New 3900 Branch office applainces were launched today 28/5

[Yaron_Weiler]

hi,

we are excited to announce the General Availability (GA) of new 3900 Branch Office appliances.

The Check Point Quantum 3900 Security Gateway appliance series is built to protect branch offices from both known and unknown threats with Anti-Virus, Anti-Bot, SandBlast Threat Emulation (Sandboxing), and SandBlast Threat Extraction technologies.

The Check Point 3900 Security Gateway appliance series combines the most comprehensive security protections to safeguard your branch and small office deployments. 

The 3900 Security Gateway appliance series is available in a compact desktop form factor, while the latest generation offers a 1U form factor for enhanced scalability. Optimized for real-world threat prevention, this powerful Security Gateway secures critical assets and environments.

The new 3900 appliances are available for orderting TODAY

Regards,

Yaron Weiler

Head of product management, Security Gateway Appliances and Maestro

[Magnus-Holmberg]

Nice to see small appliances with SFP+ slots and 2.5Gb eth.
Do these support ElasticXL as under Ha only ClusterXL and VRRP is listed.

Also the are listed under the support and lifecycle policy as R82.10
Do they come with newer software 🙂 ?

[PhoneBoy]

These appliances will run full Gaia, which means ElasticXL should be supported.
I’ve seen a few other issues with the new datasheets that will likely be corrected shortly.

[Jere]

---

@PhoneBoy wrote:

These appliances will run full Gaia, which means ElasticXL should be supported.
I’ve seen a few other issues with the new datasheets that will likely be corrected shortly.

---

Hopefully the port configuration in the datasheets is correct.

[PhoneBoy]

Upon looking at the internal SK not yet published for the 3900 series appliances, I may have been wrong about ElasticXL support.
Having said that, I’ll wait until this SK is public or someone more in the know can confirm the limitations on these new appliances.

Note these appliances will ship with R82.10 per our product lifecycle page.
It will be manageable from R82 with a specific JHF level.

[Steffen_Appel]

At least the two larger ones have the required sync interface, so lets see.

[D_W]

Nice!

Described as they come with Full Gaia. But looks like SMB.

So no chance that they have switching possibilities like the smb?

And how many virtual cores do they have?

[PhoneBoy]

The core count for each appliance is listed on the datsheets.
The 3980 has 8 physical cores and 32GB of RAM.

As for switching capability, I haven’t heard and it’s not listed on the datasheet.
However, at CPX 2025, it was stated there are plans to bring more feature parity between regular and embedded Gaia OS.
Which would suggest that if it’s not already supported, it probably will be in the near future.

[Magnus-Holmberg]

Its listed with switchports in the hardware document.

https://sc1.checkpoint.com/documents/Appliances/GSG_3900/EN/Content/Topics-GSG-3920-3950-3980/Applia...

Also here.

[the_rock]

I thought initially its a beefed up SMB, but looks way better than that.

Excellent!

[Yaron_Weiler]

hi Magnus,

The new 3900 models will be added to the LifeCycle management page in the coming 1-2 days.

All the info around these new models (configurations, limitations, etc.) is listed in https://support.checkpoint.com/results/sk/sk183199?server=us 

[BG]

Hi,

SK you have provided about new models seems empty. May be it is not published yet?

[PhoneBoy]

The SK is still under construction and internal to Check Point, yes.

[CaseyB]

Is this a replacement model for the 3600 series appliances?

These are not referenced on the support-life-cycle-policy yet.

[Pauli]

Hello,

The new appliances are very attractively priced and significantly superior to the SMBs in terms of performance. Is there a medium-term plan to completely replace the SMBs with GaiaOS? This would save the manufacturer development and reduce operating costs for the customer.

Greetings

Pauli

[Yaron_Weiler]

This is indeed the longer term strategy.

the mid-term was to enable ARM in maintrain Gaia, whereas the 2nd stage will be to unify Spark into maintrain

[Magnus-Holmberg]

WIll this actually work for the current spark models, am thinking there must be a physical limitation here.

ie Storage.
1535, 1555 - 8Gb storage
1575, 1595 - 16Gb storage
1600, 1800 - 32Gb storage.

[PhoneBoy]

Full Gaia requires more storage and RAM than the 15x5 devices have.

[Magnus-Holmberg]

Its still more than x5 the price to a SMB box, i would say thats inline with pricing that has been for years.
Personally i would like to see real GAIA at half that price point.

[genisis__]

100% agree Magnus.

Also full GAIA is something that will make a difference to lots of us, but the device "on paper" seem good.

[Henrik_Noerr1]

When can we expect at hotfix for r81.20 management server to manage these appliances?

Thanks

Henrik

[Yaron_Weiler]

The management for the new 3900 models is R82. they are not supported in R81.20 management

[CheckPointerXL]

r81.20 mgmt support is on roadmap?

any confirm about r82.10 release on board for them?

[Yaron_Weiler]

no, only management R82 (and above)

[Henrik_Noerr1]

I am confused - Are you releasing a whole appliance line that can only be managed by a software version that is still not recommended? 😞

Will r81.20 management not be supported at all? We were looking into buying some 3900s for some projects soon, but obviously cannot recommend that if we cannot manage them from a recommended version.

Regards,

Henrik

[CheckPointerXL]

i think the key part is that the 3900 appliances will use a CUSTOM Gaia image, not a classic one...

this scary me a lot

[PhoneBoy]

Because these appliances have a different CPU architecture (Intel versus ARM) the installation image will likely always be different.
This is full Gaia, though review the known limitations as there are several features not currently supported.

We are expecting to declare R82 as recommended in the near future. 

[Yaron_Weiler]

That is correct.

The 3900 models are ARM-based and as such they do require ne Kernel that is only supported starting R82.

We realize that the fact that R82 is not recommended yet might be a challenge, but based on eth great feedback we got from early adopter customers we decided to launch the 3900 regardless and not wait for R82 to be recommended. 

[Steffen_Appel]

Just to be sure, they will have the normal GAIA, including IP Broadcast Helper  (which is missing from GAIA embedded), which we need for remote WoL?

[Chris_Atkinson]

Not GAiA Embedded no.