Quantum 6600 Security Gateway | DATASHEET

QUANTUM 6600 SECURITY GATEWAY

Quantum Security GatewayTM Advantage

Protect larger environments Greater resilience, faster operations Handle more workloads

Check Point Quantum 6600 Next Generation Firewalls enables enterprises to deploy the industry’s leading
threat prevention capabilities at all points of their infrastructure, scaling security almost infinitely according to
their changing business needs. It also dramatically accelerates the efficiency of their security operations. This
enables enterprises to prevent and block even the most advanced attacks, before they can disrupt business.

Always Protected Security at Efficient

against Gen V Attacks Hyperscale Operations
Highest caliber prevention On-demand expansion Cut operation management
with unified security with hyperscalability time by up to 80%

PERFORMANCE HIGHLIGHTS
Gen II Security Gen III Security Gen V Security
Firewall NGFW 1 Threat Prevention + SandBlast2
18 Gbps 6.2 Gbps 3.7 Gbps
Performance measured with enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control,
and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content December 8, 2020 1
 Quantum 6600 Security Gateway | DATASHEET

SPOTLIGHT
6600 SECURITY GATEWAY 1 2

3 4 5 6 7

1. Sync 10/100/1000 Base-T port 6. 2x USB 3.0 ports

2. RJ45 console port 7. Lights-out Management port
3. 1 network expansion slot 8. USB Type-C console port
4. 8x 10/100/1000 Base-T ports 9. Redundant hot-swap power supplies
5. Management 10/100/1000 Base-T port

All-inclusive Security Solutions

Prevent Known and Zero-day Threats
Check Point 6600 security gateways
Check Point SandBlast Network is an
include all security technologies
evasion-resistant sandbox that provides
including the SandBlast (sandboxing)
zero-day protection from advanced and
software package for one year.
unknown threats. SandBlast Threat
Purchase a renewal for NGFW, NGTP or
Extraction (CDR) ensures quick delivery
SandBlast (SNBT) for subsequent years
of safe email and web content to users.
as you like.

Next Generation Firewall, Next Generation Threat Prevention and

Threat Prevention + SandBlast packages

High Performance Options

Remote Management and Monitoring
Purchase the affordable Plus package
A Lights-Out-Management (LOM) card
and get a base system plus 4x 10GbE
provides out-of-band management to
SFP+ ports with transceivers, 2x AC
remotely diagnose, start, restart and
power supplies, Lights-out Management
manage the appliance from a remote
and 16 GB of memory for high
location.
connection capacity.

ENTERPRISE-GRADE PLATFORM

Redundant
1 GbE (copper) 1 GbE (fiber) 10 GbE Memory LOM
Power
Base model 10 0 0 8 GB
Plus model 10 0 4 16 GB
Max capacity 18 4 4 32 GB
optional accessory

© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content December 8, 2020 2
 Quantum 6600 Security Gateway | DATASHEET

SPECIFICATIONS
Performance Content Security (continued)
Enterprise Test Conditions Dynamic User-based Policy
Threat Prevention Gbps) 1(
3.7 • Integrates with Microsoft AD, LDAP, RADIUS, Cisco
2
NGFW (Gbps) 6.2 pxGrid, Terminal Servers and with 3rd parties via a Web
API
IPS (Gbps) 10.14
• Enforce consistent policy for local and remote users on
Firewall (Gbps) 18
Windows, macOS, Linux, Android and Apple iOS platforms
RFC 3511, 2544, 2647, 1242 PERFORMANCE (LAB)
Firewall 1518B UDP (Gbps) 32 Network
VPN AES-128 (Gbps) 4.9 Network Connectivity
Connections/sec 116,000 • Total physical and virtual (VLAN) interfaces per appliance:
Concurrent connections3 2/4/8M 1024/4096 (single gateway/with virtual systems)
1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast • 802.3ad passive and active link aggregation
Zero-Day Protection with logging enabled. 2: Includes Firewall, Application Control and IPS with • Layer 2 (transparent) and Layer 3 (routing) mode
logging enabled. 3: Performance measured with default/Plus/maximum memory. High Availability
• Active/Active L2, Active/Passive L2 and L3
Additional Features • Session failover for routing change, device and link failure
Highlights • ClusterXL or VRRP
• 1x CPUs, 6x physical cores IPv6
• 1x 240 GB SSD storage
• NAT66, NAT64, NAT46
• 1 AC or DC power supply (2x in Plus)
• CoreXL, SecureXL, HA with VRRPv3
• 8, 16 and 32 GB memory options
Unicast and Multicast Routing (see SK98226)
• Lights-Out-Management (included in Plus)
• OSPFv2 and v3, BGP, RIP
• Virtual Systems (Base/Plus/max mem): 10/20/20
• Static routes, Multicast routes
Network Expansion Slot Options (1 of 1 slots open)
• Policy-based routing
• 8x 10/100/1000Base-T RJ45 port card, up to 18 ports
• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3
• 4x 1000Base-F SFP port card, up to 4 ports
• 4x 10GBase-F SFP+ port card, up to 4 ports
Physical
Power Requirements
Content Security
• Single Power Supply rating: 300W
First Time Prevention Capabilities
• AC power input: 100 to 240V (47-63Hz)
• CPU-level, OS-level and static file analysis • Power consumption avg/max: 84W/122W
• File disarm and reconstruction via Threat Extraction • Maximum thermal output: 416 BTU/hr.
• Average emulation time for unknown files that require full
Dimensions
sandbox evaluation is under 100 seconds
• Enclosure: 1RU
• Maximal file size for Emulation is 100 MB
• Dimensions (WxDxH): 17.2 x 20 x 1.73 in.(438 x 508 x
• Emulation OS Support: Windows XP, 7, 8.1, 10
44mm)
Applications
• Weight (Base/Plus): 16.5/17.4 lbs. (7.5/7.9 kg)
• Use 8,000+ pre-defined or customize your own Environmental Conditions
applications
• Operating: 0° to 40°C, humidity 5 to 95%
• Accept, prevent, schedule, and apply traffic-shaping
• Storage: –20° to 70°C, humidity 5 to 95%
Data Loss Prevention
Certifications
• Classify 700+ pre-defined data types
• Safety: UL, CB, CE, TUV GS
• End user and data owner incident handling
• Emissions: FCC, CE, VCCI, RCM/C-Tick
• Environmental: RoHS, WEEE, REACH1, ISO140011
1. factory certificate

© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content December 8, 2020 3
 Quantum 6600 Security Gateway | DATASHEET

ORDERING QUANTUM 6600 SECURITY GATEWAYS

BASE CONFIGURATION 1 SKU
6600 Security Gateway Base Configuration, includes 10x 1GbE copper ports, 8 GB RAM, 1 SSD, 1 AC PSU, CPAP-SG6600-SNBT
telescopic rails, SandBlast (SNBT) Security Subscription Package for 1 Year.
6600 Security Gateway Plus Configuration, includes 10x 1GbE copper ports, 4x 10GbE SFP+ ports, 4x SFP+ CPAP-SG6600-PLUS-SNBT
SR transceivers, 16 GB RAM, 1 SSD, 2x AC PSU, Lights-out Management, telescopic rails, SandBlast
(SNBT) Security Subscription Package for 1 Year.
The Base and Plus packages include 2 VS; VS0 and VS1. VS1 is counted when adding additional VS licenses.
1 Renewal NGFW, NGTP and SandBlast (SNBT) packages are available in the online product catalog.

Accessories
INTERFACE CARDS AND TRANSCEIVERS
8 Port 10/100/1000 Base-T RJ45 interface card CPAC-8-1C-C
4 Port 1000Base-F SFP interface card; requires additional 1000Base SFP transceivers CPAC-4-1F-C
SFP transceiver module for 1G fiber ports - long range (1000Base-LX) CPAC-TR-1LX-C
SFP transceiver module for 1G fiber ports - short range (1000Base-SX) CPAC-TR-1SX-C
SFP transceiver to 1000 Base-T RJ45 (Copper) CPAC-TR-1T-C
4 Port 10GBase-F SFP+ interface card CPAC-4-10F-C
SFP+ transceiver module for 10G fiber ports - long range (10GBase-LR) CPAC-TR-10LR-C
SFP+ transceiver module for 10G fiber ports - short range (10GBase-SR) CPAC-TR-10SR-C
SFP+ transceiver 10GBASE-T RJ45 (Copper) - for links up to 30m over CAT6a/CAT7 CPAC-TR-10T-C
4 Port 1GE copper Bypass (Fail-Open) Network interface card (10/100/1000 Base-T) CPAC-4-1C-BP-C
2 Port 10GE Short-range Fiber Bypass (Fail-Open) Network interface card (10GBase-SR) CPAC-2-10FSR-BP-C

MEMORY SKU
Memory upgrade kit from 8GB to 16GB for 6600 appliance CPAC-RAM8GB-6600
Memory upgrade kit from 8GB to 32GB for 6600 appliance CPAC-RAM24GB-6600
Memory upgrade kit from 16GB to 32GB for 6600 appliance CPAC-RAM16GB-6600

SPARES AND MISCELLANEOUS SKU

Additional/Replacement AC Power Supply for 6600, 6700, 6900 appliances CPAC-PSU-AC-
6600/6700/6900
Additional/Replacement DC Power Supply for 6600, 6700, 6900 appliances CPAC-PSU-DC-
6600/6700/6900
Lights Out Management module CPAC-LOM-C
Slide rails for 6000 and 7000 Security Appliances (22” - 32”) CPAC-RAILS-6000/7000
Extended slide rails for 6000 and 7000 Security Appliances (24” - 36”) CPAC-RAILS-EXT-
6000/7000

CONTACT US EMAIL: [email protected] WEB: WWW.CHECKPOINT.COM

© 2020 Check Point Software Technologies Ltd. All rights reserved. [Protected] Non-confidential content December 8, 2020 4