Check Point IP Appliances

Proven for years in complex networking and high-performance environments, Check Point IP Appliances offer turnkey and modular security functionality. With integrated firewall, VPN, IPS, Application Control, Identity Awareness and more, IP Appliances deliver unmatched extensibility, broad deployment options and lower total cost of ownership.

Benefits
Features
Specifications

All-in-one security and high-performance in a single appliance

Extensible, on-demand security via modular Software Blade Architecture
Delivers enterprise-class performance
Offers multiple connectivity options

Provides high performance and protection across all traffic types

Includes Firewall, IPsec VPN, IPS, Application Control and Identity Awareness Software Blades—right out-of-the-box
Includes Acceleration & Clustering and Advanced Networking Software Blades
Supports various acceleration technologies (ADP, CoreXL and SecureXL)

Low mean time to service and high reliability

Offers carrier-grade serviceability and redundancy
IP Clustering provides active-active load sharing
Modular appliance design for easy field maintenance

Accelerated Data Path (ADP) Modules

With ADP, CPU workloads can be shared between the main processor and the ADP module processor to increase performance without having to completely replace existing hardware.

Check Point Accelerated Data (ADP) modules are hardware options that can be inserted into IP Appliances to improve traffic performance and extend appliance utilization. With ADP, CPU workloads can be shared between the main processor and the ADP module processor to increase performance without having to completely replace existing hardware.

Advanced Routing and Networking

Advanced routing and networking supports a broad range of traffic types, including PIM, RIP, OSFP, and BGP, and enables remote troubleshooting, capacity planning, and configuration management.

High Performance and High Availability Clustering

To help ensure business continuity and balanced performance, several high availability solutions are available for IP appliances.

To help ensure business continuity and balanced performance, several high availability solutions are available for IP appliances. Virtual Router Redundancy Protocol (VRRP) and patented IP Appliance clustering technology provide robust and scalable high availability for IP appliances. These technologies allow several independent IP appliances to join together for a common security goal as one virtual machine.

Network Voyager

Offered with IPSO, Check Point Network Voyager offers web-based configuration, monitoring and management, allowing network administrators to manage IP Appliances remotely through a feature rich GUI.

Check Point Network Voyager offers web-based configuration, monitoring and management, allowing network administrators to manage IP Appliances remotely through a feature rich GUI. From the Network Voyager interface, administrators can easily manage hardware, OS and application deployment, networking, routing, troubleshoot systems or optimize a configuration, manage high availability, set role-based administration and monitor network traffic and IP appliance health.

Network Voyager is offered with IPSO only.

Interface Options

Check Point IP Appliances support a large portfolio of interface options including copper and fiber Ethernet with a range of port density and performance options of up to 10 Gbps.

Check Point IP Appliances support a large portfolio of interface options including copper and fiber Ethernet with a range of port density and performance options of up to 10 Gbps. They also come with storage options: HDD, flash or hybrid.

Carrier Grade Serviceability and Redundancy

Available as an option, clustering enables maintenance updates through workload redistribution.

Optionally available IP appliance clustering enables maintenance updates through workload redistribution. Administrators can perform transparent "rolling upgrades," in which nodes are gracefully removed from the cluster, upgraded, and reinserted, all without any disruption to end-user operations.

Other features include:

Hot swappable hard drives, fans, and power supplies available in some models
Easy access design (slide out trays, slide in cards)
Retrofit ADP modules to extend the appliance's performance
DC power supplies available in some models

Integrated into flexible Software Blade Architecture

Designed for the Check Point Software Blade Architecture, IP Appliances deliver flexibility and low total cost of ownership by allowing customers to quickly expand security protections to meet changing requirements.

The Check Point Software Blade architecture is the first and only security architecture that delivers complete, flexible and manageable security to companies of any size. With unprecedented flexibility and expandability, Software Blades deliver lower cost of ownership and cost-efficient protection that meet any need, today and in the future.

Full integration into the modular Software Blade Architecture allows for rapid and easy activation on any Check Point security gateway.
All IP appliances include Firewall, IPSec VPN, IPS, Application Control, Identity Awareness, Acceleration & Clustering and Advanced Networking Software Blades.

The IP Appliance comes with a pre-configured set of Software Blades. It can be quickly and easily extended to meet new and evolving security requirements with additional Check Point Software Blades such as the Web Security Software Blade.

IP Appliances Hardware Specifications

	IP282	IP297	IP397	IP567	IP697	IP1287	IP2457
10/100/1000 Ports	6	6/8	4/8	4/12	4/16	4/28	4/32
10 GbE Ports	-	-	-	-	6¹	10¹	10¹
Storage	40GB	40GB	80GB	80GB	80GB	80GB	80GB
Disk-Based or Flash	Disk	Disk or Flash	Disk or Flash	Disk or Flash	Disk or Flash	Disk or Flash	Disk or Flash
Virtual System Support	No	No	No	No	No	Yes	Yes
Max VS Supported (Default/Max)	N/A	N/A	N/A	N/A	N/A	10/50	50/75
Enclosure	1U/half rack	1U/half rack	1U	1U	1U	2U	2U
Dimensions (Standard)	8.52 x 18 x 1.71 in.	8.52 x 18 x 1.71 in.	17 x 16 x 1.71 in.	17.23 x 22 x 1.71 in.	17.23 x 24 x 1.71 in.	17.23 x 24.11 x 3.46 in.	17.23 x 24.11 x 3.46 in.
Dimensions (Metric)	216 x 457 x 44 mm	216 x 457 x 44 mm	432 x 406 x 44 mm	438 x 559 x 44 mm	438 x 610 x 44 mm	438 x 613 x 88 mm	438 x 613 x 88 mm
Weight	5.1kg (11.25 lbs)	5.1kg (11.25 lbs)	7.71kg (17.0 lbs)	11.84kg (26.1 lbs)	12.38kg (27.3 lbs)	19.6kg (43.2 lbs)	20.57kg (45.35 lbs)
Operating Environment	Temperature: 0° to 40° C, Humidity: 5% - 95% non- condensing, Altitude: 3048m	Temperature: 5° to 40° C², Relative Humidity: 10% to 85% non-condensing; Altitude: 2500m
Non-Operating Environment	Temperature: -20°C to 70°C; Relative Humidity: 5% to 95%
Power Input	100-240V 50-60Hz
Dual, Hot-Swappable Power Supplies	No	No	No	No	Included	Included	Included
Power Supply (Max)	133W	133W	150W	225W	250W	700W	700W
Power Consumption (Max)			100W	165W
DC Power Supply	-	-	-	-	-	Optional	Optional
Compliance	UL60950-1, First Edition: 2003, CAN/CSAC22.2, No 60950:2000, IEC60950-1: 2001, EN60950-1:2001+A11 with Japanese National Deviations / Emission Compliance: FCC Part 15, Subpart B, Class A, EN50024,EN55022A: 1998, CISPR 22 Class A: 1985, EN61000-3-2, EN61000-3-3 / Immunity: EN55024: 1998 ROHS NEBS Level-3 (for IP2457 only)

¹ Optional
² IP395 can go to 50° C

IP Appliances Performance

	IP282	IP297	IP397	IP567	IP697	IP1287	IP2457
SecurityPower³	113	113	116	116	268	670	1,112
Firewall Throughput	1.5Gbps	1.5Gbps	3.0Gbps	7Gbps	11.7Gbps¹	17.5Gbps¹	30Gbps¹
VPN Throughput	1.0Gbps	1.0Gbps	677Mbps	1.7Gbps	3.3Gbps	8.3Gbps	8.3Gbps
IPS Throughput	1.4Gbps	1.4Gbps	2.9Gbps	2.9Gbps	4Gbps	7Gbps	9Gbps
Concurrent Sessions	900,000	900,000	1M	1M	1M	1M / 3.3M⁴	1M / 3.3M⁴
VLANS	1024²	1024²	1024²	1024²	1024²	1024²	1024²
ADP Module	-	-	-	-	*	*	*
VPN Acceleration	*	*	✔	✔	✔	✔	✔

¹ - Performance with ADP
² - Maximum of 256 VLANs per interface
³ - Check Point's SecurityPower is a new benchmark metric that allows customers to select security appliances by their capacity to handle real-world network traffic, multiple security functions and a typical security policy.
⁴ - With memory upgrade and GAiA OS

✔ - Included
* - Optional

IP Appliances Software Specifications

IP Appliances	IP282	IP 295/297		IP 395/397		IP 565/567		IP 695/697		IP 1285/1287		IP 2455/2457
Software Edition	R65, R70, R71, R75	R65, R70, R71 ,R75		R65, R70, R71, R75		R65, R70, R71, R75		R65, R70, R71, R75		R65, R70, R71, R75		R65, R70, R71, R75
Firewall	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔
IPsec VPN	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔
Application Control	*	*	✔	*	✔	*	✔	*	✔	*	✔	*	✔
IPS	*	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔
Identity Awareness	*	*	✔	*	✔	*	✔	*	✔	*	✔	*	✔
Acceleration & Clustering	*	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔
Advanced Networking	*	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔	✔
Web Security	*	*	*	*	*	*	*	*	*	*	*	*	*
URL Filtering (R75.20 only)	*	*	*	*	*	*	*	*	*	*	*	*	*
Anti-Bot	*	*	*	*	*	*	*	*	*	*	*	*	*
DLP	*	*	*	*	*	*	*	*	*	*	*	*	*
Antivirus	*	*	*	*	*	*	*	*	*	*	*	*	*
Anti-Spam & Email Security	*	*	*	*	*	*	*	*	*	*	*	*	*

✔ - Included
* - Optional

We'd Like to Help!

Call US Sales 1-866-488-6691
Contact Us
Find a Reseller

Products A-Z
- Appliances
- Appliances Overview
- 2200 Appliances
- 4000 Appliances
- 12000 Appliances
- 21000 Appliance
- 61000 Security System
- DDoS Protector Appliances
- SecurityPower
- Secure Web Gateway Appliance
- Threat Prevention Appliance
- Series 80
- UTM-1 Edge
- IP Appliances
- Virtual Systems
- Safe@Office
- Smart-1
- Smart-1 SmartEvent
- Integrated Appliance Solution
- IAS Bladed Hardware
- Software Blades
- Software Blades Overview
- Security Gateway
- Firewall
- IPSec VPN
- IPS
- Mobile Access
- Application Control
- Identity Awareness
- DLP
- Web Security
- URL Filtering
- Anti-Bot
- Antivirus
- Anti-Spam & Email Security
- Advanced Networking & Clustering
- Voice over IP (VoIP)
- Threat Prevention
- ThreatCloud™
- Security Management
- Compliance
- Network Policy Management
- Endpoint Policy Management
- Logging & Status
- SmartWorkflow
- Monitoring
- Management Portal
- User Directory
- SmartProvisioning
- SmartReporter
- SmartEvent
- Multi-Domain Security Management
- Virtualization Security
- Security Gateway Virtual Edition
- Cloud Security
- Virtual Appliance for Amazon Web Services
- Security Systems
- Security Systems Overview
- Endpoint Security
- Endpoint Security
- Full Disk Encryption
- Media Encryption
- Anti-Malware & Program Control
- Remote Access VPN
- Firewall & Compliance
- Check Point WebCheck
- Check Point GO
- Solutions
- Remote Access
- Consumer Products
- ZoneAlarm Antivirus
- ZoneAlarm ForceField
- ZoneAlarm Internet Security Suite

Resources

Additional Resources

Validation