Check Point has sights set on 1Tbps firewall

Check Point Software has new, heavy-duty security gateway hardware for data centers and service providers, including one chassis that will grow to support a 1Tbps firewall.

The new device, called Check Point 61000, is available now, and fully loaded the 14-slot chassis achieves 200Gbps firewall throughput, with that number growing to 400Gbps next year with new blades and eventually to 1Tbps with yet another generation of blades, the company says. Pricing starts at $195,000.

BLACK HAT: Roundup of the most shocking new hacks at the conference

A second device that is designed for data centers -- Check Point 21400 -- is smaller, but still larger than the company's current largest security platform. Also available now, the 21400 supports 50Gbps firewall throughput that can be doubled by adding an acceleration card, the company says. Pricing starts at $115,000.

Measuring security power units

Check Point is also introducing a new way of measuring the performance of its devices with the intent of making it simpler for customers to figure out what hardware best fits their needs. Using a metric called Security Power Units (SPU), customers can match their needs to Check Point products.

An SPU is a representation of the security functions a device can support and the size of the network connection the device has. So a customer that wants to run a firewall, IPS, URL filtering and application control on a device that is connected to an 800Mbps network would need a device with an SPU rating of 1,170, the company says.

If the customer wanted to run just IPS and application control on a 500Mbps connection, the device would need a 290 SPU rating.

Check Point provides a calculator for customers to figure out their SPU needs. They can also use the calculator to estimate future needs, so they can buy devices with enough headroom to meet projected demand, the company says.

Check Point is rolling out a new version of its modular security software platform that runs on its appliances as well as off-the-shelf hardware. New with the R75.20 release is URL filtering that can block Web applications that aren't URL-based, such as Skype. Policies for this type of Web application and for URLs are controlled from one dashboard.

The URL filtering draws on a cloud-based database of sites that can be downloaded to update individual customer security gateways. Users can override URL blocking by checking a box that says the site is needed for a work-related activity and what that reason is. That information can be used to monitor activities and help decide whether filtering policies need to be changed, the company says.

R75.20 software adds a proxy that terminates SSL sessions so the traffic can be run through security filters. Customers can configure exceptions so, for instance, employees may carry on SSL transactions with their banks without it being decrypted by the gateway.

The software extends the capabilities of its data-loss protection software blade to internal email. So it could prevent sensitive financial data from being sent to anyone outside the finance department of the company. The new capability works with Outlook and Active Directory. Before the DLP blade could apply filters only to email traveling in and out of the corporate network.

Read more about wide area network in Network World's Wide Area Network section.

Join the CSO newsletter!

Error: Please check your email address.

Tags security

More about Check Point Software TechnologiesCheck Point Software TechnologiesDLPIPSLANLPSkype

Show Comments

Featured Whitepapers

Editor's Recommendations

Solution Centres

Stories by Tim Greene

Latest Videos

  • 150x50

    CSO Webinar: The Human Factor - Your people are your biggest security weakness

    ​Speakers: David Lacey, Researcher and former CISO Royal Mail David Turner - Global Risk Management Expert Mark Guntrip - Group Manager, Email Protection, Proofpoint

    Play Video

  • 150x50

    CSO Webinar: Current ransomware defences are failing – but machine learning can drive a more proactive solution

    Speakers • Ty Miller, Director, Threat Intelligence • Mark Gregory, Leader, Network Engineering Research Group, RMIT • Jeff Lanza, Retired FBI Agent (USA) • Andy Solterbeck, VP Asia Pacific, Cylance • David Braue, CSO MC/Moderator What to expect: ​Hear from industry experts on the local and global ransomware threat landscape. Explore a new approach to dealing with ransomware using machine-learning techniques and by thinking about the problem in a fundamentally different way. Apply techniques for gathering insight into ransomware behaviour and find out what elements must go into a truly effective ransomware defence. Get a first-hand look at how ransomware actually works in practice, and how machine-learning techniques can pick up on its activities long before your employees do.

    Play Video

  • 150x50

    CSO Webinar: Get real about metadata to avoid a false sense of security

    Speakers: • Anthony Caruana – CSO MC and moderator • Ian Farquhar, Worldwide Virtual Security Team Lead, Gigamon • John Lindsay, Former CTO, iiNet • Skeeve Stevens, Futurist, Future Sumo • David Vaile - Vice chair of APF, Co-Convenor of the Cyberspace Law And Policy Community, UNSW Law Faculty This webinar covers: - A 101 on metadata - what it is and how to use it - Insight into a typical attack, what happens and what we would find when looking into the metadata - How to collect metadata, use this to detect attacks and get greater insight into how you can use this to protect your organisation - Learn how much raw data and metadata to retain and how long for - Get a reality check on how you're using your metadata and if this is enough to secure your organisation

    Play Video

  • 150x50

    CSO Webinar: How banking trojans work and how you can stop them

    CSO Webinar: How banking trojans work and how you can stop them Featuring: • John Baird, Director of Global Technology Production, Deutsche Bank • Samantha Macleod, GM Cyber Security, ME Bank • Sherrod DeGrippo, Director of Emerging Threats, Proofpoint (USA)

    Play Video

  • 150x50

    IDG Live Webinar:The right collaboration strategy will help your business take flight

    Speakers - Mike Harris, Engineering Services Manager, Jetstar - Christopher Johnson, IT Director APAC, 20th Century Fox - Brent Maxwell, Director of Information Systems, THE ICONIC - IDG MC/Moderator Anthony Caruana

    Play Video

More videos

Blog Posts