Quantum 7000 Hyperscale Security Gateway | DATASHEET

Quantum 7000 Hyperscale

Security Gateway for Maestro

Check Point Maestro brings scale, agility and elasticity of the cloud on premise with efficient N+1 clustering
based on Check Point HyperSync technology, maximizing the capabilities of your existing security gateways.
Create your own virtualized private-cloud premise by stacking multiple Check Point security gateways together.
Group them by security feature set, policy or the assets they protect and further virtualize them with virtual
systems technology. With the Maestro Hyperscale Orchestrator and 7000 Hyperscale security gateways,
businesses of all sizes can have cloud-level security on premise.

Highest Security State-of-the-Art 475 Gbps of Gen V

Effectiveness SSL Inspection Performance
Integrated with R80 and ThreatCloud Threat Prevention that delivers Hyperscale ready, high
to set a new standard of prevention lightning fast SSL-encrypted traffic performance threat prevention
against advanced 5th generation inspection without compromising hardware for the fastest Gen V
cyber attacks up time or scalability security gateway in the industry

PERFORMANCE HIGHLIGHTS
Gen II Security Gen III Security Gen V Security
Firewall NGFW 1 Threat Prevention + SandBlast2
39 Gbps 22 Gbps 9.5 Gbps
Performance measured with enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control,
and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection

© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content | June 22, 2020 1
 Quantum 7000 Hyperscale Security Gateway | DATASHEET

HIGH PERFORMANCE, SCALABLE SECURITY

7000 SECURITY GATEWAY 1 2

8
3 9

4 5 6 7

10

1. Sync 10/100/1000 Base-T port 6. 2x USB 3.0 ports

2. RJ45 console port 7. Lights-out Management port
3. 2x network card expansion slots 8. USB Type-C console port
4. 8x 10/100/1000 Base-T ports 9. 2x 480GB SSD RAID1
5. Management 10/100/1000 Base-T port 10. Redundant hot-swap power supplies

Hyperscale Security System

With Maestro, you can start with two gateways and then can
grow to up to 52 gateways. For example, when you start with
19 Gbps using two 7000HS gateways you can finish with a 475
Gbps security solution. Simply by using Check Point Maestro.

Hyperscale Orchestrator Connections

When a Security Group is created, an IP address is created for
a Single Management Object connection to the security
management server. Easily create and assign IP addresses to
the internal and external network interfaces. These uplinks are
the visible components of the Maestro security solution.

Fully Operational within Minutes

When we add a gateway to the system, it gets all the
configurations, the policy, even the software version, updated
and aligned with the existing deployment, ready to go within 6
minutes.

Maestro Traffic Distribution

HyperSync tracks the Active/Standby/Backup state of group
members. Sync traffic is limited to only the Active and Standby
members handling the connection.

Cost-Efficient N+1 Deployments

Now businesses of all sizes can enjoy cloud-level resiliency
and telco-grade technology using the efficient Maestro N+1
clustering design.
© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content | June 22, 2020 2
 Quantum 7000 Hyperscale Security Gateway | DATASHEET

SPECIFICATIONS
Performance Network
Enterprise Test Conditions Network Connectivity
Threat Prevention (Gbps)1 9.5 • Total physical and virtual (VLAN) interfaces per appliance:
NGFW (Gbps) 2
22 1024/4096 (single gateway/with virtual systems)

IPS (Gbps) 25 • 802.3ad passive and active link aggregation

Firewall (Gbps) 39 • Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
RFC 3511, 2544, 2647, 1242 PERFORMANCE (LAB)
Firewall 1518B UDP (Gbps) 76.8 • Active/Active L2, Active/Passive L2 and L3

VPN AES-128 (Gbps) 11.9 • Session failover for routing change, device and link failure

Connections/sec 330,000 IPv6

Concurrent connections 4/8/16M • NAT66
1. Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection. • CoreXL, SecureXL
2. Includes Firewall, Application Control and IPS.
Unicast and Multicast Routing (see SK98226)

• OSPFv2, BGP, RIP

Additional Features
• Static routes, Multicast routes
Highlights
• Policy-based routing
• 4x 10 GbE SFP+ ports
• PIM-SM, PIM-DM, IGMP v2, and v3
• 1x CPUs, 16 physical cores, 32 virtual cores
• 2x 480 GB SSDs Maestro
• 2x AC power supplies Maximums
• 32 GB memory • Up to 8 Security Groups
• Up to 31 gateways in a Security Group
Content Security
• Up to 24 gateways in a Security Group (dual site deployment, 14
First Time Prevention Capabilities from each site)
• CPU-level, OS-level and static file analysis • 48x 10 GbE and 8x 100 GbE ports (MHO 140)
• File disarm and reconstruction via Threat Extraction
• Average emulation time for unknown files that require full sandbox Physical
evaluation is under 100 seconds Power Requirements
• Maximal file size for Emulation is 100 MB • Single Power Supply rating: 300W
• Emulation OS Support: Windows XP, 7, 8.1, 10 • AC power input: 100 to 240V (50-60Hz)
Applications • Power consumption max: 183.2W

• Use 8,000+ pre-defined or customize your own applications • Maximum thermal output: 625.1 BTU/hr.

• Accept, prevent, schedule, and apply traffic-shaping Dimensions

Data Loss Prevention • Enclosure: 1RU
• Classify 700+ pre-defined data types • Dimensions (WxDxH): 17.2 x 20 x 1.73 in. (438 x 508 x 44mm)
• End user and data owner incident handling • Weight: 19.8 lbs. (9 kg)
Dynamic User-based Policy Environmental Conditions

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, • Operating: 0° to 40°C, humidity 5% to 95%
Terminal Servers and with 3rd parties via a Web API • Storage: –20° to 70°C, humidity 5% to 95% at 60°C
• Enforce consistent policy for local and remote users on Windows, Certifications
macOS, Linux, Android and Apple iOS platforms
• Safety: UL, CB, CE, TUV GS
• Emissions: FCC, CE, VCCI, RCM/C-Tick
• Environmental: RoHS, WEEE, REACH1, ISO140011
1 factory certificate

© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content | June 22, 2020 3
 Quantum 7000 Hyperscale Security Gateway | DATASHEET

ORDERING QUANTUM 7000HS MAESTRO SOLUTIONS

MAESTRO HYPERSCALE SOLUTION PACKAGES SKU
Maestro Solution with two 7000 firewalls with SandBlast subscription package for 1 year and one CPAP-MHS-7002-PLUS-SNBT
Orchestrator (MHO-140). Each appliance includes 32 GB RAM, 10x 1GbE copper on-board, 4x 10GbE
fiber, 2x AC PSU, 2x 480GB SSD, LOM, plus 2x 10G DAC cables (1m, 3m). MHO-140 includes 1x 10G
DAC (3m).
Maestro Solution with three 7000 firewalls with SandBlast subscription package for 1 year and one CPAP-MHS-7003-PLUS-SNBT
Orchestrator (MHO-140). Each appliance includes 32 GB RAM, 10x 1GbE copper on-board, 4x 10GbE
fiber, 2x AC PSU, 2x 480GB SSD, LOM, plus 2x 10G DAC cables (1m, 3m). MHO-140 includes 1x 10G
DAC (3m).
SECURITY GATEWAY APPLIANCES FOR SCALE-UP SKU
7000 security gateway for Maestro including 32 GB RAM, 10x 1GbE copper on-board, 4x 10GbE fiber, CPAP-SG7000-PLUS-MHS-SNBT
2x AC PSU, 2x 480GB SSD, LOM, plus 2x 10G DAC cables (1m, 3m) with SandBlast subscription
package for 1 year.

MAESTRO HYPERSCALE ORCHESTRATORS SKU

Maestro Hyperscale Orchestrator 140 with 8x 100 GbE and 48x 10 GbE ports, plus 1x 10G DAC (3m). CPAP-MHO-140
MAESTRO HYPERSCALE ORCHESTRATORS ACCESSORIES SKU
Fan replacement for Maestro Hyperscale Orchestrator 140 CPAC-FAN-MHO140
AC power supply unit replacement for Maestro Hyperscale Orchestrator 140 and 170 CPAC-PSU-AC-MHO140/170
Rail kit for Maestro Hyperscale Orchestrators 140 and 170 CPAC-RAIL-MHO140/170

SECURITY GATEWAY ACCESSORIES SKU

Direct Attach Copper (DAC) cables 10GbE SFP+ to SFP+, 1M CPAC-DAC-10G-1M
Direct Attach Copper (DAC) cables 10GbE SFP+ to SFP+, 3M CPAC-DAC-10G-3M
Memory upgrade kit from 32GB to 64GB for 7000 appliance CPAC-RAM32GB-7000
Replacement AC power supply for 7000 Security Gateways CPAC-PSU-AC-7000
Lights-Out Management Module CPAC-LOM-C
Extended slide rails for 7000 Security Gateways (24” - 36”) CPAC-RAILS-EXT-6000/7000

All-inclusive Security
SNBT
NGFW NGTP
(SandBlast)
Basic access control Prevent known threats Prevent known and zero-
day attacks
Firewall   
VPN (IPsec)   
IPS   
Application Control   
Content Awareness   
URL Filtering  
Anti-Bot  
Anti-Virus  
Anti-Spam  
SandBlast Threat Emulation 
SandBlast Threat Extraction 
Each gateway requires a license for the enabled security feature. The first year purchase includes the SNBT package. Security
subscription extensions, NGFW, NGTP and SNBT are available for subsequent years.

CONTACT US EMAIL: [email protected] WEB: WWW.CHECKPOINT.COM

© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content | June 22, 2020 4