Home / Checkpoint / Checkpoint : Security Gateway Appliances

Checkpoint : Security Gateway Appliances

Today I am going to talk about the security gateway appliances of checkpoint. Checkpoint is one of the leading brand of the security domain competing with Palo-Alto, Fortinet and Cisco in the market. Every customer wants the best security solution and Enterprise networks have so many solutions and vendors in the market which have head to head competition. Next Generation Security Gateway is optimised to deliver threat prevention for your business against present and future threats to secure your critical assets and environments.

 As far as the threat prevention is one of the most important feature required in the security gateway appliances and with the help of threat prevention you can looks inside encrypted SSL and TLS tunnels to detect threats, ensuring users remain in compliance with company policies while surfing the Internet and using corporate data.       
Fig 1.1- Firewall basic topology

 Next Generation Security Gateway combines the most comprehensive security protections to safeguard your branch and small office deployments, all in a compact desktop form factor.

 Here in this article I am taking a glimpse of Checkpoint 5900 security gateway appliances and I am going to compare this model with the other 2 models in the Checkpoint portfolio.

 Below is the hardware of Checkpoint 5900 with the full description.
Fig 1.2- Checkpoint 5900 Security appliances


 Checkpoint 5900 so called as Next Generation Security Gateway has the base configuration which includes 10x1GbE copper ports, 8GB RAM, 1 HDD, 1 AC power unit, Lights Out Management (LOM), Next Generation Threat Prevention (NGTP).

 Checkpoint 5900 with SandBlast as Next Generation Security Gateway with the base configuration, which includes 10x1GbE copper ports, 8GB RAM, 1 HDD, 1 AC power unit, Lights Out Management (LOM), SandBlast (NGTX) security.

 Regarding the Checkpoint Security gateway appliances, we have various model as per the requirements of the customer. NGTP is generally the part of the security appliances which prevent sophisticated cyber-threats with Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and Email Security. 

 Similarly the other part is called as NGTX with SandBlast Zero-Day Protection, which includes Threat Emulation and Threat Extraction.

Checkpoint comes up with the below mentioned models for the security gateway appliances:

  • For Branch Offices : Checkpoint 3100, Checkpoint 3200
  • For Small Enterprises: Checkpoint 5100, Checkpoint 5200 and Checkpoint 5400
  • For Mid size enterprise : Checkpoint 5600, Checkpoint 5800 and Checkpoint 5900
I      I am going to cover the comparison between the three models that is the base models or generally used in the networks as per the user count and the requirements. So I am going to talk about the Checkpoint 3200, Checkpoint 5400 and Checkpoint 5900 comparison matrix as shown below.

Fig 1.3- Checkpoint 3200, 5400 and 5900 comparison Matrix