Base-T RJ45 port card
Power Requirements
• Single Power Supply rating: 250W/300W
Content Security
• AC power input: 90 to 264V (47-63Hz)
First Time Prevention Capabilities
• Power consumption max: 62.9W
• CPU-level, OS-level and static file analysis • Maximum thermal output: 214.6 BTU/hr.
• File disarm and reconstruction via Threat Extraction
Dimensions
• Average emulation time for unknown files that require full
• Enclosure: 1RU
sandbox evaluation is under 100 seconds
• Dimensions (WxDxH): 17.2x16x1.73 in.(438x406.5x44mm)
• Maximal file size for Emulation is 100 MB
• Weight: 13.7 lbs. (6.22 kg)
• Emulation OS Support: Windows XP, 7, 8.1, 10
Environmental Conditions
Applications
• Operating: 0° to 40°C, humidity 5% to 95%
• Use 8,000+ pre-defined or customize your own applications
• Storage: –20° to 70°C, humidity 5% to 95% at 60°C
• Accept, prevent, schedule, and apply traffic-shaping
Certifications
Data Loss Prevention
• Safety: UL, CB, CE, TUV GS
• Classify 700+ pre-defined data types
• Emissions: FCC, CE, VCCI, RCM/C-Tick
• End user and data owner incident handling
• Environmental: RoHS, WEEE, REACH1, ISO140011
1 factory certificate

© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content | June 15, 2020 4
 5100 Security Gateway | Datasheet

ORDERING 5100 SECURITY GATEWAYS

BASE CONFIGURATION 1 SKU
5100 Next Generation Security Gateway Base Configuration, includes 6x1GbE copper ports, 8GB RAM, 1 HDD, CPAP-SG5100-NGTP
1 AC Power Unit, Next Generation Threat Prevention (NGTP) Security Subscription Package for 1 Year
5100 SandBlast Next Generation Security Gateway Base Configuration, includes 6x1GbE copper ports, 8GB CPAP-SG5100-NGTX
RAM, 1 HDD, 1 AC Power Unit, SandBlast (NGTX) Security Subscription Package for 1 Year
HPP CONFIGURATION 1 SKU
5100 Next Generation Security Gateway with High Performance Package, includes 6x1GbE copper ports, CPAP-SG5100-NGTP-HPP
4x1Gb SFP ports, 4 SR transceivers, 16 GB RAM, 1 HDD, 1 AC Power Unit, Lights Out Management (LOM),
Next Generation Threat Prevention (NGTP) Security Subscription Package for 1 Year
5100 Next Generation Security Gateway with High Performance Package, includes 6x1GbE copper ports, CPAP-SG5100-NGTX-HPP
4x1Gb SFP ports, 4 SR transceivers, 16 GB RAM, 1 HDD, 1 AC Power Unit, Lights Out Management (LOM),
Next Generation Threat Extraction (SandBlast) Security Subscription Package for 1 Year
1 2 and 3 year, Virtual Systems packages and DC power options also available in the online product catalog

Accessories
INTERFACE CARDS AND TRANSCEIVERS
8 Port 10/100/1000 Base-T RJ45 interface card CPAC-8-1C-B
4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers CPAC-4-1F-B
SFP transceiver module for 1G fiber ports - long range (1000Base-LX) CPAC-TR-1LX-B
SFP transceiver module for 1G fiber ports - short range (1000Base-SX) CPAC-TR-1SX-B
SFP transceiver to 1000 Base-T RJ45 (Copper) CPAC-TR-1T-B
4 Port 1GE copper Bypass (Fail-Open) network interface card (10/100/1000 Base-T) CPAC-4-1C-BP-B
MEMORY SKU
Memory upgrade kit from 8GB to 16GB for 5100 appliance CPAC-RAM8GB-5000
SPARES AND MISCELLANEOUS SKU
Lights Out Management module CPAC-LOM-B
Slide rails for 5000 Appliances (22” - 32”) CPAC-RAILS-5000
Extended slide rails for 5000 Appliances (24” - 36”) CPAC-RAILS-EXT-5000
Note: for returns of existing security gateways via the RMA process, a 500GB HDD is available

CONTACT US EMAIL: [email protected] WEB: WWW.CHECKPOINT.COM

© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content | June 15, 2020 5