Check Point Quantum Force 28000 Security Gateway

The Check Point Quantum Force 28000 Security Gateway (CPAP-SG28000-SNBT) is a purpose-built, hyperscale network security platform engineered for the most demanding enterprise data center and carrier-grade environments. Grounded in Check Point's Quantum Force architecture, the appliance delivers hundreds of gigabits per second of real-world threat prevention throughput by combining custom-designed security processing ASICs with a massively parallel software pipeline. The platform runs Check Point's unified Infinity security OS and integrates the full suite of Software Blades—including Next-Generation Firewall, IPS, Application Control, URL Filtering, Anti-Bot, and Threat Emulation (sandboxing)—without the throughput penalties typically associated with deep-inspection at this scale.

Designed for east-west and north-south traffic enforcement at the data center core, the Quantum Force 28000 supports high-density 100GbE and 400GbE connectivity options, enabling direct attachment to spine-layer switching fabrics without aggregation bottlenecks. The appliance is managed through Check Point's centralized Infinity Portal or on-premises SmartConsole and Quantum Security Management, providing unified policy, logging, and threat visibility across hybrid cloud and on-premises deployments. ClusterXL active/active clustering is natively supported, allowing organizations to horizontally scale throughput and achieve carrier-grade redundancy with sub-second failover.

The 28000 is specifically positioned as a top-tier member of the Quantum Force appliance family, succeeding and substantially outperforming prior Quantum 28000-series hardware through ASIC-accelerated inspection that decouples throughput from CPU scaling constraints. Its 2U rack form factor, hot-swap power supplies, and redundant fan modules address the operational reliability requirements of Tier-1 enterprise network operations centers and managed security service infrastructures. Integration with Check Point Horizon for extended detection and response (XDR/MDR) and Infinity ThreatCloud AI ensures continuous, globally-sourced threat intelligence updates in real time.

Ideal for

• Hyperscale data center perimeter enforcement, providing full threat-prevention inspection across 100GbE/400GbE uplinks without creating a throughput chokepoint between the Internet edge and internal compute tiers
• East-west traffic segmentation within large enterprise or multi-tenant data centers, enforcing zero-trust microsegmentation policies between workload clusters at line-rate speeds
• Carrier and managed security service provider (MSSP) multi-tenant security service delivery, leveraging VSX (Virtual System Extension) to host isolated virtual security domains on a single physical platform
• High-availability active/active data center gateway clustering for financial services, healthcare, and critical infrastructure operators requiring sub-second failover and no single point of failure in the security path
• Encrypted traffic inspection at scale, performing TLS/SSL deep inspection across high-volume HTTPS flows to eliminate blind spots introduced by pervasive encryption without degrading overall gateway throughput
• Consolidated threat prevention replacing discrete IPS, anti-malware, and firewall appliance stacks in data center refresh or network modernization initiatives, reducing rack footprint and operational complexity

Technical specifications

Available from Omnixon Global. Submit an RFQ and our team will confirm configuration and availability for your order.