QUANTUM 3600 SECURITY GATEWAY

Check Point Quantum 3600 Next Generation Firewalls enables enterprises to deploy the industry’s leading threat prevention capabilities at all points of their infrastructure, scaling security almost infinitely according to their changing business needs. It also dramatically accelerates the efficiency of their security operations. This enables enterprises to prevent and block even the most advanced attacks, before they can disrupt business.

Strengthen Your
Perimeter Protection
Extend enterprise security to remote branch offices
Always Protected
Against Gen V Attacks
Highest caliber prevention
with unified security
Efficient
Operations
Cut operation management
time by up to 80%
PERFORMANCE HIGHLIGHTS
Gen II Security Firewall |
Gen III Security NGFW1 |
Gen V Security Threat Prevention + SandBlast2 |
---|---|---|
3.3 Gbps | 1.5 Gbps | 780 Mbps |
1: Includes Firewall, Application Control, and IPS.
2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection
SPOTLIGHT

Prevent Known and Zero-day Threats
Check Point SandBlast Network is an evasion-resistant sandbox that provides zero-day protection from advanced and unknown threats. SandBlast Threat Extraction (CDR) ensures quick delivery of safe email and web content to users.

All-inclusive Security Solutions
Check Point 3600 security gateways include all security technologies including the SandBlast (sandboxing) software package for one year. Purchase a renewal for NGFW, NGTP or SandBlast (SNBT) for subsequent years as you like.
Zero Touch Provisioning
Zero Touch manages the initial gateway configuration, enabling you to deploy hundreds or thousands of 3600 security gateways remotely and eliminating the need to travel to each branch office.

Best-in-class Security Management
Unified management across networks and cloud environments increases operational efficiency and lowers the complexity of managing your security. One console can manage all aspects of security from policy to threat prevention.
ENTERPRISE-GRADE PLATFORM
1 GbE (copper) | Memory | Redundant Power |
---|---|---|
6 | 8 GB | Optional |
SPECIFICATIONS
Performance
Enterprise Test Conditions
RFC 3511, 2544, 2647, 1242 PERFORMANCE (LAB)
1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast
Zero-Day Protection. 2: Includes Firewall, Application Control and IPS.
Additional Features
Highlights
- 1x CPUs, 4 physical cores
- 1x 240 GB SSD storage
- 8 GB memory
- Virtual Systems (maximum): 5
Content Security
First Time Prevention Capabilities
- CPU-level, OS-level and static file analysis
- File disarm and reconstruction via Threat Extraction
- Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds
- Maximal file size for Emulation is 100 MB
- Emulation OS Support: Windows XP, 7, 8.1, 10
Applications
- Use 8,000+ pre-defined or customize your own applications
- Accept, prevent, schedule, and apply traffic-shaping
Data Loss Prevention
- Classify 700+ pre-defined data types
- End user and data owner incident handling
Dynamic User-based Policy
- Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, Terminal Servers and with 3rd parties via a Web API
- Enforce consistent policy for local and remote users on Windows, macOS, Linux, Android and Apple iOS platforms
Network
Network Connectivity
- Total physical and virtual (VLAN) interfaces per appliance: 1024/4096 (single gateway/with virtual systems)
- 802.3ad passive and active link aggregation
- Layer 2 (transparent) and Layer 3 (routing) mode
High Availability
- Active/Active L2, Active/Passive L2 and L3
- Session failover for routing change, device and link failure
- ClusterXL or VRRP
IPv6
- NAT66, NAT64, NAT46
- CoreXL, SecureXL, HA with VRRPv3
Unicast and Multicast Routing (see SK98226)
- OSPFv2 and v3, BGP, RIP
- Static routes, Multicast routes
- Policy-based routing
- PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
Physical
Power Requirements
- Single Power Supply rating: 40W
- AC power input: 100 to 240V (50-60Hz)
- Power consumption max: 24.2W
- Maximum thermal output: 82.6 BTU/hr
Dimensions
- Enclosure: Desktop
- Dimensions (WxDxH): 8.3 x 8.3 x 1.65 in. (210 x 210 x 42mm)
- Weight: 3.1 lbs. (1.4 kg)
Environmental Conditions
- Operating: 0° to 40°C, humidity 95%
- Storage: –20° to 70°C, humidity 95%
Certifications
- Safety: UL, CB, CE, TUV GS
- Emissions: FCC, CE, VCCI, RCM/C-Tick
- Environmental: RoHS, WEEE, REACH1, ISO140011
1. factory certificate
ORDERING QUANTUM 3600 SECURITY GATEWAYS
BASE CONFIGURATION 1 | SKU |
---|---|
3600 Security Gateway Configuration, includes 6x 1GbE copper ports, 8 GB RAM, 1 240 GB SSD, 1 external AC power adaptor, SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG3600-SNBT |
SPARES AND MISCELLANEOUS | SKU |
Replacement/Additional Power Supply for 3600 and 3800 Security Gateways | CPAC-PSU-3600/3800 |
Rack Mount kit for the 1500, 3600 and 3800 Security Gateways | CPAC-1500/3600/3800-RM-DUAL |