A press announcement yesterday was released from Intel and Check Point. Using the new Xeon “Woodcrest” CPU, SPlat is able to produce throughput numbers of 10Gbps. This is quite impressive. It also scales to 3.2 Gbps throughput for VPN using AES. No special code is required to support this system. This is a basic VPN-1 Power build using SecureXL to fully utilize the multi-core technology of this new CPU.

Other benefits:

  • 2 Million packets per second for streaming media
  • Future-Proofs your security environment for new applications and security threats
  • Multi-Gig performance with SmartDefense enabled

No special hardware is required, just an “open server” which will include HP, Dell and IBM.

Comparing the cost per Gbps is also very impressive. Take a look at the following configurations based on list price:

Product
Gbps
Price
Price/Gbps
Check Point VPN-1 Power ($12,995)
Open Server with 2 Dual-core Xeon Woodcrest Processors ($5,000-$7,000)
10 Gbps
$19,995
$1,999
Cisco Pix 535
1.7 Gbps
$27,995
$16,468
Cisco ASA 5550
1.2 Gbps
$19,995
$16,662
Juniper SSG550
1+ Gbps
$13,500
$13,500

Five times faster at 1/7th the price of anything in this category. You only need to spend about $5,000 to $7,000 on an Intel platform for this performance. Check Point continues to demonstrate that the security is in the code (not the ASIC), and that the code is optimized to keep pace with hardware improvements.

Check Point Crosses the 10Gig mark

3 thoughts on “Check Point Crosses the 10Gig mark

  • September 23, 2006 at 1:09 am
    Permalink

    WTF is SecureXL? What does it do?

  • October 10, 2006 at 6:32 pm
    Permalink

    Performance Pack is a software acceleration product installed as an add-on to VPN-1/FireWall-1. Performance Pack significantly enhances and improves performance of VPN-1/FireWall-1. It provides “wirespeed ” performance for functions like:
    access control
    encryption
    NAT
    accounting and connection/session rate
    general security checks
    Do you need it? For high performance situations you should be considering it as an add-on. Most small to mid-size environments will not require it.

  • Pingback: fireverse.org » Blog Archive » An Open Letter to Richard Stiennon

Leave a Reply

Your email address will not be published. Required fields are marked *