Check Point alexandrcheckpoint com Check Point Software Technologies

  • Slides: 48
Download presentation
Новая линейка программно -аппаратных комплексов Check Point Алексей Андрияшин alexandr@checkpoint. com Консультант по безопасности

Новая линейка программно -аппаратных комплексов Check Point Алексей Андрияшин alexandr@checkpoint. com Консультант по безопасности Check Point Software Technologies © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved

Представляет Новые SECURITY GATEWAY APPLIANCES © 2011 Check Point Software Technologies Ltd. [PROTECTED] —

Представляет Новые SECURITY GATEWAY APPLIANCES © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 2 2

Новые ПАК от Check Point Консолидированная безопасность SECURITY PERFORMANCE SCALABILITY Оптимизированы для Software Blades

Новые ПАК от Check Point Консолидированная безопасность SECURITY PERFORMANCE SCALABILITY Оптимизированы для Software Blades Увеличенное быстродействие Для любых задач и окружения © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 3 3

8 новых моделей Для небольшого офиса § 3 Gbps firewall throughput § Менее $4,

8 новых моделей Для небольшого офиса § 3 Gbps firewall throughput § Менее $4, 000 Check Point 2200 Для предприятия § 3 to 11 Gbps firewall throughput § 2 to 6 Gbps IPS throughput Check Point 4000 (3 модели) Check Point 12000 Appliances (3 моделя) Check Point 21400 Для дата-центров § 15 to 30 Gbps firewall throughput § Горячая замена БП и HDD Для дата-центров § 50 to 100 Gbps firewall throughput* § Высокая доступность § Дополнительная карта акселерации * With optional acceleration card (available 2012) © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 4 4

4000 & 12000 интерфейсные карты Широкий выбор линейных карт: 4 x 1000 Base. T

4000 & 12000 интерфейсные карты Широкий выбор линейных карт: 4 x 1000 Base. T (все модели) 4 x Fiber Optic (все модели) 2 x 10 GBase. F (4800 и выше) 8 x 1000 Base. T (4800 и выше) 4 x 10 GBase. F (12200 и выше) © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 7 7

21400 интерфейсные карты Ports Type 12 10/1000 Base. T Включена в стандартную поставку 12

21400 интерфейсные карты Ports Type 12 10/1000 Base. T Включена в стандартную поставку 12 1 G SFP – without Transceivers Поддерживаемые SFP: 10 G SFP – without Transceivers Поддерживаемые SFP: 4 Photo Notes 1 G SX (MMF): CPAC-TR-1 SX-21000 1 G LX (SMF): CPAC-TR-1 LX-21000 1 G Copper: CPAC-TR-1 T-21000 10 G SR (MMF): CPAC-TR-10 SR-21000 10 G LR (SMF): CPAC-TR-10 LR-21000 © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 9 9

Новые ПАК от Check Point SECURITY PERFORMANCE SCALABILITY Консолидированная безопасность Оптимизированы для Software Blades

Новые ПАК от Check Point SECURITY PERFORMANCE SCALABILITY Консолидированная безопасность Оптимизированы для Software Blades Увеличенное быстродействие Для любых задач и окружения © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 12 12

Текущая линейка и Security. Power IP Series Power-1 1006 SPU UTM-1 596 SPU 670

Текущая линейка и Security. Power IP Series Power-1 1006 SPU UTM-1 596 SPU 670 SPU 298 SPU Po we 907 r-1 0 280 Po we 507 r-1 0 IP 1 UT M-1 30 70 70 20 M-1 UT 1 5 70 MUT M- 1 2 70 50 SPU UT UT M- 1 1 30 50 SPU 101 SPU © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 13 13

Новые шлюзы и Security. Power 1861 SPU Рост производительности в 3 раза! 2012 Models

Новые шлюзы и Security. Power 1861 SPU Рост производительности в 3 раза! 2012 Models 12000 1046 SPU 4000 2200 623 SPU 670 SPU 596 SPU 298 SPU 00 126 Po we 907 r-1 0 280 IP 1 00 124 Po we 507 r-1 0 00 122 70 M-1 30 0 UT 480 M-1 20 70 101 SPU UT 0 460 0 1 5 70 MUT 420 70 1 2 0 220 MUT UT M- 1 1 30 50 114 50 SPU SPU 101 SPU 114 SPU 374 SPU 738 SPU 1006 SPU © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 14 14

Производительность межсетевого экрана Производительно выше в 3 раза! 60 - Gbps X 3. 0

Производительность межсетевого экрана Производительно выше в 3 раза! 60 - Gbps X 3. 0 40 - 20 - Power-1 11000 10 - X 2. 9 12600 Appliance 3 - 20 - 80 - IP 1280 6 - X 3. 6 UTM-1 570 Gbps 9 - 4600 Appliance 30 - * 21400 Appliance 100 - * Available in 2012 © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 15 15

321 - x 3 UTM-1 3070 Million Connection Capacity Более 3. 5 миллиона одновременных

321 - x 3 UTM-1 3070 Million Connection Capacity Более 3. 5 миллиона одновременных соединений* 12200 Appliance Большее количество соединений… 0 - 300 - x 3 200100 - Power-1 11000 До 300 тысяч новых соединений в секунду Conn/Sec (k) Session Rate 21400 Appliance* * Running 64 -bit OS (available 2012) 0* With acceleration card (Available 2012) © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 16 16

The New Gateway Appliances from Check Point SECURITY PERFORMANCE SCALABILITY Консолидированная безопасность Оптимизированы для

The New Gateway Appliances from Check Point SECURITY PERFORMANCE SCALABILITY Консолидированная безопасность Оптимизированы для Software Blades Увеличенное быстродействие Для любых задач и окружения © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 17 17

Check Point 2200 Branch and Small Office Desktop Solution UTM-1 130 Price $3600 $3500

Check Point 2200 Branch and Small Office Desktop Solution UTM-1 130 Price $3600 $3500 114 50 Firewall throughput 3 Gbps 1. 5 Gbps IPS throughput 2 Gbps 1. 2 M 0. 6 M 6 5 250 GB 80 GB Security. Power Max sessions Max ports Storage 2200 Focus Points § § Leading price / performance in an enterprise-grade desktop model 3 x more disk space for more local logging history 2200 4600 4800 12200 12400 12600 21400 © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 19 19

Check Point 4200 Entry-Level Enterprise Grade with Copper and Fiber UTM-1 270 Price $4900

Check Point 4200 Entry-Level Enterprise Grade with Copper and Fiber UTM-1 270 Price $4900 $4800 114 50 Firewall throughput 3 Gbps 1. 5 Gbps IPS throughput 2 Gbps 1. 2 M 0. 6 M 8 4 250 GB 160 GB Security. Power Max sessions Max ports Storage 4200 Focus Points § § Entry-level enterprise-grade with copper and fiber connectivity options 2 x more ports than predecessor model 2200 4600 4800 12200 12400 12600 21400 © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 20 20

Check Point 4600 Enterprise Grade with Fast Networking UTM-1 570 IP 290 $11000 $9000

Check Point 4600 Enterprise Grade with Fast Networking UTM-1 570 IP 290 $11000 $9000 $12000 374 101 113 Firewall throughput 9 Gbps 2. 5 Gbps 1. 5 Gbps IPS throughput 4 Gbps 1. 7 Gbps 1 Gbps Max sessions 1. 2 M 0. 65 M 0. 6 M Max ports 4+8 6 4+4 250 GB 160 GB 40 GB Price Security. Power Storage 4600 Focus Points § § Enterprise-grade with superior network performance Performance improved by 4 x 2200 4600 4800 12200 12400 12600 21400 © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 21 21

 Point 4800 Check Enterprise Grade with Great Multi-Blade Performance UTM-1 1070 UTM-1 2070

Point 4800 Check Enterprise Grade with Great Multi-Blade Performance UTM-1 1070 UTM-1 2070 IP 390 $21, 000 $15, 900 $20, 000 623 101 116 Firewall throughput 11 Gbps 3. 5 Gbps 3 Gbps IPS throughput 6 Gbps 2. 2 Gbps 2. 7 Gbps 2. 9 Gbps Max sessions 3. 5* M 0. 65 M 1. 1 M 8+8 6 8 5+7 250 GB 160 GB 80 GB Price Security. Power Max ports Storage 4800 Focus Points § § * Available with software upgrade in 2012 Great Security. Power for Software Blade performance Expansion for 10 Gb. E fiber SFP+ in a 1 U appliance 2200 4600 4800 12200 12400 12600 21400 © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 22 22

Check Point 12200 Datacenter Grade, 1 U with Optional Redundancy UTM-1 3070 IP 560

Check Point 12200 Datacenter Grade, 1 U with Optional Redundancy UTM-1 3070 IP 560 $29, 000 $27, 900 $28, 900 738 298 116 Firewall throughput 15 Gbps 4. 5 Gbps 6. 3 Gbps IPS throughput 8 Gbps 4 Gbps 2. 9 Gbps Max sessions 3. 5* M 1. 1 M 8+8 10 5+9 500 + 500 GB 160 GB 80 GB Price Security. Power Max ports Storage 12200 Focus Points § § * Available with software upgrade in 2012 System redundancy (power supply and hard drive) in a 1 U appliance Triple-connection capacity 2200 4600 4800 12200 12400 12600 21400 © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 23 23

Check Point 12400 Datacenter Grade for Fast Networking Performance Power-1 5070 IP 690 $45,

Check Point 12400 Datacenter Grade for Fast Networking Performance Power-1 5070 IP 690 $45, 000 $41, 900 1046 596 268 Firewall throughput 25 Gbps 9 Gbps 7. 2/11. 7* Gbps IPS throughput 12 Gbps 7. 5 Gbps 4 Gbps Max sessions 3. 5* M 1. 2 M 1 M Max ports 10+16 10+4 4+12 500 + 500 GB 160 GB 80 GB Price Security. Power Storage 12400 Focus Points § § * Available with software upgrade in 2012 High firewall throughput , 2– 3 x more than predecessor Double the port density 2200 4600 4800 12200 12400 12600 21400 © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 24 24

Check Point 12600 Datacenter Grade for Superior Multi-Blade Performance Power-1 9070 IP 1280 $59,

Check Point 12600 Datacenter Grade for Superior Multi-Blade Performance Power-1 9070 IP 1280 $59, 000 $55, 500 $56, 000 1861 1006 670 Firewall throughput 30 Gbps 16 Gbps 10. 3/17. 5** Gbps IPS throughput 17 Gbps 10 Gbps 7 Gbps Max sessions 3. 5* M 1. 2 M 1 M Max ports 14+12 14+4 5+27 2 x 500 GB 2 x 160 GB 80 GB Price Security. Power Storage 12600 Focus Points * Available with software upgrade in 2012 § § ** with optional ADP card Superior Security. Power for Software Blade performance High connection capacity 2200 4600 4800 12200 12400 12600 21400 © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 25 25

Check Point 21400 Datacenter-Grade Security with Acceleration Option Power-1 11000 IP 2450 $115, 000

Check Point 21400 Datacenter-Grade Security with Acceleration Option Power-1 11000 IP 2450 $115, 000 $64, 000 -$99, 000 $79, 000 2900* 1222 1112 50/100* Gbps 15 -30 Gbps 11/30*** Gbps 21 Gbps 10 -15 Gbps 9 Gbps Max sessions 10** M 1. 2 M 1 M Max ports 13+24 14+4 5+27 2 x 500 GB 2 x 250 GB YES NO YES Price Security. Power Firewall throughput IPS throughput Storage Acceleration card 21400 Focus Points § § Integrated hot-swap system redundancy and high port density * Performance with Acceleration Card ** Available with software upgrade in 2012 *** With optional ADP card Acceleration options for low latency and high throughput 2200 4600 4800 12200 12400 12600 21400 © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 26 26

Новые VSX ПАК Больше консолидации С новыми VSX ПАК 12200 VSX Appliance До 250

Новые VSX ПАК Больше консолидации С новыми VSX ПАК 12200 VSX Appliance До 250 виртуальных шлюзов безопасности на одном устройстве 12400 VSX Appliance Firewall, VPN, IPS and URL filtering 12600 VSX Appliance До 37 портов на устройстве 21400 VSX Appliance © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 27 27

Expansion Accessories 4200 4600 4800 12200 12400 12600 21400 Base 1 x. Gb. E

Expansion Accessories 4200 4600 4800 12200 12400 12600 21400 Base 1 x. Gb. E copper 4 8 8 8 10 14 14 Expansion slots 1 1 3 3 3 2 x 1 Gb. E Fiber √ √ √ 4 x 1 Gb. E copper √ √ √ 4 x 1 Gb. E fiber √ √ √ √ √ 8 x 1 Gb. E copper 12 x 1 Gb. E copper √ 12 x 1 Gb. E fiber √ 2 x 10 Gb. E fiber √ √ √ 1+1 1+1 2 2 2 √ √ √ √ 4 x 10 Gb. E fiber LOM √ Hard Drive Power supply Slide Rails Memory Upgrade √ √ √ * Short & long range transceivers are supported for all SFP and SFP+ interfaces © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 28 28

Но это ещё не все… © 2011 Check Point Software Technologies Ltd. [PROTECTED] —

Но это ещё не все… © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 30 30

61000 System Security. Power 14, 600 SPU 61000 2900* SPU 21000 21400 61000 00

61000 System Security. Power 14, 600 SPU 61000 2900* SPU 21000 21400 61000 00 11 we r-1 1222 SPU Po 50 24 IP r-1 70 we 90 Po 12 80 670 SPU IP r-1 70 we 50 Po 0 298 SPU 07 69 0 268 SPU UT M 13 IP 56 0 0 07 12 MUT UT M 12 70 50 SPU 116 SPU IP 101 SPU 596 SPU 1006 SPU 1112 SPU * With acceleration card © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 35 35

Больше Security. Power в одном шасси UTM-1 270 61000 x 288 © 2011 Check

Больше Security. Power в одном шасси UTM-1 270 61000 x 288 © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 36 36

Больше Security. Power в одном шасси Power-1 11000 61000 x 12 © 2011 Check

Больше Security. Power в одном шасси Power-1 11000 61000 x 12 © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 37 37

Security. Power на будущее Security. Power Requirements Appliance Capacity 6 Security Gateway Modules Firewall

Security. Power на будущее Security. Power Requirements Appliance Capacity 6 Security Gateway Modules Firewall 8, 8 IPS 00 20 / 50 Gbps IPS SP U (50 Gbps default IPS performance, 20 with recommended profile) Firewall IPS 40 / 85 Gbps IPS New World Record 12 Security Gateway Modules 14 , 6 00 SP U (85 Gbps default IPS performance, 40 with recommended profile) © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 38 38

Компоненты 61000 1. Chassis § § 19 -inch rack-mount shelf chassis (14 U+1 U)

Компоненты 61000 1. Chassis § § 19 -inch rack-mount shelf chassis (14 U+1 U) Single or dual (redundant high availability) Designed for NEBS 1 (up to 2) redundant CMM unit © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 39 39

Компоненты 61000 2. SSMs—SSM 60/SSM 160 § Up to 2 SSM Modules – SSM

Компоненты 61000 2. SSMs—SSM 60/SSM 160 § Up to 2 SSM Modules – SSM 60—up to 60 Gb. E uplink ► Uplink § ► Management § – 6 x 10 Gb. E XFP 2 x 10 Gb. E XFP; 2 x 1 Gb. E SFP SSM 160*—up to 160 Gb. E uplink ► Uplink § § 8 x 10 Gb. E SFP+; 2 x 40 Gb. E QSFP/8 x 10 Gb. E SFP+ Management § 2 x 10 Gb. E SFP+; 2 x 1 Gb. E SFP © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 40 40

SSM 160 ADMIN 2 x 40 Gb. E ports (QSFP) 8 x 10 Gb.

SSM 160 ADMIN 2 x 40 Gb. E ports (QSFP) 8 x 10 Gb. E ports (SFP+) 150 Gbps throughput 1 -2 per chassis 8 -16 10 Gb. E ports Management and Log dedicated ports © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 41 41

Компоненты 61000 3. § § § SGM 220/T 12 C (NEBS, NON-NEBS) 12 GB

Компоненты 61000 3. § § § SGM 220/T 12 C (NEBS, NON-NEBS) 12 GB (upgradable to 24 GB) Connectivity Ø 2 * 10 G interfaces for traffic Ø 2 * 1 G for management Up to 12 Security Gateway Modules Seamless redundancy between SGMs Performance – – – 1660 Security. Power 18 Gbps throughput 60 K connections per second 5/12 G IPS REC/DFS 3. 5/7 M connections © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 42 42

Компоненты 61000 4. Redundant Fans § 6 fans Power Supplies § § 2 DC

Компоненты 61000 4. Redundant Fans § 6 fans Power Supplies § § 2 DC or 5 AC Redundant power supplies © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved. | 43 43

Спасибо! Алексей Андрияшин alexandr@checkpoint. com Консультант по безопасности Check Point Software Technologies © 2011

Спасибо! Алексей Андрияшин alexandr@checkpoint. com Консультант по безопасности Check Point Software Technologies © 2011 Check Point Software Technologies Ltd. [PROTECTED] — All rights reserved