Features

• Industry leading security gateway appliances
• Support market-leading Check Point security software
• Accelerated Data Path (ADP) Service Modules
• Advanced Routing and Networking
• High Performance and High Availability Clustering
• Voyager web-based configuration, monitoring and management
• Large Portfolio of Interface Options
• Carrier Grade Serviceability and Redundancy
• Horizon Manager Appliance Management and Provisioning

Industry leading security gateway appliances

The IP appliances are industry leading security gateways used by 100% of Fortune 100. They are built for rapid deployment and high performance. The wide range of IP models allow customers to choose networking, performance and redundancy options.

Support market-leading Check Point security software

The IP appliances run security functionality such as Firewall, VPN and Intrusion Prevention (IPS) from Check Point. They enable corporations ranging from small offices to carrier-class to secure their Internet communications and remote access control with market-leading security solutions from Check Point.

Accelerated Data Path (ADP) Modules

The Check Point Accelerated Data (ADP) modules are hardware options that can be inserted into IP Appliances to improve traffic performance and extend appliance utilization. With ADP, CPU workloads can be shared between the main processor and the ADP module processor to increase performance without having to completely replace existing hardware.

Advanced Routing and Networking
IP Appliances incorporate advanced routing protocols that support a broad range of traffic types including PIM, RIP, OSFP and BGP. It also supports traffic monitoring and error handling to enable remote troubleshooting, capacity planning and configuration management.

High Performance and High Availability Clustering
To help ensure business continuity and balanced performance, several high availability solutions are available for IP appliances. Virtual Router Redundancy Protocol (VRRP) and patented IP Appliance clustering technology provide robust and scalable high availability for IP appliances. These technologies allow several independent IP appliances to join together for a common security goal as one virtual machine.

Network Voyager
Check Point Network Voyager offers web-based configuration, monitoring and management, allowing network administrators to manage IP Appliances remotely through a feature rich GUI. From the Network Voyager interface, administrators can easily manage hardware, OS and application deployment, networking, routing, troubleshoot systems or optimize a configuration, manage high availability, set role-based administration and monitor network traffic and IP appliance health.

Interface Options
Check Point IP Appliances come with a large portfolio of interface options including copper and fiber Ethernet with a range of port density and performance options up to 10Gbps and T1 WAN. They also come with storage options: HDD, flash or hybrid

Carrier Grade Serviceability and Redundancy
Optionally available IP appliance clustering enables maintenance updates through workload redistribution. Administrators can perform transparent "rolling upgrades," in which nodes are gracefully removed from the cluster, upgraded, and reinserted, all without any disruption to end-user operations. Other features include: Hot swappable hard drives, fans, and power supplies available in some models; Easy access design (slide out trays, slide in cards); Retrofit ADP modules to extend the appliance's performance; DC power supplies available in some models.

Horizon Manager
The optionally available Horizon Manager helps security administrators more efficiently and proactively manage large-scale deployments of IP appliances while preventing common configuration errors. It ensures the optimal deployment, monitoring, maintenance, and recovery of IP security appliances. Administrators can manage operating system and Check Point Security Gateway software configuration from a single console.

IP Appliance Models

IP1280 & IP2450:	Solution for large business and service provider. Provide Firewall, VPN, IPS, Web filtering and Anti-virus. Support optional ADP service modules. Deliver high availability with IP Clustering or VRRP.
IP690:	Solution for medium to large business and service provider. Provide Firewall, VPN, IPS, Web filtering and Anti-virus. Support optional ADP service modules.
IP560:	Solution for medium to large business. Provide Firewall, VPN, IPS, Web filtering and Anti-virus. Support optional ADP service modules.
IP390:	Solution for small to medium business and large branch office. Provide Firewall, VPN, IPS, Web filtering and Anti-virus.
IP290:	Solution for small office, branch office and extended business. Provide business-class Firewall, VPN, IPS, Web filtering and Anti-virus.
IP150:	Solution for small and extended business. Provide business-class Firewall, VPN, IPS, Web filtering and Anti-virus.

Technical Specifications

	IP150	IP290	IP390	IP560	IP690	IP1280	IP2450
10/100/1000 Ports	4	6/8	4/8	4/12	4/16	4/28	4/32
10 GbE Ports	-	-	-	-	61	101	101
Firewall Throughput	550 Mbps	1.5 Gbps	3.0 Gbps	6.3 Gbps | 9.5 Gbps2	7.2 Gbps | 11.7 Gbps2	10.3 Gbps | 15.4 Gbps2	10.3 Gbps | 23.6 Gbps2
VPN Throughput	76 Mbps	1.0 Gbps	677 Mbps	1.7 Gbps | 3.3 Gbps2	1.4 Gbps | 3.3 Gbps2	1.9 Gbps | 8.3 Gbps2	1.9 Gbps | 8.3 Gbps2
Concurrent Sessions	360,000	1.1 million	1.1 million	1.1 million	1.1 million	1.1 million	1.1 million
VLANS	10243	10243	10243	10243	10243	10243	10243
ADP Module	-	-	-	Optional	Optional	Optional	Optional
VPN Acceleration	Optional	Optional	Included	Included	Included	Included	Included
Storage	40 GB	40 GB	80 GB	80 GB	80 GB	80 GB	80 GB
Disk-Based or Flash	Disk	Disk or Flash	Disk or Flash	Disk or Flash	Disk or Flash	Disk or Flash	Disk or Flash
Enclosure	1U	1U/half rack	1U	1U	1U	2U	2U
Dimensions (standard)	16.8 x 10 x 1.69 in.	8.52 x 18 x 1.71 in.	17 x 16 x 1.71 in.	17.23 x 22 x 1.71 in.	17.23 x 24 x 1.71 in.	17.23 x 24.11 x 3.46 in.	17.23 x 24.11 x 3.46 in.
Dimensions (metric)	43 x 254 x 43 mm	216 x 457 x 44 mm	432 x 406 x 44 mm	438 x 559 x 44 mm	438 x 610 x 44 mm	438 x 613 x 88 mm	438 x 613 x 88 mm
Weight	4.76kg (10.5lbs)	5.1kg (11.25 lbs)	7.71kg (17.0 lbs)	11.84kg (26.1 lbs)	12.38kg (27.3 lbs)	19.6kg (43.2 lbs)	20.57kg (45.35 lbs)
Operating Environment	Temperature: 5° to 40° C4, Humidity: 10% - 85% non-condensing, Altitude: 2,500m
Power Input	100-240V 50-60Hz	100-240V 50-60Hz	100-240V 50-60Hz	100-240V 50-60Hz	100-240V 50-60Hz	100-240V 50-60Hz	100-240V 50-60Hz
Power Consumption	180W (Max)	133W (Max)	150W (Max)	225W (Max)	250W (Max)	700W (Max)	700W (Max)
DC Power Supply	-	-	-	-	-	Optional	Optional
Compliance	Safety: UL60950-1, First Edition: 2003, CAN/CSAC22.2, No 60950:2000, IEC60950-1: 2001, EN60950-1:2001+A11 with Japanese National Deviations / Emission Compliance: FCC Part 15, Subpart B, Class A, EN50024,EN55022A: 1998, CISPR 22 Class A: 1985, EN61000-3-2, EN61000-3-3 / Immunity: EN55024: 1998

¹ Optional
² Performance without ADP and with ADP
³ Maximum of 256 VLANs per interface
⁴ IP390 can go to 50° C

Technical Support Offering

Check Point offers combined Hardware and Software support for the IP Appliance line.

Check Point Access Hardware Support

Check Point Access provides a total service solution to our customers.

Benefits

Access support customers get the following benefits, depending on the program they choose:

• Peace of mind with global, “follow the sun” service centers and efficient 24x7 support processes for software and hardware issues.
• Efficient Hardware Replacement – Hardware issues diagnosis and Return Material Authorization process by Check Point and its partners. Customers can choose between programs offering Advance or On-site Replacement:
  
  
  • Advance Replacement – Authorized replacement hardware is shipped before Check Point receives the faulty hardware, resulting in a faster solution.
  • On-site Replacement – Downtime is minimized by replacement and testing by a Check Point authorized Field Services engineer. Programs are available with next business day or 4 hour replacement schedules.
• Software Subscription - Critical hot fixes, service packs, and major upgrades.
• TAC and Web Support - Unlimited, comprehensive support from experienced engineers.

The following Access support programs are available:

• Access 5 day 12 hour
• Access 7 day 24 hour
• Access Plus 5 day 8 hour next business day onsite
• Access Plus 7 day 24 hour 4 hour onsite

The following table highlights the services and features of each of the Check Point Access Hardware Support programs:

Support Feature	Access 5 day x 24 hour	Access 7 day x 24 hour	Access Plus 5 day x 8 hour x Next Business Day	Access Plus 7 day x 24 hour x 4 hour response
On-site Hardware Replacement	-	-	Yes – Next Business Day*	Yes – 4 hour response*
Advance Hardware replacement	Yes	Yes	-	-
Support Web Access	Yes	Yes	Yes	Yes
Secure Knowledge Advanced	Yes	Yes	Yes	Yes
TAC Support Coverage	2 Hour Response**	2 Hour Response**	2 Hour Response**	2 Hour Response

*Calls must be received by Check Point by 5 pm local time during normal business days.

** Within the program’s supported time period.

Warranty

Check Point provides a one year material defect warranty on the hardware components of its appliances. If an appliance should experience a hardware failure within the warranty period, customers can easily begin the Return Material Authorization (RMA) process through SecureTrak Service Request Center or by contacting Check Point.

Software Support

Check Point provides options for either direct or indirect support for the software included with the appliances. For more information, see:

• Direct Enterprise Support
• Collaborative Enterprise Support