Check Point Quantum Lightspeed Next Generation Firewalls redefine security price performance - enabling enterprises to deploy network security that performs at the speed of business to accelerate large file transfers and provide low latency for high frequency applications.

Secure Hi-speed Data Transfers

650 Gbps line-rate in a single firewall

Protect Hi-frequency Trading Apps

3µSec ultra low latency

Resilient Data Center Security

Eliminate failure with a robust clustering technology

Low Latency, High Throughput Firewall

Quantum QLS650 firewalls are equipped with three NVIDIA ConnectX network interface cards (NIC), each with 2x 100G QSFP28 ports. NVIDIA ConnectX NICs offload network processing from the host CPUs, providing substantial performance gains of up to 600 Gbps for trusted firewall traffic. In addition, firewall latency is significantly reduced to a low 3µSec at nearly line rate ensuring access to data and higher throughput with minimal delay.

All-inclusive Security

Check Point QLS650 firewalls include the Check Point stateful inspection firewall and are also available in all-inclusive security packages such as NGFW (Application Control with IPS), NGTP (NGFW with URL filtering, antivirus and anti-bot) or SandBlast (NGTP with sandboxing and Threat Extraction, a Content Disarm & Reconstruction technology).

Resilient Security

Modern organizations need robust cyber security to protect their critical systems. High Availability (HA) firewall clusters are designed to minimize downtime for critical systems using redundant systems. If an organization wants to implement a simple HA firewall cluster with up to 5 nodes, this can be accomplished using Check Point's built-in HA and load sharing functionality: ClusterXL.

Check Point ClusterXL is a software-based clustering solution for firewall redundancy and load sharing which uses state synchronization to keep active connections alive and prevent data loss if a cluster member fails. This ensures critical systems are always connected and secure. In addition, each QLS650 has redundancy built-in with two SSD drives in a RAID1 array and hot-swappable redundant power supplies, ensuring continuity when one component fails.

Remote Management and Monitoring

A Lights-Out-Management (LOM) card provides out-of-band remote management to remotely diagnose, start, restart and manage the appliance from a remote location. Also use LOM for remote installs of the GAiA OS.

More is demanded of today's network devices. There are simply more connected devices. Apps and connected applications are more content-heavy. For instance, workloads and data sets move from on-premises data centers to the cloud and back again, encapsulated in VXLAN, GRE and VPN packets. Furthermore, some apps require pure speed. For High Frequency Trading apps, profit or loss is determined by nanosecond differences in network latency. Check Point Quantum Lightspeed firewalls deliver on these demands for high throughput with low latency by securely offloading network processing to NVIDIA ConnectX NICs.

NVIDIA ConnectX

The eight single-width slots in the QLS650 support three NVIDIA ConnectX dual-width network cards, each with 2x 100G QSFP28 ports, supporting an aggregate throughput of 200G of firewall throughput through each ConnectX. The dual-width cards maximizes the PCIe bandwidth beyond a single slot limit. With the three ConnectX NICs in the QLS650 access to data and higher throughput with minimal delay is ensured for trusted traffic.