QUANTUM 6600 SECURITY GATEWAY

AI Deep Learning powered threat prevention

Top Security Effectiveness
Leader with 99.7% malware block rate in
to secure enterprises
Miercom NGFW Security Benchmark (2023)
Check Point Quantum 6600 Next Generation
AI ML powered Threat Prevention
Protect networks and users from zero-days, Firewalls enable enterprises to deploy the
phishing, DNS, and ransomware attacks industry’s leading threat prevention capabilities at
Hyperscale Network Security
all points of their infrastructure, scaling security
On-demand expansion and resilient access according to their changing business needs.
to mission-critical applications

Unified Management and Ops Efficiency This enables enterprises to prevent and block even
Increase protection and reduce TCO with a the most advanced attacks before they can disrupt
consolidated security architecture
business — greatly increasing the efficiency of their
Industry Recognition security operations.
Named a Leader for the 23rd time in the
Gartner® Magic Quadrant™ for Network
Firewalls
PERFORMANCE HIGHLIGHTS
Named a Leader in the Forrester Wave™ Firewall Next Gen Firewall Threat Prevention
18 Gbps 6.2 Gbps 3.7 Gbps
Enterprise Firewalls Q4 2022
Awarded the Frost & Sullivan Firewall
Performance measured with enterprise testing conditions. Additional performance
Company of the Year
details on page 3. 1: Includes Firewall, Application Control, and IPS. 2: Includes
Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast
Zero-Day Protection.

© 2023 Check Point Software Technologies Ltd. All rights reserved. | August 30, 2023 1
SPOTLIGHT

1 2
6600 SECURITY GATEWAY
8

3 4 5 6 7

1. Sync 10/100/1000 Base-T port 6. 2x USB 3.0 ports

2. RJ45 console port 7. Lights-out Management port
3. 1 network expansion slot 8. USB Type-C console port
4. 8x 10/100/1000 Base-T ports 9. Redundant hot-swap power supplies
5. Management 10/100/1000 Base-T port

AI Deep Learning Threat Prevention IoT Security

The speed and sophistication of evasive Quantum IoT Protect now provides
zero-day DNS and phishing attacks autonomous threat prevention. Quantum
requires AI Deep Learning to predict and Firewalls discover IoT assets, feed those
block malicious behavior without human to the IoT Cloud Service to automatically
intervention. Quantum firewalls use map IoT devices to profiles and then
Check Point’s threat intelligence cloud applies a zero-trust policy on the
40+ AI/ML engines to block emerging firewalls to prevent IoT threats in 5
threats that haven’t been seen before. minutes.
Next Generation Firewall, Next Generation Threat Prevention and
SandBlast packages

Integrated SD-WAN
High Performance Options
Security protects you when you’re
Purchase the affordable Plus package
connected. SD-WAN ensures you’re
and get a base system plus 4x 10GbE
always connected, and the connection
SFP+ ports with transceivers, 2x AC
offers the best user experience for the
power supplies, Lights-out Management
lowest cost. Quantum SD-WAN in
and 16 GB of memory for high
Quantum firewalls keeps you secure and
connection capacity.
connected.

ENTERPRISE-GRADE PLATFORM

Redundant
1 GbE (copper) 1 GbE (fiber) 10 GbE Memory LOM
Power
Base model 10 0 0 8 GB
Plus model 10 0 4 16 GB
Max capacity 18 4 4 32 GB
optional accessory

© 2023 Check Point Software Technologies Ltd. All rights reserved. | August 30, 2023 2
SPECIFICATIONS
Performance Content Security (continued)
Enterprise Test Conditions Dynamic User-based Policy
Threat Prevention Gbps) 1(
3.7 • Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid,
NGFW (Gbps)
2
6.2 Terminal Servers and with 3 parties via a Web API
rd

IPS (Gbps) 10.14 • Enforce consistent policy for local and remote users on Windows,
macOS, Linux, Android and Apple iOS platforms
Firewall (Gbps) 18

RFC 3511, 2544, 2647, 1242 Peformance (Lab) Network

Firewall 1518B UDP (Gbps) 32 Network Connectivity
VPN AES-128 (Gbps) 4.9
• Integrated SD-WAN network optimization and resilience
Connections/sec 116,000
• Total physical and virtual (VLAN) interfaces per appliance:
Concurrent connections 3
2/4/8M 1024/4096 (single gateway/with virtual systems)
1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast • 802.3ad passive and active link aggregation
Zero-Day Protection with logging enabled. 2: Includes Firewall, Application Control and IPS with
• Layer 2 (transparent) and Layer 3 (routing) mode
logging enabled. 3: Performance measured with default/Plus/maximum memory.
High Availability
• Active/Active L2, Active/Passive L2 and L3
Additional Features
• Session failover for routing change, device and link failure
Highlights
• ClusterXL or VRRP
• 1x CPUs, 6x physical cores
IPv6
• 1x 240 GB SSD storage
• 1 AC or DC power supply (2x in Plus) • NAT66, NAT64, NAT46

• 8, 16 and 32 GB memory options • CoreXL, SecureXL, HA with VRRPv3

• Lights-Out-Management (included in Plus) Unicast and Multicast Routing (see SK98226)
• Virtual Systems (Base/Plus/max mem): 10/20/20 • OSPFv2 and v3, BGP, RIP
Network Expansion Slot Options (1 of 1 slots open) • Static routes, Multicast routes
• 8x 10/100/1000Base-T RJ45 port card, up to 18 ports • Policy-based routing
• 4x 1000Base-F SFP port card, up to 4 ports • PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
• 4x 10GBase-F SFP+ port card, up to 4 ports
Physical
Content Security Power Requirements
First Time Prevention Capabilities • Single Power Supply rating: 300W

• CPU-level, OS-level and static file analysis • AC power input: 100 to 240V (50-60Hz)

• File disarm and reconstruction via Threat Extraction • Power consumption avg/max: 84W/147W

• Average emulation time for unknown files that require full • Maximum thermal output: 501.6 BTU/hr.
sandbox evaluation is under 100 seconds Dimensions
• Maximal file size for Emulation is 100 MB
• Enclosure: 1RU
• Emulation OS Support: Windows XP, 7, 8.1, 10
• Dimensions (WxDxH): 17.2 x 20 x 1.73 in.(438 x 508 x 44mm)
Applications
• Weight (Base/Plus): 16.5/17.4 lbs. (7.5/7.9 kg)
• Use 10,000+ pre-defined or customize your own applications Environmental Conditions
• Accept, prevent, schedule, and apply traffic-shaping
• Operating: 0° to 40°C, humidity 5 to 95%
Data Loss Prevention
• Storage: –20° to 70°C, humidity 5 to 95%
• Classify 700+ pre-defined data types Certifications
• End user and data owner incident handling
• Safety: UL, CB, CE, TUV GS
• Emissions: FCC, CE, VCCI, RCM/C-Tick
• Environmental: RoHS, WEEE, REACH , ISO14001
1 1

© 2023 Check Point Software Technologies Ltd. All rights reserved. | August 30, 2023 3
ORDERING QUANTUM 6600 SECURITY GATEWAYS
BASE CONFIGURATION 1
SKU
6600 Security Gateway Base Configuration, includes 10x 1GbE copper ports, 8 GB RAM, 1 SSD, 1 AC PSU, telescopic rails, CPAP-SG6600-SNBT
SandBlast (SNBT) Security Subscription Package for 1 Year.
6600 Security Gateway Plus Configuration, includes 10x 1GbE copper ports, 4x 10GbE SFP+ ports, 4x SFP+ SR CPAP-SG6600-PLUS-SNBT
transceivers, 16 GB RAM, 1 SSD, 2x AC PSU, Lights-out Management, telescopic rails, SandBlast (SNBT) Security
Subscription Package for 1 Year.
Quantum IoT Network Protection for 1 year for 6600 appliances CPSB-IOTP-6600-1Y

Quantum IoT Network Protection for 1 year for 6600 PLUS appliances CPSB-IOTP-6600-PLUS-1Y

Quantum SD-WAN subscription for 1 year for 6600 appliances CPSB-SDWAN-6600-1Y

Quantum SD-WAN subscription for 1 year for 6600 PLUS appliances CPSB-SDWAN-6600-PLUS-1Y
The Base and Plus packages include 2 virtual systems (VS) - one management VS and one production/data VS. These are not additive or counted when adding additional VS
licenses. 1. Renewal NGFW, NGTP and SandBlast (SNBT) packages are available in the online product catalog.

Accessories
INTERFACE CARDS AND TRANSCEIVERS
8 Port 10/100/1000 Base-T RJ45 interface card CPAC-8-1C-C

4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers CPAC-4-1F-C

SFP transceiver module for 1G fiber ports - long range (1000Base-LX) CPAC-TR-1LX-C

SFP transceiver module for 1G fiber ports - short range (1000Base-SX) CPAC-TR-1SX-C

SFP transceiver to 1000 Base-T RJ45 (Copper) CPAC-TR-1T-C

4 Port 10GBase-F SFP+ interface card CPAC-4-10F-C

SFP+ transceiver module for 10G fiber ports - for links up to 40km (10GBASE-ER) CPAC-TR-10ER-C

SFP+ transceiver module for 10G fiber ports - long range up to 10km (10GBase-LR) CPAC-TR-10LR-C

SFP+ transceiver module for 10G fiber ports - short range (10GBase-SR) CPAC-TR-10SR-C

SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7 CPAC-TR-10T-C

10G SFP+ Direct Attach Copper (DAC) cable, 3 meters CPAC-DAC-10G-3M

4 Port 1GE copper Bypass (Fail-Open) Network interface card (10/100/1000 Base-T) CPAC-4-1C-BP-C

2 Port 10GE Short-range Fiber Bypass (Fail-Open) Network interface card (10GBase-SR) CPAC-2-10FSR-BP-C

MEMORY SKU
Memory upgrade kit from 8GB to 16GB for 6600 appliances CPAC-RAM8GB-6600

Memory upgrade kit from 8GB to 32GB for 6600 appliances CPAC-RAM24GB-6600

Memory upgrade kit from 16GB to 32GB for 6600 appliances CPAC-RAM16GB-6600

SPARES AND MISCELLANEOUS SKU

Additional/Replacement AC Power Supply for 6600, 6700, 6900 appliances CPAC-PSU-AC-6600/6700/6900

Additional/Replacement DC Power Supply for 6600, 6700, 6900 appliances CPAC-PSU-DC-6600/6700/6900

Lights Out Management module CPAC-NLOM-C

Slide rails for 6000 and 7000 Security Appliances (22” - 32”) CPAC-RAILS-6000/7000

Telescopic slide rails for 6000 and 7000 Security Appliances (24” - 36”) CPAC-RAILS-EXT-6000/7000

© 2023 Check Point Software Technologies Ltd. All rights reserved. | August 30, 2023 4
ORDERING QUANTUM 6600 (Continued)

All-inclusive Security
SNBT
NGFW NGTP
(SandBlast)
Basic access control Prevent known threats Prevent known and zero-
plus IPS day attacks
Firewall   
VPN (IPsec)   
Mobile Access   
Identity Awareness   
Application Control   
Content Awareness   
IPS   
URL Filtering  
Anti-Bot  
Anti-Virus  
Anti-Spam  
DNS Security  
SandBlast Threat Emulation 
SandBlast Threat Extraction 
Zero Phishing 
IoT Network Protection optional optional optional
SD-WAN Network Optimization optional optional optional
The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years. Optional security
capabilities can be ordered a-la-carte or separately.

CONTACT US North America - +1-866-488-6691 | International - +44-125-333-5558 | www.checkpoint.com

© 2023 Check Point Software Technologies Ltd. All rights reserved. | August 30, 2023 5