Check Point Firewall-as-a-Subscription  Strong Security. No Upfront Bill.

2 to 63 Gbps of AI-Powered Threat Prevention  •  Four Tiers  •  3 or 5 Year Subscription  •  Annual

or Monthly Billing

Firewall-as-a-Subscription turns a large upfront hardware purchase into one predictable payment. We carry the capital expenditure

(CapEx), so you can secure your network now. Start with the throughput you need today, and scale as you grow. Every tier includes a

99.9% block rate* against zero-day attacks, cloud management, 24×7 premium support, and policy migration, all in one subscription.

Force 9700 FirewallForce 3980 Firewall Force 19200 Firewall Force 29200 Firewall

Why Security Can’t

Wait for CapEx

What the Subscription

Model Changes

CapEx blocks security : Rising borrowing costs

make large upfront hardware purchases harder

to fund. Capital approvals and depreciation

paperwork slow every project down.

Oversizing: Teams buy 3× the firewall they need

today to cover future growth. You pay now for

capacity you won’t use for years.

Stuck with an old firewall: Migrating from

another vendor’s firewall is a barrier. Policy

migration effort keeps teams on outdated

protection.

Security can’t wait: Attacks keep coming while

budgets wait for approval.

D on’t let CapEx block your security: One predictable monthly

or annual payment instead of a hardware purchase. We carry

the CapEx. Built for operating expense (OpEx) budgets, with no

depreciation paperwork and no long budget cycle.

Stop buying 3× the firewall you need: Start with the throughput

you need today, and scale as you grow. Upgrades within your

tier are license-only, with no hardware replacement.

Leave your old firewall behind: 150 Check Point Global

Services Flex Credits cover policy migration from another

vendor’s firewall.

Strong security. No upfront bill: AI-powered threat prevention

with a 99.9% block rate* against zero-day attacks. Pay monthly

or annually.

Who It’s For

O rganizations that want to avoid a large upfront firewall purchase

Companies and industries that prefer OpEx

Organizations facing a firewall refresh, capacity expansion, or vendor switch

Small and midsize organizations, from a few hundred to a few thousand employees

* NSS Lab report https://www.checkpoint.com/resources/items/report-nss-labs-enterprise-firewalls-report-2025

Check Point Firewall-as-a-Subscription Strong Security. No Upfront Bill.

2 to 63 Gbps of AI-Powered Threat Prevention • Four Tiers • 3 or 5 Year Subscription • Annual or Monthly Billing

Firewall-as-a-Subscription turns a large upfront hardware purchase into one predictable payment. We carry the capital expenditure

(CapEx), so you can secure your network now. Start with the throughput you need today, and scale as you grow. Every tier includes

a 99.9% block rate* against zero-day attacks, cloud management, 24×7 premium support, and policy migration, all in one subscription.

Force 3980 Firewall Force 9700 Firewall Force 19200 Firewall Force 29200 Firewall

Why Security Can’t Wait for CapEx CapEx blocks security: Rising borrowing costs

make large upfront hardware purchases harder

to fund. Capital approvals and depreciation paperwork slow every project down.

Oversizing: Teams buy 3× the firewall they need

today to cover future growth. You pay now for

capacity you won’t use for years.

Stuck with an old firewall: Migrating from another vendor’s firewall is a barrier. Policy migration effort keeps teams on

outdated protection.

Security can’t wait: Attacks keep coming while

budgets wait for approval.

What the Subscription Model Changes Don’t let CapEx block your security: One predictable monthly

or annual payment instead of a hardware purchase. We carry

the CapEx. Built for operating expense (OpEx) budgets, with

no depreciation paperwork and no long budget cycle.

Stop buying 3× the firewall you need: Start with the throughput

you need today, and scale as you grow. Upgrades within your

tier are license-only, with no hardware replacement.

Leave your old firewall behind: 150 Check Point Global

Services Flex Credits cover policy migration from another vendor’s firewall.

Strong security. No upfront bill: AI-powered threat prevention

with a 99.9% block rate* against zero-day attacks. Pay monthly

or annually.

Who It’s For

Organizations that want to avoid a large upfront firewall purchase

Companies and industries that prefer OpEx

Organizations facing a firewall refresh, capacity expansion, or vendor switch

Small and midsize organizations, from a few hundred to a few thousand employees

* NSS Lab report https://www.checkpoint.com/resources/items/report-nss-labs-enterprise-firewalls-report-2025

Firewall-as-a-Subscription Datasheet 2

Choose Your Tier

Four tiers, one subscription model. Each tier runs on a single Force Firewall platform, so you upgrade throughput within

the tier through licensing alone.

Tier  Built on  Subscribed Threat

Prevention  Platform max  Platform max

Branch  Force 3980

Firewall

2 or 4 Gbps (upgradable

to 7 Gbps)  7 Gbps

Branch and small offices. 1RU,

optimized for SD-WAN.

Small

Perimeter

Force 9700

Firewall  5, 8, 12 or 16 Gbps  16.6 Gbps

Mid-to-large enterprise data centers.

1RU, fast HTTPS inspection.

Large

Perimeter

Force 19200

Firewall  20, 28 or 36 Gbps  44 Gbps

Enterprise data centers. 2RU, high-

density ports, ASIC-accelerated 40/100G

interfaces.

Data

Center

Force 29200

Firewall  46, 56 or 63 Gbps  75 Gbps

Large enterprise data centers and

service providers. 2RU, seven I/O slots,

line-rate threat prevention.

What’s Included in Every Subscription

Solution / Service   Description

Force Firewall  AI-powered next-generation firewall sized and priced to your subscribed throughput.

Threat Prevention &

SandBlast

Comprehensive Layer 1–7 threat prevention with a 99.9% block rate against zero-day

attacks, including IPS, anti-malware, anti-bot, sandboxing, and AI-driven phishing

protection.

Direct or Collaborative

Premium Support*

24×7 enterprise-grade support. Choose Premium Direct (Check Point-led) or Collaborative

Premium (partner-delivered with Check Point backing).

Smart-1 Agentic

Management package

Cloud-delivered security management that eliminates the need for additional on-premises

management infrastructure. Existing SMS/MDS deployments can also be used.

Check Point Global Services  150 Global Services Flex Credits, enough to cover policy migration from another vendor’s

firewall, or redeemable against any other Check Point professional service.

* For additional peace of mind, Check Point and partners also offer 24/7 Incident Response, Fully Managed Firewall

Service, MDR/XDR, and Managed SOC services at additional cost.

© 2026 Check Point Software Technologies Ltd. All rights reserved.

Firewall-as-a-Subscription Datasheet 2

© 2026 Check Point Software Technologies Ltd. All rights reserved.

* For additional peace of mind, Check Point and partners also offer 24/7 Incident Response, Fully Managed Firewall Service, MDR/XDR, and Managed SOC services at additional cost.

Choose Your Tier

Four tiers, one subscription model. Each tier runs on a single Force Firewall platform, so you upgrade throughput within the tier through licensing alone.

Tier Built on Subscribed Threat Prevention

Platform max Platform max

Branch Force 3980 Firewall

2 or 4 Gbps (upgradable to 7 Gbps)

7 Gbps Branch and small offices. 1RU, optimized for SD-WAN.

Small Perimeter

Force 9700 Firewall 5, 8, 12 or 16 Gbps 16.6 Gbps

Mid-to-large enterprise data centers. 1RU, fast HTTPS inspection.

Large

Perimeter

Force 19200 Firewall 20, 28 or 36 Gbps 44 Gbps

Enterprise data centers. 2RU, high-density ports, ASIC-accelerated 40/100G interfaces.

Data Center

Force 29200 Firewall 46, 56 or 63 Gbps 75 Gbps

Large enterprise data centers and service providers. 2RU, seven I/O slots, line-rate threat prevention.

What’s Included in Every Subscription

Solution / Service Description

Force Firewall AI-powered next-generation firewall sized and priced to your subscribed throughput.

Threat Prevention & SandBlast

Comprehensive Layer 1–7 threat prevention with a 99.9% block rate against zero-day attacks, including IPS, anti-malware, anti-bot, sandboxing, and AI-driven phishing protection.

Direct or

Collaborative Premium Support*

24×7 enterprise-grade support. Choose Premium Direct (Check Point-led) or Collaborative Premium (partner-delivered with Check Point backing).

Smart-1 Agentic Management package

Cloud-delivered security management that eliminates the need for additional on-premises management infrastructure. Existing SMS/MDS deployments can also be used.

Check Point Global Services 150 Global Services Flex Credits, enough to cover policy migration from another vendor’s firewall, or redeemable against any other Check Point professional service.

Firewall-as-a-Subscription Datasheet 3

Anytime Scalability

Upgrade your subscribed throughput at any time within your tier through licensing alone, with no hardware replacement,

no shipping, and no service interruption.

Tier  In-tier upgrade paths  Beyond the tier

Branch  2 → 4 Gbps; 4 → 7 Gbps

Cross-tier upgrade to Small, Medium or Large requires new hardware

and a new subscription contract, available after the initial 3-year

commitment.

Small

Perimeter

5 → 8, 12 or 16 Gbps; 8 → 12 or

16 Gbps; 12 → 16 Gbps

Cross-tier upgrade to Medium or Large requires new hardware and a

new subscription contract, available after the initial 3-year

commitment.

Large

Perimeter  20 → 28 or 36 Gbps; 28 → 36 Gbps

Cross-tier upgrade to Large requires new hardware and a new

subscription contract, available after the initial 3-year commitment.

Data

Center 46 → 56 or 63 Gbps; 56 → 63 Gbps

Beyond 63 Gbps, Check Point Maestro Hyperscale Orchestrator can

scale Force 29200 Firewalls into a single elastic cluster. Contact your

Check Point representative to design the right architecture.

Performance by Subscribed Throughput

Tier  Firewall  Threat Prevention* IPS only**  Firewall (L4/

L7)***

Branch  Force 3980  2 Gbps ~8 Gbps ~11 Gbps

4 Gbps ~16 Gbps ~23 Gbps

7 Gbps 28.5 Gbps 40 Gbps

5 Gbps ~18 Gbps ~32 Gbps

8 Gbps ~29 Gbps ~52 Gbps

12 Gbps ~44 Gbps ~77 Gbps

16 Gbps ~59 Gbps ~103 Gbps

Small Perimeter  Force 9700

© 2026 Check Point Software Technologies Ltd. All rights reserved.© 2026 Check Point Software Technologies Ltd. All rights reserved.

Firewall-as-a-Subscription Datasheet 3

Anytime Scalability

Upgrade your subscribed throughput at any time within your tier through licensing alone, with no hardware replacement, no shipping, and no service interruption.

Tier In-tier upgrade paths Beyond the tier

Branch Cross-tier upgrade to Small, Medium or Large requires new hardware and a new subscription contract, available after the initial 3-year commitment.

Small Perimeter

Cross-tier upgrade to Medium or Large requires new hardware and a new subscription contract, available after the initial 3-year commitment.

Large

Perimeter Cross-tier upgrade to Large requires new hardware and a new subscription contract, available after the initial 3-year commitment.

Data Center

Beyond 63 Gbps, Check Point Maestro Hyperscale Orchestrator can scale Force 29200 Firewalls into a single elastic cluster. Contact your Check Point representative to design the right architecture.

Performance by Subscribed Throughput

Tier Firewall Threat Prevention* IPS only** Firewall (L4/L7)***

Branch Force 3980 2 Gbps ~8 Gbps ~11 Gbps

4 Gbps ~16 Gbps ~23 Gbps

7 Gbps 28.5 Gbps 40 Gbps

Small Perimeter Force 9700 5 Gbps ~18 Gbps ~32 Gbps

8 Gbps ~29 Gbps ~52 Gbps

12 Gbps ~44 Gbps ~77 Gbps

16 Gbps ~59 Gbps ~103 Gbps

Firewall-as-a-Subscription Datasheet 4

Threat Prevention* IPS only**  Firewall (L4/L7)***

20 Gbps ~66 Gbps ~111 Gbps

28 Gbps ~92 Gbps ~156 Gbps

36 Gbps ~119 Gbps ~200 Gbps

46 Gbps ~144 Gbps ~307 Gbps

56 Gbps ~175 Gbps ~373 Gbps

63 Gbps ~197 Gbps ~420 Gbps

* Threat Prevention = full NGTP, capped by the subscribed throughput.  ** IPS extrapolated using IPS max × tier / Threat

Prevention max (model-specific ratio).  *** Firewall extrapolated using Firewall max × tier / Threat Prevention max (same

method). Same hardware within each tier; upgrades are license-only.

Hardware Specifications

Specification  Force 3980 (XS)   Force 9700 (S)  Force 19200 (M)  Force 29200 (L)

Form factor

1RU rack-

mountable,

optimized for SD-

WAN branch

deployments

1RU rack-

mountable

2RU rack-

mountable, modular

high-density chassis

2RU rack-

mountable, modular

high-density chassis

Threat Prevention

throughput  Up to 7 Gbps  Up to 16.6 Gbps  Up to 44 Gbps  Up to 75 Gbps

NGFW throughput  Up to 20 Gbps  - Up to 100 Gbps  Up to 165 Gbps

Firewall

throughput  Up to 40 Gbps

Up to 129 Gbps; up to

400 Gbps UDP

(1518B)

Up to 245 Gbps; up to

800 Gbps UDP

(1518B)

Up to 500 Gbps; up to

1.4 Tbps UDP

(1518B)

TLS inspection

(Threat

Prevention)

Up to 2.1 Gbps  - Up to 18.6 Gbps  Up to 28.1 Gbps

Tier

Large Perimeter

Firewall

Force 19200

Data Center   Force 29200

© 2026 Check Point Software Technologies Ltd. All rights reserved.© 2026 Check Point Software Technologies Ltd. All rights reserved.

Firewall-as-a-Subscription Datasheet 4

* Threat Prevention = full NGTP, capped by the subscribed throughput. ** IPS extrapolated using IPS max × tier / Threat Prevention max (model-specific ratio). *** Firewall extrapolated using Firewall max × tier / Threat Prevention max (same method). Same hardware within each tier; upgrades are license-only.

Tier Firewall Threat Prevention* IPS only** Firewall (L4/L7)***

Large Perimeter Force 19200 20 Gbps ~66 Gbps ~111 Gbps

28 Gbps ~92 Gbps ~156 Gbps

36 Gbps ~119 Gbps ~200 Gbps

Data Center Force 29200 46 Gbps ~144 Gbps ~307 Gbps

56 Gbps ~175 Gbps ~373 Gbps

63 Gbps ~197 Gbps ~420 Gbps

Hardware Specifications

Specification Force 3980 (XS) Force 9700 (S) Force 19200 (M) Force 29200 (L)

Form factor

1RU

rack-mountable,

optimized for SD-WAN

branch deployments

1RU rack-mountable

2RU

rack-mountable, modular high-density chassis

2RU

rack-mountable, modular high-density chassis

Threat Prevention

throughput Up to 7 Gbps Up to 16.6 Gbps Up to 44 Gbps Up to 75 Gbps

NGFW throughput Up to 20 Gbps -

Up to 100 Gbps Up to 165 Gbps

Firewall

throughput Up to 40 Gbps

Up to 129 Gbps; up to 400 Gbps UDP (1518B)

Up to 245 Gbps; up to 800 Gbps UDP (1518B)

Up to 500 Gbps; up to 1.4 Tbps UDP (1518B)

TLS inspection (Threat Prevention)

Up to 2.1 Gbps -

Up to 18.6 Gbps Up to 28.1 Gbps

Firewall-as-a-Subscription Datasheet 5

Force 3980 (XS)  Specification  Force 9700 (S)  Force 19200 (M)  Force 29200 (L)

VPN throughput

(AES-GCM)  Up to 23 Gbps  - Up to 86 Gbps  Up to 130 Gbps

Connections per

second  Up to 195,000  Up to 535,000  Up to 1,000,000  Up to 1,500,000

Concurrent

connections

30M / 48M / 67M

(Base / Plus / Max)  Up to 7.2 million  - -

CPU   - 16-core  - -

Dual 960 GB NVMe

SSD, RAID-1 (Plus

configuration)  Storage  - - -

4× RJ45 + 4×

1/10GbE SFP+ on-

board, plus 2 I/O

slots (8×1/10G,

4×10/25G or

2×40/100G)

2× 1/10G copper

mgmt + 2× 1/10/25G

SFP28 sync, plus 4 I/

O slots (up to

32×1/10G, 18×10/25G

or 8×40/100G)

2× 1/10G copper

mgmt + 2× 1/10/25G

SFP28 sync, plus 7 I/

O slots (up to

56×1/10G, 30×10/25G

or 14×40/100G)

16× 1GbE RJ45 + 2×

2.5GbE RJ45 + 8×

1GbE SFP + 4×

10GbE SFP+ (all

built-in)

Network I/O

ClusterXL active/

active or active/

passive; VRRP. Dual

internal power

supplies

ClusterXL active/

active or active/

passive; VRRP. Dual

hot-swap power

supplies

Active/standby and

active/active

clustering  High Availability  -

Integrated SD-WAN

for hybrid mesh

branch networks  SD-WAN - - -

TLS inspection supports TLS 1.3 and HTTP/2. For High Availability, order quantity 2. “-” = see the Force Firewall datasheet

for full specifications.

© 2026 Check Point Software Technologies Ltd. All rights reserved.© 2026 Check Point Software Technologies Ltd. All rights reserved.

Firewall-as-a-Subscription Datasheet 5

Specification Force 3980 (XS) Force 9700 (S) Force 19200 (M) Force 29200 (L)

VPN throughput (AES-GCM) Up to 23 Gbps

-

Up to 86 Gbps Up to 130 Gbps

Connections per second Up to 195,000 Up to 535,000 Up to 1,000,000 Up to 1,500,000

Concurrent connections Up to 7.2 million

- - 30M / 48M / 67M (Base / Plus / Max)

CPU - 16-core - -

Storage - - -

Dual 960 GB NVMe SSD, RAID-1 (Plus configuration)

Network I/O

16× 1GbE RJ45 + 2× 2.5GbE RJ45 + 8× 1GbE SFP + 4×

10GbE SFP+ (all built-in)

4× RJ45 + 4× 1/10GbE SFP+ on-board, plus 2 I/O slots (8×1/10G, 4×10/25G or 2×40/100G)

2× 1/10G copper mgmt + 2× 1/10/25G SFP28 sync, plus 4 I/O slots (up to 32×1/10G, 18×10/25G or 8×40/100G)

2× 1/10G copper mgmt + 2× 1/10/25G SFP28 sync, plus 7 I/O slots (up to 56×1/10G, 30×10/25G or 14×40/100G)

High Availability

ClusterXL active/active or active/passive; VRRP. Dual internal power supplies

Active/standby and active/active clustering

ClusterXL active/active or active/passive; VRRP. Dual hot-swap power supplies

-

SD-WAN Integrated SD-WAN for hybrid mesh branch networks

- - -

TLS inspection supports TLS 1.3 and HTTP/2. For High Availability, order quantity 2. “-” = see the Force Firewall datasheet for full specifications.

Firewall-as-a-Subscription Datasheet 6

Key Terms & Conditions

Minimum commitment: 3 years (5-year terms also available).

Intermediate throughput upgrades: Available at any time within the subscribed tier.

Cross-tier hardware upgrades: Available after the 36-month commitment, via a new subscription contract.

Billing options: Annual or monthly invoicing.

Activation: License validity begins on activation, with a 60-day grace period from shipment.

Auto-renewal: Subscription continues automatically after the committed term, one year at a time, with no end date, using

the original payment method (annually or monthly).

Cancellation: Allowed only after the committed term has completed. Equipment is returned via the standard RMA

process.

Hardware ownership: Title remains with Check Point throughout the subscription.

Infinity ELA: This subscription can be consumed as part of a Committed Spend Infinity ELA.

Not included: Optional blades (SD-WAN, VSX, IoT), additional interfaces, and SFPs are sold separately.

Key Terms & Conditions

Open the Check Point Product Catalog and search for SGAAS or your existing SKU (for example, CPAP-SGAAS-5G-

PREMIUM-3Y).

On the SKU page, change Subscription Option from “New Subscription Quote” to “Upgrade existing subscription to higher

throughput.”

Select the new throughput level and complete the quote. Your existing Force Firewall is licensed up to the new level. No

shipment required.

Get Started

Don’t let borrowing costs slow down your security. Contact a Check Point partner today and get started.

About Check Point

Check Point Software Technologies Ltd. (www.checkpoint.com) is a leading provider of cyber security solutions to

governments and corporate enterprises globally. Its solutions protect customers from cyber attacks with an industry-leading

catch rate of malware, ransomware and other types of attacks. Check Point offers a multilevel security architecture that

defends enterprises’ cloud, network and information held on mobile devices, plus the most comprehensive and intuitive

unified security management system. Check Point protects over 100,000 organizations of all sizes.

© 2026 Check Point Software Technologies Ltd. All rights reserved.© 2026 Check Point Software Technologies Ltd. All rights reserved.

Firewall-as-a-Subscription Datasheet 6

Key Terms & Conditions

Minimum commitment: 3 years (5-year terms also available).

Intermediate throughput upgrades: Available at any time within the subscribed tier.

Cross-tier hardware upgrades: Available after the 36-month commitment, via a new subscription contract.

Billing options: Annual or monthly invoicing.

Activation: License validity begins on activation, with a 60-day grace period from shipment.

Auto-renewal: Subscription continues automatically after the committed term, one year at a time, with no end date, using

the original payment method (annually or monthly).

Cancellation: Allowed only after the committed term has completed. Equipment is returned via the standard RMA

process.

Hardware ownership: Title remains with Check Point throughout the subscription.

Infinity ELA: This subscription can be consumed as part of a Committed Spend Infinity ELA.

Not included: Optional blades (SD-WAN, VSX, IoT), additional interfaces, and SFPs are sold separately.

Key Terms & Conditions

Open the Check Point Product Catalog and search for SGAAS or your existing SKU (for example, CPAP-SGAAS-5G-PREMIUM-3Y).

On the SKU page, change Subscription Option from “New Subscription Quote” to “Upgrade existing subscription to higher

throughput.”

Select the new throughput level and complete the quote. Your existing Force Firewall is licensed up to the new level. No

shipment required.

Get Started

Don’t let borrowing costs slow down your security. Contact a Check Point partner today and get started.

About Check Point

Check Point Software Technologies Ltd. (www.checkpoint.com) is a leading provider of cyber security solutions to governments and corporate enterprises globally. Its solutions protect customers from cyber attacks with an industry-leading catch rate of malware, ransomware and other types of attacks. Check Point offers a multilevel security architecture that defends enterprises’ cloud, network and information held on mobile devices, plus the most comprehensive and intuitive unified security management system. Check Point protects over 100,000 organizations of all sizes.

https://www.checkpoint.com https://www.checkpoint.com