Check Point 3100 Security Appliance
Branch and small office security in a compact form factor

Key Features:

All-inclusive Security Solutions

Check Point 3100 Appliances offer a complete and consolidated security solution available in two complete packages:

• NGTP: prevent sophisticated cyber-threats with IPS, Application Control, Antivirus, Anti-Bot, URL Filtering and Email Security.
• NGTX: NGTP with SandBlast Zero-Day Protection, which includes Threat Emulation and Threat Extraction.

Inspect Encrypted Connections

There is a shift towards more use of HTTPS, SSL and TLS encryption to increase Internet security. At the same time files delivered into the organization over SSL and TLS represent a stealthy attack vector that bypasses traditional security implementations. Check Point Threat Prevention looks inside encrypted SSL and TLS tunnels to detect threats, ensuring users remain in compliance with company policies while surfing the Internet and using corporate data.

Best-in-class Management

Every Check Point appliance can either be managed locally with its available integrated security management or via central unified management. Using local management, the appliance can manage itself and one adjacent appliance for high availability deployments. When centrally managed administrators can define security policy for the entire network - including internal security, main sites, and remote sites - from a single, centrally located Check Point Security Management server.

Prevent Known And Zero-day Threats

The 3100 Appliance protects organizations from both known and unknown threats with Antivirus, Anti-Bot, SandBlast Threat Emulation (sandboxing), and SandBlast Threat Extraction technologies.

As part of the Check Point SandBlast Zero-Day Protection solution, the cloud-based Threat Emulation engine detects malware at the exploit phase, even before hackers can apply evasion techniques attempting to bypass the sandbox. Files are quickly quarantined and inspected, running in a virtual sandbox to discover malicious behavior before it enters your network. This innovative solution combines cloud-based CPU-level inspection and OS-level sandboxing to prevent infection from the most dangerous exploits, and zero-day and targeted attacks.

Furthermore, SandBlast Threat Extraction removes exploitable content, including active content and embedded objects, reconstructs files to eliminate potential threats, and promptly delivers sanitized content to users to maintain business flow.

	NGTP	NGTX
	Prevent knownthreats	Prevent knownand zero-dayattacks
Firewall
VPN (IPSec)
IPS
Application Control
Anti-Bot
Anti-Virus
URL Filtering
SandBlast Threat Emulation
SandBlast Threat Extraction

Technical Specifications:

3100 Security Appliance

1. Management 10/100/1000Base - T RJ45 port
2. 5 x 10/100/1000Base - T RJ45 ports
3. 2x USB ports for ISO installation
4. RJ45/micro USB console port
5. Power connector

Appliance	3100
Production Performance (Real-World Traffic Blend) 1
SecurityPower	250
Firewall Throughput (Gbps)	2.1
IPS throughput (Mbps)	460
NGFW throughput (Mbps)	260
Threat prevention (Mbps)	140
Ideal Testing Conditions Performance (RFC 3511, 2544, 2647, 1242)
Firewall, 1518 byte UDP (Gbps)	4
Connections per Second (K)	48
Concurrent Connections (M)	3.2
VPN AES-128 Throughput (Gbps)	2.25
IPS throughput (Gbps)	1.44
NGFW throughput (Gbps)	1.15
10/100/1000Base-T Ports	6x 10/100/1000Base-T RJ-45
Memory	8 GB
Storage	1x 320 GB
Dimensions
Enclosure	Desktop
Dimensions (standard wxdxh)	8.28 x 8.27 x 1.65 in.
Dimensions (metric wxdxh)	210.3 x 210 x 41.9 mm
Weight	1.3 kg (2.9 lbs.)
Environment
Operating Environment	0°C - 40°C at 5 - 95% relative humidity
Non-Operating Environment	(-20)°C - 70°C at 5 - 95% relative humidity
Power
Power Input	90 - 264VAC (47-63HZ)
Single Power Supply Rating	40W
Power Consumption (Max)	29.5W
Certifications
Safety	UL60950-1, CB IEC60950-1, CE LVD EN60950-1, TUV GS
Emissions	CE, FCC, VCCI, RCM/C-Tick
Environmental	RoHS II, *REACH, *ISO14001

¹ assumes maximum production throughput with real-world traffic blend, a typical rule-base size, NAT and logging enabled and the most secure threat prevention protection

Software Blade	NGTP	NGTX
Firewall
Identity Awareness
IPSec VPN
Advanced Networking & Clustering
Mobile Access 1
IPS
Application Control
URL Filtering
Antivirus
Anti-Bot
Anti-Spam & Email Security
Threat Extraction	*
Threat Emulation	*
DLP	*	*
Management Blades
Network Policy Management
Logging and Status
SmartEvent	*	*
SmartWorkflow	*	*
Monitoring	*	*
Management Portal	*	*
User Directory	*	*
SmartProvisioning	*	*
SmartReporter	*	*
Endpoint Policy Management	*	*
Compliance	*	*
NGTP = Next Generation Threat Prevention; NGTX = SandBlast Threat Prevention; - Included * - Optional 1 Five users are included in default package

Documentation:

Download the Check Point 3100 Appliance Datasheet (PDF).