QUANTUM 6400 SECURITY GATEWAY

Quantum Security GatewayTM Advantage

Uncompromising Security Security at Hyperscale Unified Security

Check Point Quantum 6400 Next Generation Firewalls enables enterprises to deploy the industry’s leading threat
prevention capabilities at all points of their infrastructure, scaling security almost infinitely according to their changing
business needs. It also dramatically accelerates the efficiency of their security operations. This enables enterprises to
prevent and block even the most advanced attacks, before they can disrupt business.

Always Protected against Security at Efficient

Gen V Attacks Hyperscale Operations
Highest caliber prevention On-demand expansion Cut operation management
with unified security with hyperscalability time by up to 80%

PERFORMANCE HIGHLIGHTS
Gen II Security Gen III Security Gen V Security
Firewall NGFW 1 Advanced Threat Prevention 2
12 Gbps 5.5 Gbps 2.5 Gbps
Performance measured with enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control, and IPS. 2:
Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

© 2022 Check Point Software Technologies Ltd. All rights reserved. [Protected] | July 12, 2022 1
SPOTLIGHT

6400 SECURITY GATEWAY 1 2

3 4 5 6 7

9 9

1. Sync 10/100/1000 Base-T port 6. 2x USB 3.0 ports

2. RJ45 console port 7. Lights-out Management port
3. 1 network expansion slot 8. USB Type-C console port
4. 8x 10/100/1000 Base-T ports 9. Redundant power supplies
5. Management 10/100/1000 Base-T port

Prevent Known and Zero-day Threats

All-inclusive Security Solutions
Check Point SandBlast Threat Emulation is
Check Point 6400 security gateways include
an evasion-resistant sandbox that provides
all security technologies in the SandBlast
zero-day protection from advanced and
software package for one year. Purchase a
unknown threats. SandBlast Threat
renewal for NGFW, NGTP or SandBlast
Extraction (CDR) ensures quick delivery of
(SNBT) for subsequent years as you like.
safe email and web content to users.

Next Generation Firewall, Next Generation Threat Prevention and

SandBlast packages

High Performance Options Remote Management and Monitoring

Purchase the affordable Plus package and A Lights-Out-Management (LOM) card
get a base system plus 4x 1 GbE fiber ports provides out-of-band management to
with transceivers, Lights-out Management remotely diagnose, start, restart and
and 16 GB of memory for high connection manage the appliance from a remote
capacity. location.

ENTERPRISE-GRADE PLATFORM

1 GbE (copper) 1 GbE (fiber) 10 GbE Memory Redundant Power LOM

Base model 10 0 0 8 GB
Plus model 10 4 0 16 GB
Max capacity 18 4 4 32 GB
optional accessory

© 2022 Check Point Software Technologies Ltd. All rights reserved. [Protected] | July 12, 2022 2
SPECIFICATIONS
Performance Content Security (continued)
Enterprise Test Conditions Dynamic User-based Policy
Threat Prevention1 (Gbps) 2.5 • Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal
NGFW2 (Gbps) 5.5 Servers and with 3rd parties via a Web API

IPS (Gbps) 6.5 • Enforce consistent policy for local and remote users on Windows,
macOS, Linux, Android and Apple iOS platforms
Firewall (Gbps) 12

RFC 3511, 2544, 2647, 1242 Performance (Lab) Network

Firewall 1518B UDP (Gbps) 30 Network Connectivity
VPN AES-128 (Gbps) 2.73
• Total physical and virtual (VLAN) interfaces per appliance:
Connections/sec 90,000 1024/4096 (single gateway/with virtual systems)
Concurrent connections3 2/4/8M • 802.3ad passive and active link aggregation
1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day • Layer 2 (transparent) and Layer 3 (routing) mode
Protection with logging enabled. 2: Includes Firewall, Application Control and IPS with logging enabled. 3: High Availability
Performance measured with default/Plus/maximum memory.
• Active/Active L2, Active/Passive L2 and L3
• Session failover for routing change, device and link failure
Additional Features
• ClusterXL or VRRP
Highlights
IPv6
• 1x CPUs, 4 physical cores
• 1x 240 GB SSD • NAT66, NAT64, NAT46

• 2x AC power supplies • CoreXL, SecureXL, HA with VRRPv3

• 8, 16 and 32 GB memory options Unicast and Multicast Routing (see SK98226)
• Lights-Out-Management (included in Plus) • OSPFv2 and v3, BGP, RIP
• Virtual Systems (Base/Plus/max mem): 10/20/20 • Static routes, Multicast routes
Network Expansion Slot Options (1 of 1 slots open) • Policy-based routing
• 8x 10/100/1000Base-T RJ45 port card, up to 18 ports • PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
• 4x 1000Base-F SFP port card, up to 4 ports
• 4x 10GBase-F SFP+ port card, up to 4 ports Physical
Power Requirements
Content Security • Single Power Supply rating: 150W
First Time Prevention Capabilities • AC power input: 100 to 240V (50-60Hz)
• CPU-level, OS-level and static file analysis • Power consumption max: 89W/125W
• File disarm and reconstruction via Threat Extraction • Maximum thermal output: 426 BTU/hr.
• Average emulation time for unknown files that require full sandbox Dimensions
evaluation is under 100 seconds
• Enclosure: 1RU
• Maximal file size for Emulation is 100 MB
• Dimensions (WxDxH): 17.2 x 20 x 1.73 in.(438 x 508 x 44mm)
• Emulation OS Support: Windows XP, 7, 8.1, 10
• Weight (Base/Plus): 14.9/16.5 lbs. (6.75/7.5 kg)
Applications
Environmental Conditions
• Use 8,500+ pre-defined or customize your own applications
• Operating: 0° to 40°C, humidity 5 to 95%
• Accept, prevent, schedule, and apply traffic-shaping
• Storage: –20° to 70°C, humidity 5 to 95%
Data Loss Prevention
Certifications
• Classify 700+ pre-defined data types
• Safety: UL, CB, CE, TUV GS
• End user and data owner incident handling
• Emissions: FCC, CE, VCCI, RCM/C-Tick
• Environmental: RoHS, WEEE, REACH1, ISO140011
1
. factory certificate

© 2022 Check Point Software Technologies Ltd. All rights reserved. [Protected] | July 12, 2022 3
ORDERING QUANTUM 6400 SECURITY GATEWAYS
BASE CONFIGURATION 1 SKU
6400 Security Gateway Base Configuration, includes 10x 1GbE copper ports, 8 GB RAM, 1 SSD, 2x AC PSUs, fixed rails, CPAP-SG6400-SNBT
SandBlast (SNBT) Security Subscription Package for 1 Year.
6400 Security Gateway Plus Configuration, includes 10x 1GbE copper ports, 4x 1GbE SFP ports, 4x SFP SX CPAP-SG6400-PLUS-SNBT
transceivers, 16 GB RAM, 1 SSD, 2x AC PSUs, Lights-out Management, fixed rails, SandBlast (SNBT) Security
Subscription Package for 1 Year.
The Base and Plus packages include 2 trial virtual systems (VS). These are not additive or counted when adding additional VS licenses.
1. Renewal NGFW, NGTP and SandBlast (SNBT) packages are available in the online product catalog.

Accessories
INTERFACE CARDS AND TRANSCEIVERS
8 Port 10/100/1000 Base-T RJ45 interface card CPAC-8-1C-C
4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers CPAC-4-1F-C
SFP transceiver module for 1G fiber ports - long range (1000Base-LX) CPAC-TR-1LX-C
SFP transceiver module for 1G fiber ports - short range (1000Base-SX) CPAC-TR-1SX-C
SFP transceiver to 1000 Base-T RJ45 (Copper) CPAC-TR-1T-C
4 Port 10GBase-F SFP+ interface card CPAC-4-10F-C
SFP+ transceiver module for 10G fiber ports - for links up to 40km (10GBASE-ER) CPAC-TR-10ER-C
SFP+ transceiver module for 10G fiber ports - long range up to 10km (10GBase-LR) CPAC-TR-10LR-C
SFP+ transceiver module for 10G fiber ports - short range (10GBase-SR) CPAC-TR-10SR-C
SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7 CPAC-TR-10T-C
10G SFP+ Direct Attach Copper (DAC) cable, 3 meters CPAC-DAC-10G-3M
4 Port 1GE copper Bypass (Fail-Open) Network interface card (10/100/1000 Base-T) CPAC-4-1C-BP-C
2 Port 10GE Short-range Fiber Bypass (Fail-Open) Network interface card (10GBase-SR) CPAC-2-10FSR-BP-C

MEMORY SKU
Memory upgrade kit from 8GB to 16GB for 6400 appliance CPAC-RAM8GB-6400
Memory upgrade kit from 8GB to 32GB for 6400 appliance CPAC-RAM24GB-6400
Memory upgrade kit from 16GB to 32GB for 6400 appliance CPAC-RAM16GB-6400

SPARES AND MISCELLANEOUS SKU

Lights Out Management module CPAC-NLOM-C
Slide rails for 6000 and 7000 Security Appliances (22” - 32”) CPAC-RAILS-6000/7000
Telescopic slide rails for 6000 and 7000 Security Appliances (24” - 36”) CPAC-RAILS-EXT-6000/7000

© 2022 Check Point Software Technologies Ltd. All rights reserved. [Protected] | July 12, 2022 4
ORDERING QUANTUM 6400 (Continued)

All-inclusive Security
SNBT
NGFW NGTP
(SandBlast)
Basic access control Prevent known threats Prevent known and zero-
plus IPS day attacks
Firewall   
VPN (IPsec)   
Application Control   
Content Awareness   
IPS   
URL Filtering  
Anti-Bot  
Anti-Virus  
Anti-Spam  
SandBlast Threat Emulation 
SandBlast Threat Extraction 
The first year purchase includes the SNBT package. Security subscription extensions, NGFW, NGTP and SNBT are available for subsequent
years.

CONTACT US EMAIL: INFO@CHECKPOINT.COM WEB: WWW.CHECKPOINT.COM

© 2022 Check Point Software Technologies Ltd. All rights reserved. [Protected] | July 12, 2022 5