Introduction

Thank you for choosing the Check Point 60000 / 40000 Appliances (Chassis).

We hope that you will be satisfied with this system and our support services. Check Point products supply your business with the most up to date and secure solutions available today.

Check Point also delivers worldwide technical services including educational, professional and support services through a network of Authorized Training Centers, Certified Support Partners and Check Point technical support personnel to ensure that you get the most out of your security investment.

For additional information on the Internet Security Product Suite and other security solutions, refer to the Check Point Web site, or call Check Point at 1(800) 429-4391. For additional technical information about Check Point products, consult the Check Point Support Center.

Welcome to the Check Point family. We look forward to meeting all of your current and future network, application and management security needs.

Overview of Check Point Chassis

The Check Point Chassis is a high performance, scalable, carrier class solution for Service Providers and high-end data centers.

The system provides advanced Security Gateway functionality to meet your dynamically changing security needs.

Supported Security Gateway Software Blades include:

Firewall
IPsec VPN
Mobile Access
IPS
Threat Emulation
Threat Extraction
Anti-Bot
Anti-Virus
Application Control
URL Filtering
Identity Awareness
Content Awareness
Data Loss Prevention
Anti-Spam

The 60000 appliances are a 14-15U chassis.

The 40000 appliances are a 6-7U chassis.

The Chassis components are:

Components	Function
Security Gateway Modules A hardware component on a 60000 / 40000 Appliance (Chassis) that operates as a physical Security Gateway. A Chassis contains many Security Gateway Modules that work together as a single, high performance Security Gateway or VSX Gateway. Acronym: SGM. (SGMs): Up to 12 SGMs in 61000, 61000 N+N, and 64000 Up to 4 SGMs in 41000 Up to 6 SGMs in 44000	Runs a high performance Firewall, and other Software Blades.
Security Switch Modules A hardware component on a 60000 / 40000 Appliance (Chassis) that manages the flow of network traffic to and from the Security Gateway Module in the Chassis. Acronym: SSM. (SSMs): Up to 2 SSMs in 64000, 61000, 44000, and 41000 Up to 4 SSMs in 61000 N+N	Distributes network traffic to SGMs.
Chassis Management Modules A hardware component that controls and monitors 60000 / 40000 Appliance (Chassis) operation such as, fan speed, Chassis and module temperature, and component hot-swapping. Acronym: CMM. (CMMs): 2 CMMs	Monitors the chassis, the SSMs and the SGMs with zero downtime.

Components

Function

Security Gateway Modules A hardware component on a 60000 / 40000 Appliance (Chassis) that operates as a physical Security Gateway. A Chassis contains many Security Gateway Modules that work together as a single, high performance Security Gateway or VSX Gateway. Acronym: SGM. (SGMs):

Up to 12 SGMs in 61000, 61000 N+N, and 64000
Up to 4 SGMs in 41000
Up to 6 SGMs in 44000

Runs a high performance Firewall, and other Software Blades.

Security Switch Modules A hardware component on a 60000 / 40000 Appliance (Chassis) that manages the flow of network traffic to and from the Security Gateway Module in the Chassis. Acronym: SSM. (SSMs):

Up to 2 SSMs in 64000, 61000, 44000, and 41000
Up to 4 SSMs in 61000 N+N

Distributes network traffic to SGMs.

Chassis Management Modules A hardware component that controls and monitors 60000 / 40000 Appliance (Chassis) operation such as, fan speed, Chassis and module temperature, and component hot-swapping. Acronym: CMM. (CMMs):

2 CMMs

Monitors the chassis, the SSMs and the SGMs with zero downtime.

The Chassis:

Is highly fault tolerant, and provides redundancy between chassis modules, power supplies and fans.

For extra redundancy, you can install a Dual Chassis deployment.
Has NEBS-ready and Non-NEBS versions.

The Network Equipment Building Systems (NEBS) certificate ensures that Chassis meets the environmental and spatial requirements for products used in telecommunications networks.
Includes a rich variety of CLI monitoring and management tools.

The system can be centrally managed from a Check Point Security Management Server or Multi-Domain Server.
Lets you install different numbers of SGMs to match the processing needs of your network.

You can operate the Chassis as a Security Gateway, or as a VSX Gateway for Check Point Virtual Systems.

Check Point Virtual Systems

Administrators can replicate physical security gateways with Virtual Systems with advanced protection for many networks and network segments. Virtual Systems can support up to 250 Virtual Systems on a Chassis. This gives you scalability, availability, reliability and optimal performance while minimizing hardware investment, space requirements and maintenance costs.

Network virtualization supports easy deployment and configuration of network topology with simple inter-Virtual System communication. Integrated Virtual Switches and direct links to destinations eliminate the requirement for external network switches.

Key Features:

Consolidate many Security Gateways
Software Blade architecture
Gaia 64-bit operating system
Separation of management duties
Customized security policies per Virtual System
Per-Virtual System monitoring of resource usage

Key Benefits:

Easily add Virtual Systems to a VSX Gateway
Decreased hardware cost and simplified network policy
High performance
Granularity with customizable policies for each Virtual System
Better usage-based resource planning with per-Virtual System monitoring
Better performance with multi-core CoreXL technology

In this Document

A brief overview of necessary Chassis concepts
A step by step guide to getting the Chassis up and running

Note - Many examples in this guide show the largest model available at the time of publication. The concepts and procedures are applicable to all models.