Introduction

The Check Point Falcon Acceleration Cards provide a high performance, low-latency, flexible and scalable solution for Check Point 5900, 6800, 15000, and 23000 appliances.

Falcon Acceleration Card is a dedicated network I/O card solution with an integrated Network Processor, which supports multiple connectivity options at 10 GbE (CPAC-Falcon-10G-B) and 40 GbE (CPAC-Falcon-40G-B).

The Check Point Falcon Acceleration Cards provide:

• For HTTPS Inspection acceleration - increase in the throughput by utilizing the dedicated hardware engines on the acceleration cards.
• For Threat Prevention - increase in the throughput by implementing Deep Inspection in the acceleration cards hardware. This applies to Threat Prevention with SandBlast Zero Day protections and to NGFW.
• For Firewall-only acceleration - increase in the throughput for Firewall-only traffic, low traffic latency, session rate improvement.
• VSX and QoS support.

Supported Falcon Acceleration Cards and Security Appliances

Falcon Acceleration Cards available for Security Appliances:

Orderable SKU	Abbreviated Name	Acceleration Module Description
CPAC-Falcon-10G-B	Falcon-10G	Acceleration Module with 4 x 10 GbE Fiber Ports
CPAC-Falcon-40G-B	Falcon-40G	Acceleration Module with 2 x 40 GbE Fiber Ports

Supported Security Appliances for each Falcon Acceleration Card:

Acceleration Module	Supported Security Appliance Models
Falcon-10G	5900 6800 15400, 15600 23500, 23800, 23900
Falcon-40G	5900 6800 15400, 15600 23500, 23800, 23900

Supported combinations and number of Falcon Acceleration Cards in Security Appliances:

Security Appliance Model	Falcon-10G	Falcon-40G	Maximal Number of Cards
5900 6800	Yes	Yes	2
15400, 15600	Yes	Yes	3
23500, 23800, 23900	Yes	Yes	5

Note - It is supported to install Falcon-10G and Falcon-40G acceleration cards in the same Security Appliance.

Supported transceivers for each of the acceleration cards:

Acceleration Module	Supported Transceivers
Falcon-10G	CPAC-TR-10SR-B (also supports 1 GbE) CPAC-TR-10LR-B (also supports 1 GbE) CPAC-TR-1T-B
Falcon-40G	CPAC-TR-40SR-QSFP-300m (supports the breakout mode) For configuration details, see the Falcon Acceleration Cards Administration Guide. CPAC-TR-40LR-QSFP-10K CPAC-TR-40SR-QSFP-BiDi

Supported DAC cables:

• Check Point DAC cables (CPAC-DAC-10G-... and CPAC-DAC-40G-...) are supported only for connection to Check Point Maestro Hyperscale Orchestrators.
• Check Point DAC breakout cables 40G to 4x10G (CPAC-DAC-40/10G-...) are not supported.

Additional interfaces the Gaia on the appliance shows:

Acceleration Module	Number of additional interfaces	Names of additional interfaces
Falcon-10G	4	eth<Slot#>-01, eth<Slot#>-02, eth<Slot#>-03, and eth<Slot#>-04
Falcon-40G	2	eth<Slot#>-01 and eth<Slot#>-05

Notes:

• "<Slot#>" denotes the ordinal number of the front-facing I/O slot, which the acceleration card populates.

  For example:

  • For the first Falcon-10G acceleration card, Gaia OS would show eth1-01, eth1-02, eth1-03, and eth1-04.
  • For the second Falcon-10G acceleration card, Gaia OS would show eth2-01, eth2-02, eth2-03, and eth2-04.
• In addition to the interfaces noted above, the Gaia OS on the appliance shows logical interfaces called bcmnet-np<Slot#>.

  Only the ifconfig -a command in the Expert mode shows these interfaces. Ignore these logical interfaces.