QUANTUM 3600 SECURITY GATEWAY

Quantum Security GatewayTM Advantage

Protect larger environments Greater resilience, faster operations Handle more workloads

Check Point Quantum 3600 Next Generation Firewalls enables enterprises to deploy the industry’s leading
threat prevention capabilities at all points of their infrastructure, scaling security almost infinitely according to
their changing business needs. It also dramatically accelerates the efficiency of their security operations. This
enables enterprises to prevent and block even the most advanced attacks, before they can disrupt business.

Strengthen your Always Protected Efficient

Perimeter Protection against Gen V Attacks Operations
Extend enterprise security to Highest caliber prevention Cut operation management
remote branch offices with unified security time by up to 80%

PERFORMANCE HIGHLIGHTS
Gen II Security Gen III Security Gen V Security
Firewall NGFW 1 Advanced Threat Prevention 2
3.3 Gbps 1.5 Gbps 780 Mbps
Performance measured with enterprise testing conditions. Additional performance details on page 3. 1: Includes Firewall, Application Control,
and IPS. 2: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection.

© 2022 Check Point Software Technologies Ltd. All rights reserved. [Protected] | March 11, 2022 1
SPOTLIGHT

3600 SECURITY GATEWAY

1 2 3 4 5

1. 5x 10/100/1000 Base-T ports 4. RJ45 console port

2. Management 10/100/1000 Base-T port 5. USB Type-C console port
3. 2x USB 3.0 ports 6. 2x connectors to external power supply adaptors

Prevent Known and Zero-day Threats

All-inclusive Security Solutions
Check Point SandBlast Threat Emulation
Check Point 3600 security gateways
is an evasion-resistant sandbox that
include all security technologies in the
provides zero-day protection from
SandBlast software package for one
advanced and unknown threats.
year. Purchase a renewal for NGFW,
SandBlast Threat Extraction (CDR)
NGTP or SandBlast (SNBT) for
ensures quick delivery of safe email and
subsequent years as you like.
web content to users.

Next Generation Firewall, Next Generation Threat Prevention and

SandBlast packages

Best-in-class Security Management

Zero Touch Provisioning
Unified management across networks
Zero Touch manages the initial gateway
and cloud environments increases
configuration, enabling you to deploy
operational efficiency and lowers the
hundreds or thousands of 3600 security
complexity of managing your security.
gateways remotely and eliminating the
One console can manage all aspects of
need to travel to each branch office.
security from policy to threat prevention.

ENTERPRISE-GRADE PLATFORM

1 GbE (copper) Memory Redundant Power

6 8 GB
optional accessory

© 2022 Check Point Software Technologies Ltd. All rights reserved. [Protected] | March 11, 2022 2
SPECIFICATIONS
Performance Network
Enterprise Test Conditions Network Connectivity
Threat Prevention Mbps) 1(
780 • Total physical and virtual (VLAN) interfaces per appliance:
NGFW (Gbps)
2
1.5 1024/4096 (single gateway/with virtual systems)

IPS (Gbps) 1.99 • 802.3ad passive and active link aggregation

Firewall (Gbps) 3.3 • Layer 2 (transparent) and Layer 3 (routing) mode

RFC 3511, 2544, 2647, 1242 Performance (Lab) High Availability

• Active/Active L2, Active/Passive L2 and L3
Firewall 1518B UDP (Gbps) 4
• Session failover for routing change, device and link failure
VPN AES-128 (Gbps) 2.71
Connections/sec 32,000 • ClusterXL or VRRP
Concurrent connections 2M IPv6
1: Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast • NAT66, NAT64, NAT46
Zero-Day Protection with logging enabled. 2: Includes Firewall, Application Control and IPS with
• CoreXL, SecureXL, HA with VRRPv3
logging enabled.
Unicast and Multicast Routing (see SK98226)
Additional Features • OSPFv2 and v3, BGP, RIP
Highlights • Static routes, Multicast routes

• 1x CPUs, 4 physical cores • Policy-based routing

• 1x 240 GB SSD storage • PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3

• 8 GB memory
Physical
• Virtual Systems (maximum): 5
Power Requirements

Content Security • Single Power Supply rating: 40W

First Time Prevention Capabilities • AC power input: 100 to 240V (50-60Hz)

• Power consumption avg/max: 21W/25W
• CPU-level, OS-level and static file analysis
• Maximum thermal output: 85 BTU/hr.
• File disarm and reconstruction via Threat Extraction
• Average emulation time for unknown files that require full Dimensions
sandbox evaluation is under 100 seconds • Enclosure: Desktop
• Maximal file size for Emulation is 100 MB • Dimensions (WxDxH): 8.3 x 8.3 x 1.65 in. (210 x 210 x 42mm)
• Emulation OS Support: Windows XP, 7, 8.1, 10 • Weight: 3.1 lbs. (1.4 kg)
Applications Environmental Conditions
• Use 8,500+ pre-defined or customize your own applications • Operating: 0° to 40°C, humidity 5 to 95%
• Accept, prevent, schedule, and apply traffic-shaping • Storage: –20° to 70°C, humidity 5 to 95%
Data Loss Prevention Certifications
• Classify 700+ pre-defined data types • Safety: UL, CB, CE, TUV GS
• End user and data owner incident handling • Emissions: FCC, CE, VCCI, RCM/C-Tick
Dynamic User-based Policy • Environmental: RoHS, WEEE, REACH , ISO14001
1 1

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid, . factory certificate
1

Terminal Servers and with 3 parties via a Web API

rd

• Enforce consistent policy for local and remote users on Windows,

macOS, Linux, Android and Apple iOS platforms

© 2022 Check Point Software Technologies Ltd. All rights reserved. [Protected] | March 11, 2022 3
ORDERING QUANTUM 3600 SECURITY GATEWAYS
BASE CONFIGURATION 1
SKU
3600 Security Gateway Configuration, includes 6x 1GbE copper ports, 8 GB RAM, 1 240 GB SSD, 1 CPAP-SG3600-SNBT
external AC power adaptor, SandBlast (SNBT) Security Subscription Package for 1 Year
The Base package includes 2 trial virtual systems (VS). These are not additive or counted when adding additional VS licenses.
1. Renewal NGFW, NGTP and SandBlast (SNBT) packages are available in the online product catalog.

SPARES AND MISCELLANEOUS SKU

Replacement/Additional Power Supply for 3600 and 3800 Security Gateways CPAC-PSU-3600/3800
Rack Mount kit for the 1500, 3600 and 3800 Security Gateways CPAC-1500/3600/3800-RM-DUAL

All-inclusive Security
SNBT
NGFW NGTP
(SandBlast)
Basic access control Prevent known threats Prevent known and zero-
plus IPS day attacks
Firewall   
VPN (IPsec)   
Application Control   
Content Awareness   
IPS   
URL Filtering  
Anti-Bot  
Anti-Virus  
Anti-Spam  
SandBlast Threat Emulation 
SandBlast Threat Extraction 
The first year purchase includes the SNBT package. Security subscription extensions, NGFW, NGTP and SNBT are available for
subsequent years.

CONTACT US EMAIL: info@checkpoint.com WEB: www.checkpoint.com

© 2022 Check Point Software Technologies Ltd. All rights reserved. [Protected] | March 11, 2022 4