Network Security and Malware Protection

• Overview of Firewall and VPN Consulting Services
• Cisco Firepower, ASA and PIX Firewall Consulting
• Palo Alto Networks PA-Series Firewalls Consulting
• Check Point Software Consulting
• Barracuda CloudGen Firewall Consulting
• WatchGuard Consulting
• Juniper Networks NetScreen Consulting
• SonicWall Consulting
• Fortinet FortiGate Firewall Consulting
• Symantec Raptor and VelociRaptor Consulting

Check Point Next Generation Security Services
Check Point firewalls work seamlessly with Check Point's centralized management stack and cloud-delivered subscription security services including the Next Generation Threat Prevention (NGTP) service bundle and the SandBlast family of sandboxing utilities. NGTP includes comprehensive defense against known signature-based threats like Antivirus, Anti-Bot, IPS, App Control, URL Filtering, and Identity Awareness. Check Point's NGTP services also offer:

• Site-to-Site VPN
• Remote Access VPN
• Internet of Things Device Recognition
• Anti-Spam

Check Point Security Gateways and Services Supported by Progent
Check Point's NGFW firewalls are available at costs, throughput and scale appropriate for any deployment scenario including hybrid cloud, data center, enterprise, small business, branch, or home office. Check Point firewalls integrate seamlessly with Check Point's catalog of subscription-based cloud services such as AI-based threat prevention and autonomous threat response and repair.

Check Point's Quantum Force Line of Firewalls
Check Point's Quantum Force family of 1RU/2RU firewall appliances features a modular architecture with interchangeable network interfaces and connection speeds. Security Gateway models are available for environments ranging from small organizations and branch offices to service providers and high-performance data centers.

Check Point 9000 Series Quantum Force Firewalls for Campuses and Network Perimeters
Check Point's 9000 Series security gateways are 1RU appliances designed to protect small offices, branches, campuses and network perimeters. The Check Point 9100 firewall includes a single network I/O slot that can be configured with an 8 x 1/10GBASE-F SFP+ port card or a 4 x 10/25GBASE-F SFP28 port card. The 9100 firewall delivers 55 Gbps firewall throughput, 25.7 Gbps IPS throughput, and 4.95 Gbps Threat Prevention throughput. The Check Point 9200 firewall supports the same I/O configuration options and can deliver 60 Gbps firewall throughput, 31 Gbps IPS throughput, and 6.6 Gbps Threat Prevention performance. The Check Point 9300 firewall offers the same I/O configuration options and can deliver 70 Gbps firewall throughput, 39 Gbps IPS throughput, and 9 Gbps Threat Prevention performance.

The Check Point 9400 firewall includes a single network I/O slot that can be configured with an 8 x 1/10GBASE-F SFP+ port card, a 4 x 10/25GBASE-F SFP28 port card, or a 2 x 40/100GBASE-F QSFP28 port card. The 9400 firewall delivers 72.6 Gbps firewall throughput, 46.4 Gbps IPS throughput, and 11 Gbps Threat Prevention throughput. The Check Point 9700 firewall includes two network I/O slots that each support an 8 x 1/10GBASE-F SFP+ port card, a 4 x 10/25GBASE-F SFP28 port card, or a 2 x 40/100GBASE-F QSFP28 port card. The Check Point 9700 offers 129 Gbps firewall throughput, 73.7 Gbps IPS throughput, and 16.6 Gbps Threat Prevention performance. The Check Point 9800 firewall offers the same I/O configuration options as the Check Point 9700 and can deliver 185 Gbps firewall throughput, 90.5 Gbps IPS throughput, and 20 Gbps Threat Prevention performance.

Check Point 19000 Series Quantum Force Firewalls for Large Enterprises
Check Point's 19000 Series security gateways are 2RU appliances designed to provide protection for large enterprises. The Check Point 19100 firewall includes four network I/O slots that can each be configured with an 8 x 1/10GBASE-F SFP+ port card (up to 32 ports), a 4 x 10/25GBASE-F SFP28 port card (up to 18 ports), or a 2 x 40/100GBASE-F QSFP28 port card (up to 8 ports). The 19100 firewall delivers 200 Gbps firewall throughput, 130 Gbps IPS throughput, and 28.8 Gbps Threat Prevention throughput. The Check Point 19200 firewall supports the same I/O configuration options as the 19100 firewall and can deliver 245 Gbps firewall throughput, 145 Gbps IPS throughput, and 36.9 Gbps Threat Prevention performance.

Check Point 29000 Series Quantum Force Firewalls for Data Centers
Check Point's 29000 Series security gateways are 2RU appliances intended to protect large data centers and service providers. The Check Point 29100 firewall includes seven network I/O slots that can each be configured with an 8 x 1/10GBASE-F SFP+ port card (up to 56 ports), a 4 x 10/25GBASE-F SFP28 port card (up to 30 ports), and a 2 x 40/100GBASE-F QSFP28 port card (up to 14 ports). The 29100 firewall delivers 365 Gbps firewall throughput, 175 Gbps IPS throughput, and 47.4 Gbps Threat Prevention throughput. The Check Point 29200 firewall supports the same I/O configuration options as the 29100 firewall and can deliver 500 Gbps firewall throughput, 235 Gbps IPS throughput, and 63.5 Gbps Threat Prevention performance.

Earlier Small Business and Branch Office Firewalls from Check Point
Check Point's NGFW security gateways for small offices are compact, fanless desktop/wall-mount firewall appliances with multiple LAN switch ports. The devices offer firewall, VPN, antivirus, application visibility and control, URL filtering, and email security. All versions support Check Point's subscription-based SandBlast Threat Emulation and Extraction (sandboxing) and NGTP services. The Check Point 910 Security Gateway includes 16 10/100/1000Base-T RJ45 LAN switch ports, one RJ45/micro USB console port, one GbE WAN port, one GbE copper/fiber DMZ port, and two USB 3.0 ports. The firewall also supports a 4G/LTE modem. The 910 model delivers 2 Gbps firewall throughput, 800 Mbps Intrusion Prevention System (IPS) throughput, and 800 Mbps NGFW throughput (includes firewall, application control, and IPS).

The Check Point 1550 Security Gateway features five 10/100/1000Base-T RJ45 LAN ports, one 10/100/1000Base-T RJ45 WAN port, a USB console port and an additional USB port. A Wi-Fi 802.11 b/g/n/ac MIMO 3x3 interface is optional. The 1550 firewall delivers 1 Gbps firewall throughput, 900 Mbps IPS throughput, and 800 Mbps NGFW throughput. The Check Point 1590 Security Gateway features eight 10/100/1000Base-T RJ45 LAN ports, one 10/100/1000Base-T RJ45 WAN port, one 10/100/1000Base-T RJ45/1000BaseF SFP DMZ port, a USB console port, an additional USB port, and an SD card slot for added log storage. Wi-Fi 802.11 b/g/n/ac MIMO 3x3 is optional. The 1550 firewall delivers 1 Gbps firewall throughput, 900 Mbps IPS throughput, and 800 Mbps NGFW throughput (includes firewall, application control, and IPS). An 802.11 n/ac wave II MIMO 4x4 Wi-Fi interface is optional.

The Check Point 3100 Security Gateway features five 10/100/1000Base-T RJ45 LAN ports, one 10/100/1000Base-T RJ45 management port, two USB ISO installation ports, and an RJ45/micro USB console port. The 3100 firewall delivers 3.15 Gbps firewall throughput, 1.1 Gbps IPS throughput, and 850 Mbps NGFW throughput. Check Point's 3200 Security Gateway features the same interface configuration as the 3100 model and delivers 4 Gbps firewall throughput, 1.44 Gbps IPS throughput, and 1.15 Gbps NGFW throughput. Both the 3100 and 3200 security gateways include 240GB of SSD storage.

Earlier Check Point Firewalls for Small to Midsize Enterprises
Check Point's NGFW security gateways for small to midsize enterprises are compact 1RU rack-mount firewall appliances with multiple LAN switch ports. The devices offer the full range of NGFW security features, deliver excellent throughput, work with all Check Point subscription-based services, support Lights Out Management (LOM) cards, and include SSD memory. The Check Point 5100 Security Gateway includes five 10/100/1000Base-T RJ45 LAN switch ports and a network expansion slot that accepts a card with eight 10/100/1000Base-T RJ45 port or one with four 1000Base-F SFP ports. The 5100 firewall also has one RJ45/micro USB console port, two USB ports for ISO installation, a Lights-Out Management port, and a 1TB hard disk or 240GB of SSD storage. The 5100 model delivers 6.45 Gbps firewall throughput, 2.45 Gbps IPS throughput, and 2.1 Gbps NGFW throughput. Check Point's 5200 Security Gateway has the same interface configuration as the 5100 firewall and delivers 7.8 Gbps firewall throughput, 3 Gbps IPS throughput, and 2.52 Gbps NGFW throughput.

The Check Point 5400 Security Gateway includes eight 10/100/1000Base-T RJ45 LAN switch ports and a network card expansion slot. The 5200 firewall also has one RJ45/micro USB console port, two USB ports for ISO installation, a Lights-Out Management port, a sync 10/100/1000Base-T RJ45 port, and a 1TB hard disk or 240GB of SSD storage. The 5400 security gateway delivers 11.4 Gbps firewall throughput, 3.9 Gbps IPS throughput, and 3.4 Gbps NGFW throughput. The Check Point 5600 Security Gateway has the same interface configuration and storage options as the 5400 firewall but its network card expansion slot also accepts a card with four 10GBase-F SFP+ ports. The 5600 model delivers 20.4 Gbps firewall throughput, 5.5 Gbps IPS throughput, and 5.1 Gbps NGFW throughput.

The Check Point 5800 Security Gateway includes eight 10/100/1000Base-T RJ45 LAN switch ports and two network card expansion slots. The 5800 firewall also has one RJ45/micro USB console port, two USB ports for ISO installation, a Lights-Out Management port, a sync 10/100/1000Base-T RJ45 port, and a 1TB hard disk or 240GB of SSD storage. Among the network expansion options accepted by the 5800 firewall is a 40G QSFP+ card with four ports. The 5800 security gateway delivers 25 Gbps firewall throughput, 6.5 Gbps IPS throughput, and 6 Gbps NGFW throughput. The Check Point 5900 Security Gateway has the same interface configuration, expansion, and storage options as the 5800 firewall and delivers 29.4 Gbps firewall throughput, 7.6 Gbps IPS throughput, and 6.1 Gbps NGFW throughput.

The Check Point 6500 Security Gateway includes eight 10/100/1000Base-T RJ45 LAN switch ports, one network card expansion slot, one RJ45/micro USB console port, two USB ports for ISO installation, a 10/100/1000Base-T RJ45 Management port, a Lights-Out Management port, a sync 10/100/1000Base-T RJ45 port, and 240 GB of SSD storage. Among the network expansion options accepted by the 6500 firewall is a 1000Base-F SFP card with four ports. The 6500 security gateway delivers 20.6 Gbps firewall throughput, 7.8 Gbps IPS throughput, and 6.8 Gbps NGFW throughput. The Check Point 6800 Security Gateway has the same interface configuration as the 6500 firewall but has two network card expansion slots and 480 GB of SSD storage. The 6800 model delivers 42 Gbps firewall throughput, 20 Gbps IPS throughput, and 15 Gbps NGFW throughput.

Earlier Check Point Firewalls for Large Enterprises
Check Point's NGFW security gateways for large enterprises are 2RU and 3RU appliances offering high performance, scalability, port capacity, and availability. Modular I/O expansion allows you to select the port density and connectivity appropriate for your IT environment. These devices include graphic LCD displays, purpose-built processors for fast inspection of SSL traffic, and Lights-Out-Management support. All these high-performance firewalls work with Check Point's NGTP and SandBlast NGTX subscription security services.

The Check Point 15400 Security Gateway includes three network expansion slots that allow you to add up to 24 10/100/1000Base-T RJ45 ports, 12 1000Base-F SFP or 10GBase-F SFP+ ports, six 40G QSFP+ or 100/25G QSFP28 ports, or a mix of LAN connectivity ports. The 15400 also has two USB ports for ISO installation, a console port, a Sync 10/100/1000Base-T RJ45 port, and a Management 10/100/1000Base-T RJ45 port. For storage, the 15400 model comes with the choice of two 1 TB HDDs or two 480GB SSD RAID1 units. The 15400 model delivers 33.5 Gbps firewall throughput, 8 Gbps IPS throughput, and 7.6 Gbps NGFW throughput. Check Point's 15600 Security Gateway has the same LAN interface and storage options as the 15400 firewall and delivers 41.2 Gbps firewall throughput, 13.5 Gbps IPS throughput, and 12.6 Gbps NGFW throughput.

The Check Point 16000 Security Gateway has four network expansion slots that allow you to add up to 34 10/100/1000Base-T RJ45 ports, 16 1000Base-F SFP or 10GBase-F SFP+ ports, eight 40G QSFP+ or 100/25G QSFP28 ports, or a mix of switch ports. The 16000 also includes two USB ports for ISO installation, a console port, a Sync 10/100/1000Base-T RJ45 port, and a Management 10/100/1000Base-T RJ45 port. The 16000 firewall comes with two 480GB SSD RAID1 units for storage. The 16000 security gateway delivers 58 Gbps firewall throughput, 21 Gbps IPS throughput, and 20 Gbps NGFW throughput.

Check Point Firewalls for Data Centers and High-End Enterprises
Check Point's next generation security gateways for data centers and high-end enterprises are integrated 2RU and 3RU appliances offering the highest performance, scalability, and port capacity offered by Check Point in a non-chassis enclosure. Check Point's 23500 Security Gateway includes five network card expansion slots that let you add up to 42 10/100/1000Base-T RJ45 ports, 20 1000Base-F SFP or 10GBase-F SFP+ ports, six 40G QSFP+ or 100/25G QSFP28 ports, or a combination of switch interfaces. The 23500 also features two USB ports for ISO installation, a console port, a Sync 10/100/1000Base-T RJ45 port, and a Management 10/100/1000Base-T RJ45 port. For storage, the 15400 model comes with the choice of two 1 TB HDDs or two 480GB SSD RAID1 storage. The 23500 security gateway delivers 52 Gbps firewall throughput, 14.45 Gbps IPS throughput, and 13.75 Gbps NGFW throughput. The Check Point 23800 Security Gateway includes the same interface and storage options as the 23500 firewall and delivers 65 Gbps firewall throughput, 21.5 Gbps IPS throughput, and 20.4 Gbps NGFW throughput. Check Point's 23900 Security Gateway includes the same interface and storage options and delivers 77.9 Gbps firewall throughput, 26 Gbps IPS throughput, and 24 Gbps NGFW throughput.

Check Point's 26000 Security Gateway is a 3RU rack-mount appliance featuring eight network card expansion slots that let you add up to 66 10/100/1000Base-T RJ45 ports, 32 1000Base-F SFP or 10GBase-F SFP+ ports, 16 40G QSFP+ or 100/25G QSFP28 ports, or a combination of different LAN interface ports. The 26000 also features two USB ports for ISO installation, a console port, a Sync 10/100/1000Base-T RJ45 port, and a Management 10/100/1000Base-T RJ45 port. For storage, the 26000 firewall comes with the choice of two 1 TB hard disks or two 480GB SSD RAID1 storage. The 26000 security gateway delivers 106.2 Gbps firewall throughput, 43 Gbps IPS throughput, and 40.5 Gbps NGFW throughput.

Check Point's Legacy Products Supported by Progent
Check Point's legacy integrated firewall/VPN security appliances include desktop and rack-mount devices that support a broad spectrum of environments ranging from remote users and branch offices to enterprise data centers. These devices are built around Check Point's Software Blade architecture, which makes it possible to add features incrementally without installing new hardware and to manage a variety of security appliances from a central software console. Check Point's firewall/VPN products supported by Progent include:

Check Point UTM-1 Edge and UTM-1 Firewall/VPN Family: Check Point UTM-1 firewall/VPN appliances come in two families. The UTM-1 Edge family is packaged in a desktop form factor and is intended for remote users and small or branch offices with up to 100 users. The UTM-1 family of security appliances are packaged in desktop or rack-mountable chassis, include security acceleration and multi-site management capabilities, and can handle the firewall and remote connectivity requirements of small-to-midsize companies and branch offices. Check Point's UTM-1 Edge N-Series has embedded NGX software and features six 10/100/1000 Ethernet ports. Firewall throughput is 1 Gbps, VPN throughput is 200 Mbps, and IPS performance is 30 Mbps. The device can support 60,000 concurrent user sessions.

Check Point's UTM-1 3070 is a 1U rack-mountable unit and supports Check Point's Software Blade architecture. This high-end member of the UTM-1 family features 10 10/100/1000 Ethernet ports and offers firewall throughput of 10 Gbps, VPN throughput of 1.1 Gbps, and IPS performance of 4.4 Gbps. The UTM-1 3070 can handle 1.1 million concurrent user sessions.

Check Point Series 80 Appliance: Check Point's Series 80 Appliance is an integrated security device in a desktop form factor and designed to provide high performance and port density for remote and branch offices. In addition to offering firewall protection, the Series 80 also supports both IPsec and SSL VPN tunneling. The Series 80 supports Check Point's Software Blade architecture and features 10 10/100/1000 Ethernet ports. Firewall throughput is 1.5 Gbps, VPN throughput is 220 Mbps, and IPS performance is 720 Mbps. The Series 80 can support 150,000 concurrent user sessions.

Check Point Power-1 Family: Check Point Power-1 integrated security appliances are intended for campuses, data centers, or other environments that require very high-performance routing, firewall, and IPsec VPN capability. This series of rack-mountable 2U devices can all be upgraded to universal threat management (UTM) capability, and each supports 1.2 million concurrent sessions and 1,024 VLANs. Check Point's Power-1 5075 supports up to 14 10/100/1000 Ethernet ports and two optional 10Gb ports. Firewall throughput is 9 Gbps, VPN throughput is 2.4 Gbps, and IPS performance is 7.5 Gbps. The top-of-the-line Power-1 11085 supports up to 18 10/100/1000 Ethernet ports and four optional 10Gb ports. Firewall throughput is 30 Gbps, VPN throughput is 4.5 Gbps, and IPS performance is 15 Gbps.

Check Point Legacy Products Supported by Progent
As a pioneer in the firewall/VPN market, Check Point has built a sizable installed base of legacy single-purpose and integrated services products. Progent's security engineers have supported Check Point technology for more than two decades and can provide expert consulting, management, and troubleshooting services for older products or assistance for upgrading to newer models. Legacy Check Point products supported by Progent include:

Check Point VPN-1 Pro VPN/Firewall: VPN-1 Pro provides intelligent and reliable security for stopping attacks while simplifying business communications across the Internet. A tightly integrated combination of Firewall, VPN and intrusion prevention, VPN-1 Pro is built on Stateful Inspection, Application Intelligence, and One-Click VPN technologies. SmartCenter, Check Point's centralized management solution, provides unified threat management.

Check Point VPN-1 Edge Firewall: The VPN-1 Edge provides secure connectivity from remote branch and partner offices to the corporate network. With VPN-1/FireWall-1 technology, multiple high-availability features, and extensive networking capabilities, VPN-1 Edge provides secure, reliable, and immediate connection to applications and other corporate resources.

Check Point NGX: The NGX platform delivers a unified security architecture for a broad range of perimeter, internal, Web, and endpoint security solutions that protect business communications and resources for corporate networks and applications, remote employees, branch offices and partner extranets.

Check Point Express NGX: Check Point Express NGX is a comprehensive VPN/security solution designed to meet the Internet security needs of mid-sized businesses with up to 500 users. Check Point Express NGX delivers the essential security elements required by a mid-sized business in a single affordable solution that includes firewall, VPN, network and application attack protection plus multi-site, centralized management.

Nokia Firewalls: Nokia's family of purpose-built, high-performance firewall/VPN appliances incorporates Check Point's VPN-1 technology to protect and extend the network perimeter for small office to carrier-class applications. Nokia's firewall/VPN appliances provide strong security by combining Check Point's software with Nokia IPSO, a hardened, security-specific operating system.

How Progent Can Help with Check Point Technology
Progent's Check Point consultants can help you select and deploy Check Point software and firewall/VPN appliances powered by Check Point technology to provide an affordable and effective security solution for your corporate network. Progent can help you integrate Check Point products and technology with security products from other vendors and provide a single source of on-going technical support, maintenance, training and consulting expertise. Progent can also help you evaluate the business case for upgrading your legacy Check Point products to newer technology, and can assist you to plan and manage a seamless migration to the latest firewall/VPN solutions.

Progent can save you time and money by providing Check Point consulting and troubleshooting services online, eliminating travel delays and expenses and maximizing network availability. Progent has successfully delivered remote support to small businesses in every state in the United States (see Progent's customer testimonials).

Find out how to contact a Progent security consultant.