How can I help you? Start Chat

US Phone: 1-866-488-6691
International Phone: +44-2036087492

  • E-Mail
  • Facebook
  • LinkedIn
  • Twitter

41000 and 61000 Security Systems

The Check Point 41000 and 61000 Security Systems were designed to excel in demanding large data center and telco environments. The multi-bladed, chassis-based security systems scale from 3,200 to 33,000 SPU to support the dynamic needs of growing networks while offering high reliability and performance.


Secures high-demand networks

  • Delivers unbeatable security performance from 40 to 120 Gbps of real-world throughput
  • Customers can add modules, boosting performance even when those systems are in production
  • Protects the most complex networks by supporting dynamic routing protocols

Increases business continuity

  • Increases reliability with redundant hot-swappable components
  • Increases availability and load sharing with ClusterXL
  • Ensures optimal system synchronization and performance with SyncXL

Enhances and extends security as needed with an extensible platform

  • Makes it easy to add Security Gateway Modules for more security or higher performance
  • Accommodates any Software Blades to enhance security protections
  • Provides high port density and high speed connectivity options with Security Switch module


Breakthrough security performance

The 41000 and 61000 Security Systems employ a highly flexible and modular system architecture that significantly boosts security and performance.

The 41000 Security System:

  • Starts at 3,200 SecurityPower Units, with 1 Security Gateway Module (SGM)
  • Scales to 11,000 SPUs with 4 SGMs

The 61000 Security System:

  • Scales easily from 2 to 12 SGMs
  • Delivers up to 33,000 total SecurityPower Units, 400 Gbps of firewall throughput, and up to 130 Gbps IPS protection when fully loaded with 12 SGM260s

Reliability and high serviceability

We designed both systems to meet the uncompromising high availability and serviceability standards of modern data centers and telcos.

  • Hot-swappable redundant power supplies, hard disk drives and fans
  • Carrier-grade availability and serviceability in a rugged rack-mount chassis
  • Redundant Chassis Management Modules continuously check and monitor chassis health, including fans, power supplies and SGMs

Integrated security architecture

Each 41000 and 61000 Security System is packaged with a group of preselected Check Point Software Blades including Firewall, IPsec VPN, Identity Awareness, Advanced Networking, and Acceleration and Clustering. Customize your protection by enabling additional Software Blades, such as SandBlast Threat Emulation which blocks zero-day attacks and unknown threats. This lowers total cost of ownership and meets any need, today and in the future.

High network capacity

These systems are designed to flexibly scale and support the needs of large, dynamic networks.

The 41000 Security System:

  • Compact 6u chassis offering
  • Up to 4xSGM260, 2xSSM160
  • Up to 80 million concurrent connections at 1.1 million connections per second

The 61000 Security System:

  • Maximum chassis configuration of 10xSGM260 and 4xSSM160
  • Supports up to 60 x 10GbE SFP + ports and up to 8 x 40GBase-QSFP ports
  • Supports up to 210 million concurrent connections and 3 million sessions per second

Carrier grade

The Check Point 41000 and 61000 Security Systems meet the stringent operating conditions required by telecommunications companies.

  • ATCA-compliant architecture
  • Compatible with NEBS Level 3 standards
  • Secures IPv4 and IPv6 networks utilizing Check Point Acceleration and Clustering technology
  • Supports dynamic routing protocols such as RIP, OSPF, BGP, PIM (spares and dense mode) and IGMP

Fast deployment and centralized management

Using the available local management console and intuitive configuration wizard, the entire system can be deployed in less than 30 minutes. For secure and centralized administration anywhere in the network, these systems also work with the Check Point Security Management Software Blades.

Learn More





Production Performance (Real-World Traffic Blend)1

3200 to 11000

3200 to 33000

Firewall Throughput (Gbps)

Up to 40

Up to 120

IPS Throughput (Gbps)

Up to 44

Up to 130

Ideal Testing Conditions Performance (RFC 3511, 2544, 2647, 1242)
Firewall, 1518 byte UDP (Gbps)

Up to 80

Up to 400

Connections per Second (M)

Up to 1.1

Up to 3

Concurrent Connections (M)2

Up to 80

Up to 210

VPN AES-128 Throughput (Gbps)

Up to 40

Up to 110

IPS Throughput (Gbps)

Up to 44

Up to 130

Virtual Systems
VS Supported

Up to 250

Up to 250

1 Assumes maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protection
2 Performance measured with default/maximum memory



Network Specifications
10GBase-F SFP+ Ports

Up to 30

Up to 60

40GBase-F QSFP  Ports

Up to 4

Up to 8

Additional Features
Expansion Slots



Security Switch Modules

1 to 2

2 to 4

Security Gateway Modules

1 to 4

2 to 12

Out-of-band Management

Includes 2 Chassis Management Modules (CMM)




Dimensions (Standard)

17.64" W x 16.3" D x 10.5" H

17.63" W x 15.2" D x 26.2" H

Dimensions (Metric)

448 W x 413.4 D x 266.7mm H

448 W x 385.6 D x 665mm H

Max Weight

38.6 kg (84.9 lbs) (Chassis, 3 PSUs, fans, 2 CMM, 4 SGM, 2 SSM)

65.84 kg (145 lbs.) (Chassis, 4 PSUs, fans, 2 CMM, 12 SGM, 2 SSM)

Operating Environment

Temperature: 23° to 131°F / -5° to 55°C; Relative Humidity 5% to 90% (non-condensing)

Non-Operating Environment

Temperature: -40° to 158°F / -40° to 70°C; Relative Humidity 5% - 95% (non-condensing)

Redundant, Hot-Swap PSUs

3 AC or 2 DC

4 AC or 2 DC

AC Power Supplies

No. of modules: 3 (max) Input: 100-240VAC, 50-60Hz Single module output: 1200W @ 110V, 1500W @ 220V

No. of modules: 4 (max) Input: 100-240VAC, 47-63Hz Single module output: 2500W @ 208V/230V, 1500W @ 110V (USA), 1300W @ 100V (Japan)

DC Power Supplies

-48V to -60V 125A, four feeds per module

-48V to -60V 125A, four feeds per module

Power Consumption (Max)



Thermal Output (Max)

7847.9 BTU/hour

16719.5 BTU/hour





CE, FCC part 15

CE, FCC part 15, VCCI, C-Tick




Software Blade

Gateway Mode

Virtual System Mode



Identity Awareness

Advanced Networking & Clustering


Application Control

URL Filtering



SandBlast Threat Emulation


Mobile Access

✔ - Supported
✘ - Not Supported