[Check Point - All Rights Reserved] Quantum

slide1. [Check Point - All Rights Reserved] Quantum Lightspeed GatewaysBreakthrough Security Performance<br>
slide2. [Internal Use] for Check Point employees​ The problem Quantum Lightspeed solves & use cases
How it compares to other Quantum solutions?
Competitive landscape
How does it work?
Known limitations Agenda<br>
slide3. [Internal Use] for Check Point employees​ Security is observed as
‘slowING down everything’<br>
slide4. Securing Customers At High SpeedWhat are they asking for? Users want to access applications
We are agnostic to where the applications are – we secure!
Customers want security to be FAST – Without DELAY Applications [Internal Use] for Check Point employees​<br>
slide5. Deliver better security throughput price performance Achieve Ultra Low Latency Scale security for 2x network growth every 3 years [Check Point - All Rights Reserved] Paradigm Shift in Data Center SecurityHigh Performance for Securing East West Traffic<br>
slide6. [Internal Use] for Check Point employees​ Lightspeed
Use cases<br>
slide7. Quantum LightspeedWho needs it? Customers looking for low latency - pure firewalling for securing applications [Internal Use] for Check Point employees​ 5x DATA TRANSER SPEEDS 100TB file transfer * 1 x 28000 vs 1 x QLS800
1.5h down to 17m 20x SYSTEM CAPACITY INCREASE 145Gbps solution throughput to 3Tbps with Maestro 10x REDUCTION IN LATANCY 30 Microseconds down to
3 Microseconds<br>
slide8. [Internal Use] for Check Point employees​ Securing Customers At High SpeedUnderstanding Our Offering Best for
Perimeter/Branch
Threat Prevention
Access Control
VPN connectivity

Don’t forget:

Coming soon: Best for
Data Centers
Firewalling
Low Latency

Don’t forget:
“A fast firewall”
Future: SSL / IPSec VPN offload Best for
Data Centers/Perimeter
Resilience & scale
Threat Prevention / FW
Access Control

Don’t forget:
“Cloud like scale and resilience”<br>
slide9. 1.5
hours 17
minutes Quantum Lightspeed Firewall moves backups 5x faster [Internal Use] for Check Point employees​ 5x DATA TRANSER SPEEDS * 1 x 28000 vs 1 x QLS800 Moving 100 TB of Data Center Backup Across Locations 145 Gbps 800 Gbps<br>
slide10. Fastest Access Control for Users 145 Gbps 3.0Tbps [Internal Use] for Check Point employees​ 8x MLS400 + Maestro- N + 1 2x 28000 1 + 1 Cluster 20 x FASTER ACCESS Maestro MHO175 Quantum Lightspeed Security Throughput Scales higher with Maestro<br>
slide11. LEGACY
30
microseconds 3 microseconds Use cases include High Frequency Trading [Internal Use] for Check Point employees​ 10x
QUICKER TRADES Secure Financial Transactions with Microsecond Latency QLS800 28000<br>
slide12. [Internal Use] for Check Point employees​ Lightspeed product offering<br>
slide13. [Check Point - All Rights Reserved] Redefining Firewall Security at Network Speed Hyper-fast firewall security at line-rate speed
- 250 to 800 Gbps Hyper-Fast throughput
- Ultra low latency at 3μs (10X faster)
- Scalability up to 3Tbps with Maestro

Leverage Nvidia ConnectX NIC
- Most Secure and Advanced ASIC
- Accelerate Packet Processing Technology Hyper-Fast, Ultra-low Latency, Scalable QLS 250
QLS 450
QLS 650
QLS 800
MLS 200
MLS 400<br>
slide14. 2012 23900 28000 2016 2019 2022 78 Gbps 145 Gbps 250 Gbps 450 Gbps 650 Gbps 800 Gbps [Check Point - All Rights Reserved] Firewall Performance Accelerates to Lightspeed<br>
slide15. [Check Point - All Rights Reserved] Quantum Lightspeed Family with Six models Best security to fit any line rate firewall use case 250-800 Gbps faster speeds. 3μs latency. Scalability of up to 3TBps * Available b/Q2<br>
slide16. Quantum Lightspeed+ Maestro Hyperscale Orchestrator Scale throughput 7.5x to 3 Tbps 3.0 Tbps Hyperscale Span 2x MLS200400 Gbps Beginning
Maestro Span 400 Gbps Maestro Base Configuration Scale from 400 Gbps to 3 Tbps with Maestro* 2x MLS200
400 Gbps [Check Point - All Rights Reserved] * Or achieve the same 3 Tbps with 8x MLS400 + Maestro MLS200 Maestro
MHO175 from 2 to 15<br>
slide17. [Internal Use] for Check Point employees​ Quantum Lightspeed – HW summary Note: The SmartNIC is not offered as an accessory and cannot be added to existing Quantum models<br>
slide18. Software Configuration [Internal Use] for Check Point employees​ SW Blades
Quantum LightSpeed come with Firewall only by defaults
Additional blades (NGFW/NGTP/Sandblast) can be added from day-1
SW release - The Quantum LightSpeed will be supported with
R81.10 via JHF
R81.20
No support in R80.xx
Management
R81.10 and above can manage ALL the new Quantum LightSpeed GatewaysTM.
Jumbo Hot Fix (JHF) update is required for the management as well as the LightSpeed appliances to identify and manage the LightSpeed appliances
Maestro support for LightSpeed
All Quantum LightSpeed model are Maestro ready and will be supported by Maestro within Q2 timeframe.
In Q2 we will introduce Maestro dedicated 1U LightSpeed models (MLS200 & MLS400) as well as Maestro bundles for LightSpeed based on MLS200 & MLS400<br>
slide19. [Internal Use] for Check Point employees​ competition<br>
slide20. QLS 250 QLS 450 QLS 650 QLS 800 Introducing Quantum Lightspeed Family Biggest Revolution in network security [Check Point - All Rights Reserved] MLS 200 MLS 400 Better than Fortinet, 16x times better than PAN, 25x times better than Cisco<br>
slide21. [Check Point - All Rights Reserved] 60 200 250 Fortinet FG-1800F
198Gbps Palo Alto 5260
58 Gbps, Check Point LightSpeed QLS-250, 250Gbps Quantum 16200
78 Gbps Security Speed 2022Can you beat that?<br>
slide22. [Check Point - All Rights Reserved] 100 200 450 Fortinet FG-3001F
400Gbps Palo Alto 5260
58 Gbps, Check Point Lightspeed QLS-450, 450Gbps Quantum 16200
78 Gbps Security Speed 2022How about now? 300 400<br>
slide23. Industry Leading Hyperscale Price PerformanceMore scalable, Higher Performance, Smaller Footprint [Check Point - All Rights Reserved]<br>
slide24. [Check Point - All Rights Reserved] How Does
it Work?<br>
slide25. [Internal Use] for Check Point employees​ Eth 1 First packet in every connection validated by security policy Eth 0 How does it work? FW Only Accelerate
Packet Processing Approved traffic flow is offloaded to SecureXL which in turn offloads eligible flows to Lightspeed ASIC Subsequent packets are secured by accelerated packet processing ASIC<br>
slide26. LightSpeed Acceleration Requirements FW only flows
Connection should be accelerated in fastpath (SecureXL)
Connection should be between 2 ports of the same LightSpeed NIC card.
Connection can be within the same port (VLAN in – VLAN out)
Fragments are not accelerated
Packets with IP Options are not accelerated.

Rules are deleted when connection is closed or expires. [Internal Use] for Check Point employees​<br>
slide27. [Internal Use] for Check Point employees​ Eth 1 Flows that need higher blade inspection are handled in software. Eth 0 How does it work? Mixed Blades Accelerate
Packet Processing Flows that are offload to secureXL as FW only will be accelerated in LightSpeed. Exceptions can be configured to make higher blade flows to be FW only to accelerate with Lightspeed.<br>
slide28. [Check Point - All Rights Reserved] KNOWN LIMITATIONS<br>
slide29. VSX Support VSX is not supported in initial release (R81.10 JHF) of LS appliances
VSX will be supported in R81.20 release.
VSs connected to LightSpeed ports (directly or VLAN) will be accelerated in LightSpeed.
Acceleration of VSs connected to Virtual Switches/Virtual Routers will be supported in Q3. [Internal Use] for Check Point employees​<br>
slide30. UDP Performance [Internal Use] for Check Point employees​<br>
slide31. Upcoming improvements VSX support
Maestro Support
Software Hairpin – Inter card throughput/Latency improvements
Smart Bond – NIC based bond failover
IPv6 Support
IPSec VPN Acceleration
SSL Acceleration
Drop Templates
Easier configuration of Exclusions with multiple blades. [Internal Use] for Check Point employees​<br>
slide32. [Check Point - All Rights Reserved] Sneak Preview<br>
slide33. [Check Point - All Rights Reserved] SSL Inspection IPSEC VPN 200Gbps rate for SSL
encryption and Decryption for Threat Prevention Remote Access
Site-2-Site Inline Encryption Hardware Engines<br>
slide34. [Check Point - All Rights Reserved] Summary<br>
slide35. [Check Point - All Rights Reserved] 250 to 800 Gbps Hyper-Fast throughput
Ultra low latency at <3μs (10X faster)
Scale up to 3.0 Tbps with Maestro Hyper-Fast, Ultra-low Latency, Unmatched Price Performance Biggest Network Security Revolution in DecadeHyper-fast data centers for every enterprise<br>
slide36. Fast Firewall Appliance
Embracing needs of specific markets
Complements Quantum Network offering Quantum Lightspeed [Internal Use] for Check Point employees​<br>
slide37. [Check Point - All Rights Reserved] THANK YOU!<br>