1、Click to edit Master title style,Click to edit Master text styles,Second level,Third level,Fourth level,Fifth level,*,20032009 Check Point Software Technologies Ltd.All rights reserved.,ConfidentialFor Check Point users and approved third parties,Check Point IP,设备硬件,(,端口、板卡、存储等)说明,Security Gateway R
2、70,Check Point IP Appliances,Trusted by tens of thousands of,customers for over a decade,Industry leading reputation,Deployed by 80%of Fortune 100 customers,Designed for enterprise and carrier class networks,Variety of high-availability options for the appliance and the components,Serviceability tha
3、t meets the tightest SLA,requirements,Network processor based acceleration(ADP and VPN),Multiple interface options,Deliver Check Point security gateway software blade architecture over a rich&robust operating system,Integrated&optimized for security applications,Advanced networking to complement rob
4、ust security,Rich set of monitoring and management tools,IP Appliance differentiators,Flexible choice of systems,High-end Appliances with multiple redundant options,Low-end Appliances with lower rack size,Modularity,Rich set of interface options,AC/DC input power options,Mix and match:fiber/copper i
5、nterfaces or transceivers,Reuse I/O cards across Appliances,Proven reliability design,High MTBF proven to function in extreme environments,Carrier class NEBS compliance for IP2455,Slide-out trays for low Mean Time To Service(MTTS),Check Point IP Appliance line,Check Point IP Appliance Options,Perfor
6、mance and Functionality,IP2455,IP1285,IP565,IP695,IP395,IP295,1.5 Gbps,3 Gbps,6.3 Gbps,7.2 Gbps,10.3 Gbps,10.3 Gbps,11.7 Gbps w/ADP,15.4 Gbps w/ADP,29 Gbps w/ADP,1518-byte FW UDP Throughput,Check Point IP Appliances details,IP295,For the branch locations with firewall,VPN,IPS,advanced networking,and
7、 acceleration&clustering software blades,Small form factor 1 rack unit(RU)system and width,Available in single shell and double shell mode,Base Configuration,6 ports of 10/100/1000Base-T;up to 8 gigabit ports,1 PMC expansion slot used for optional network interface card,Console port,USB port,Single
8、AC power,40 GB HDD for disk version,RAM,Flash version:1 GB DRAM,2 GB Flash,Disk version:2 GB DRAM,128 MB Compact Flash,IP295 benefits,Gigabit performance and high port density in half rack unit ideal for small branch locations,Small form factor design allows for side-by-side high availability in a s
9、ingle 1RU,Modular design with PMC slot for optional network interface card,Optional card includes fiber option,Slide-out tray for low MTTS,Flexible architecture,Optional VPN acceleration card extends VPN performance,Optional software blades extend security,firewall,blade,VPN,blade,IPS,blade,advanced
10、 networking,blade,acceleration&clustering,blade,web security,blade,voice over IP,blade,1.5 Gbps,built-in,optional,Manageable,Modular,and Serviceable,1,2,3,1.PMC expansion slot(slot 1)for optional network,interface cards,-2 port 10/100/1000Base-T,-2 port 1000Base-SX,-2 port 1000Base-LX,2.USB Port,3.C
11、onsole port,5,4.Onboard 6 port 10/100/1000 Base-T,5.Slide-out tray,IP295,4,IP295 interface flexibility matrix,Example configurations,Onboard PMC ports,PMC slot(slot 1),Total PMC ports,PMC copper,6 port 10/100/1000 Base-T,2 port 10/100/1000 Base-T,8,PMC fiber,6 port 10/100/1000 Base-T,2 port 1000 Bas
12、e-SX,8,PMC fiber,6 port 10/100/1000 Base-T,2 port 1000 Base-LX,8,IP395,For the distributed and medium enterprise with firewall,VPN,IPS,advanced networking,and acceleration&clustering software blades,Small form factor 1 RU system,Base Configuration,Onboard 4 ports of 10/100/1000Base-T;up to 8 gigabit
13、 ports,2 PMC expansion slots used for optional network interface cards,Onboard PCMCIA carrier,Onboard VPN chip,Console port,Auxiliary port(RJ45),Single AC power,80 GB HDD,RAM,Flash version:1 GB DRAM(max 2 GB,1 GB compact flash,Disk version:1 GB DRAM(max 2 GB),1 GB compact flash,IP395 benefits,firewa
14、ll,blade,VPN,blade,IPS,blade,advanced networking,blade,acceleration&clustering,blade,web security,blade,voice over IP,blade,3 Gbps,Highly versatile appliance providing multi-gigabit performance in small form factor for small to medium and distributed enterprise,Modular design with PMC slots for supp
15、orting optional network interface cards,Support for WAN T1 interface,Onboard hardware-based VPN acceleration to meet high VPN performance needs,Slide-out tray for low MTTS,Flexible architecture to expand appliance to meet growing business needs,Optional software blades extend security,built-in,optio
16、nal,Manageable,Modular,and Serviceable,1,2,5,1.PMC expansion slots(slot 1 and slot 2)for,optional network interface cards,-2 port 1000Base-T,-2 port 1000Base-SX,-2 port 1000Base-LX,-4 port WAN T1,2.Console port,3.Auxiliary port(RJ45),6,4.Onboard single slot PCMCIA carrier,5.,Onboard 4 port 10/100/10
17、00 Base-T,6.Slide-out tray,4,IP395,3,IP395 interface flexibility matrix,Example configurations,Onboard PMC ports,PMC slots(slot 1 and 2),Total PMC ports,Total T1 ports,PMC copper,4 port 10/100/1000 Base-T,2*2 port 1000 Base-T,8,-,PMC fiber,4 port 10/100/1000 Base-T,2*2 port 1000 Base-SX,8,-,PMC fibe
18、r,4 port 10/100/1000 Base-T,2*2 port 1000 Base-LX,8,-,WAN T1 PMC,4 port 10/100/1000 Base-T,1*4 port T1&1*2 port 1000 Base-T,6,4,IP565,For the distributed medium enterprise with firewall,VPN,IPS,advanced networking,and acceleration&clustering software blades,Small form factor 1 RU system,Base Configu
19、ration,Includes 4 ports of 10/100/1000Base-T;up to 12 gigabit ports,2 PMC expansion slots,Console port,Auxiliary port(RJ45),Removable PCMCIA carrier,Includes VPN acceleration card,Single AC power,80 GB HDD(optional 2,nd,80 GB HDD for disk mirroring),RAM,Flash version:1 GB DRAM(max 2 GB),1 GB compact
20、 flash,Disk version:1 GB DRAM(max 2 GB),1 GB compact flash,IP565 benefits,Designed for growing medium enterprise,providing high performance,better port density,&hardware-based acceleration options in small,form factor,Modular design with PMC slots for,supporting optional network interface cards,Opti
21、onal hardware-based ADP services,module extends firewall and VPN performance,Hardware-based VPN accelerator card,included meet high VPN performance needs,Slide-out tray for low MTTS,Flexible architecture to expand appliance to,meet growing business needs,Optional software blades extend security,fire
22、wall,blade,VPN,blade,IPS,blade,advanced networking,blade,acceleration&clustering,blade,web security,blade,voice over IP,blade,6.3 Gbps,built-in,optional,Designed for growing medium enterprise,Provides high performance,port density and hardware-based acceleration in small form factor,Modular design w
23、ith PMC slots for supporting optional network interface cards,Includes hardware-based VPN acceleration to meet high VPN performance needs,Slide-out tray for low MTTS,Flexible architecture to expand appliance to,meet growing business needs,Optional software blades extend security,Manageable,Modular,a
24、nd Serviceable,1,2,5,1.PMC expansion slots(slot 1 and slot 2)for,optional network interface cards,-2 port 1000Base-T,-4 port 1000Base-T,-2 port 1000Base-SX,-2 port 1000Base-LX,6,4,IP565,2.Console port,3.Auxiliary port(RJ45),4.Removable single slot PCMCIA carrier(slot 3),5.,Base configuration include
25、s 4 port,10/100/1000 Base-T management ports(slot 4),6.Slide-out tray,3,IP565 interface flexibility matrix,Example configurations,Built-in PMC ports(slot 4),PMC slots (slot 1 and 2),Total PMC GbE ports,Total ADP ports,PMC copper,4 port 10/100/1000 Base-T,2*2 port 1000 Base-T,8,-,PMC copper,4 port 10
26、/100/1000 Base-T,2*4 port 1000 Base-T,12,-,PMC fiber,4 port 10/100/1000 Base-T,2*2 port 1000 Base-SX,8,-,PMC fiber,4 port 10/100/1000 Base-T,2*2 port 1000 Base-LX,8,-,IP695,For the medium and large enterprise entry level multi-core appliance with firewall,VPN,IPS,advanced networking,and acceleration
27、clustering software blades,Small form factor 1 RU system,Supports one ADP services module,Base Configuration,Single dual core CPU,Includes 4 ports of 10/100/1000Base-T;up to 16 maximum GbE ports,3 PMC expansion slots,Console port,Auxiliary port(USB),Includes VPN acceleration card,Dual hot-swappable
28、 AC power,80 GB HDD(optional 2,nd,80 GB HDD for disk mirroring),RAM,Flash version:2 GB DRAM(max 8 GB),4GB compact flash,Disk version:2 GB DRAM(max 8 GB),128 MB compact flash,IP695 benefits,firewall,blade,VPN,blade,IPS,blade,advanced networking,blade,acceleration&clustering,blade,web security,blade,v
29、oice over IP,blade,built-in,optional,Entry level multi-core appliance for the enterprise,Scalability without costly hardware forklift upgrades to expand capacity and performance,Modular design with PMC slots for supporting optional network interface cards,10 GbE PMC cards(for 10 GbE connectivity),Op
30、tional hardware-based ADP services module extends firewall and VPN performance,Includes hardware-based VPN acceleration to meet high VPN performance needs,Slide-out tray for low MTTS,Flexible architecture to expand appliance to meet growing business needs,Optional software blades extend security,11.
31、4 Gbps w/ADP,Manageable,Modular,and Serviceable,1,2,5,1.PMC expansion slots(slot 1 and slot 2)for,optional network interface cards,-2 port 1000Base-T,-4 port 1000Base-T,-2 port 1000Base-SX,-2 port 1000Base-LX,-2 port 10GBase-X,-8 port ADP 1000Base-T RJ45,-8 port ADP 1000Base-X SFP,(ADP module can on
32、ly be used in slot 1 and slot 2;,one ADP occupies both slots),2.Console port,6,3.Auxiliary port(USB),4.PMC expansion slot(slot 3)for optional,interface cards,5.Base configuration includes 4 port,10/100/1000 Base-T,management ports,(slot 4),(ports not shown in the picture),6.Slide-out tray,4,IP695,3,
33、IP695 interface flexibility matrix,Example configurations,Built-in PMC ports (slot 4),PMC/XMC slots (slot 1,2 and 3),Total PMC/XMC ports,Total ADP ports,PMC copper,4 port 10/100/1000 Base-T,3*4 port 1000 Base-T,16,-,PMC fiber,4 port 10/100/1000 Base-T,3*2 port 1000 Base-SX,10,-,ADP,copper,&PMC coppe
34、r combo,4 port 10/100/1000 Base-T,1*8 port ADP,1000 Base-T,+,1*4 port 1000 Base-T,8,8,ADP,fiber,&PMC copper combo,4 port 10/100/1000 Base-T,1*8 port ADP 1000 Base-X SFP,+,1*4 port 1000 Base-T,8,8,ADP,fiber,&PMC 10 GbE fiber combo,4 port 10/100/1000 Base-T,1*8 port ADP 1000 Base-X SFP,+,1*2 port,10G
35、Base-F,PMC,6(4-Gigabit and 2-10 GbE),8,Mid-range ADP services module,Mid-range ADP services module for IP695 in Dual PMC bay form factor,Module is installed in slots 1 and 2 for IP695,One module can be accommodated on IP695 in two distinct configurations:,8-port 10/100/1000 Base-T(Cu),8-port 1000 Ba
36、se-X SFP(SX,LX and Cu),Any combination of SFPs(SX,LX,and/or Cu)is allowed on the SFP ADP module types,Transceivers are hot-swappable,IP1285,For the large enterprise multi-core appliance with firewall,VPN,IPS,advanced networking,and acceleration&clustering software blades,Small form factor 2 RU syste
37、m,Supports one ADP services module,1GbE and 10GbE,Base Configuration,Single quad core CPU,Includes 4 ports of 10/100/1000Base-T;up to 28*gigabit ports,5 front-facing PMC/XMC expansion slots,Console port,Auxiliary ports(RJ45 and USB),Includes VPN acceleration card,Dual hot swappable AC or DC power(fo
38、r load-sharing and redundancy),Dual front facing hot swappable HDDs,80 GB HDD(optional 2,nd,80GB HDD for RAID 1 hardware disk-mirroring),RAM,Flash version:4 GB DRAM(max 8 GB),4GB compact flash,Disk version:4 GB DRAM(max 8 GB),128 MB compact flash,*,Need carrier card to support all PMC/XMC cards exce
39、pt ADP,IP1285 benefits,firewall,blade,VPN,blade,IPS,blade,advanced networking,blade,acceleration&clustering,blade,web security,blade,voice over IP,blade,built-in,optional,Single quad core appliance for multi-core acceleration,Leverages high port density ADP services module&XMC cards to boost perform
40、ance,Expandable design with PMC slots for supporting optional network interface cards,10GbE&1GbE XMC cards,Optional hardware-based 10GbE or 1GbE ADP services module extends firewall and VPN performance,Includes hardware-based VPN acceleration to meet high VPN performance needs,Enhance business conti
41、nuity-dual redundant hot-swappable power supplies,hot-swappable fan trays,and optional redundant hard disk drives,Slide-out tray for low MTTS,Flexible architecture to expand appliance to meet growing business needs,Optional software blades extend security,15.4 Gbps w/ADP,Manageable,Modular,and Servi
42、ceable,1,2,5,6.Base configuration includes 4 port 10/100/1000,Base-T management ports(slot 4),7.6U carrier card(in slot 1)for optional PMC/XMC network interface cards or ADP module(comes with carrier),8.6U carrier card(in slot 2)for optional PMC/XMC network interface cards or ADP module(comes with c
43、arrier),(ADP module can use either slot 1 or 2),9.Slide-out tray,9,1.Optional redundant hard disk drives w/carrier,2.Console port,3.Auxiliary port,4.USB port,5.PMC expansion slot(slot 3)for optional PMC or,XMC network interface cards,6,IP1285,7,8,3,4,IP1285 interface flexibility matrix,Example confi
44、gurations,Onboard PMC ports(slot 4),PMC/XMC slot (slot 3),6U carrier slots (slot 1 and 2),Total,PMC/XMC,ports,Total ADP ports,PMC copper,4 port 10/100/1000 Base-T,4 port 1000 Base-T,4*4 port 1000 Base-T,24,-,PMC fiber,4 port 10/100/1000 Base-T,2 port 1000 Base-SX,4*2 port 1000 Base-SX,14,-,ADP,coppe
45、r&PMC copper combo,4 port 10/100/1000 Base-T,4 port 1000 Base-T,12 port 1000 Base-T ADP,+,2*4 port 1000 Base-T,16,12,ADP,fiber&1 Gigabit,XMC,copper combo,4 port 10/100/1000 Base-T,4 port 1000 Base-T XMC,12 port 1000 Base-X SFP ADP,+,2*4 port 1000 Base-T XMC,16,12,ADP,fiber&10 GbE,XMC,fiber combo,4 p
46、ort 10/100/1000 Base-T,2 port,10G Base-F,XMC,3 port,10G Base-F,XFP ADP,+,2*2 port,10G Base-F,XMC,10,3,IP2455,For the large enterprise multi-core appliance with firewall,VPN,IPS,advanced networking,and acceleration&clustering software blades,Small form factor 2 RU system,Supports two ADP services mod
47、ules,1GbE and 10GbE,Base Configuration,4 ports of 10/100/1000Base-T;up to 32 maximum GbE ports,5 front-facing PMC/XMC expansion slots,Console port,Auxiliary ports(RJ45 and USB),Includes VPN accelerator card,Dual hot swappable AC or DC power(for load-sharing and redundancy),Dual front facing hot swap
48、pable HDDs,80 GB HDD(optional 2,nd,80GB HDD for RAID 1 disk mirroring),Dual quad core CPUs,RAM,Flash version:4 GB DRAM(max 8 GB),4GB compact flash,Disk version:4 GB DRAM(max 8 GB),128 MB compact flash,*,Need carrier card to support all PMC/XMC cards except ADP,IP2455 benefits,firewall,blade,VPN,blad
49、e,IPS,blade,advanced networking,blade,acceleration&clustering,blade,web security,blade,voice over IP,blade,built-in,optional,Dual quad core designed for multi-core acceleration,Leverages 2 high port density ADP services modules&XMC cards to significantly boost performance,Expandable design with PMC
50、slots for supporting optional network interface cards,10GbE&1GbE XMC cards,Optional hardware-based 10GbE&1GbE ADP services modules extend firewall and VPN performance,Includes hardware-based VPN acceleration to meet high VPN performance needs,Enhance business continuity-dual redundant,hot-swappable






