New 3900 Branch office applainces were launched today 28/5

[Yaron_Weiler]

hi,

we are excited to announce the General Availability (GA) of new 3900 Branch Office appliances.

The Check Point Quantum 3900 Security Gateway appliance series is built to protect branch offices from both known and unknown threats with Anti-Virus, Anti-Bot, SandBlast Threat Emulation (Sandboxing), and SandBlast Threat Extraction technologies.

The Check Point 3900 Security Gateway appliance series combines the most comprehensive security protections to safeguard your branch and small office deployments. 

The 3900 Security Gateway appliance series is available in a compact desktop form factor, while the latest generation offers a 1U form factor for enhanced scalability. Optimized for real-world threat prevention, this powerful Security Gateway secures critical assets and environments.

The new 3900 appliances are available for orderting TODAY

Regards,

Yaron Weiler

Head of product management, Security Gateway Appliances and Maestro

[GSallin]

Hi Yaron,

Can the 2.5 and 10 Gbps interfaces also be used in 1Gbps?

Thank you

[Yaron_Weiler]

please refer to Sk183199 where all the 3900 data is detailed

[GSallin]

Hi,

3950 vs 3970 performance – to deliver explanation on gaps and pricing if any.

Thank you

[Yaron_Weiler]

its 2 different sub-categories within the branch office. 3950 is Desktop model with highest performance while for 1U models we have the 3970 with lower performance and 3980 with the higher one

[genisis__]

Why is there no LOM port?  Surely this could have been added, even if was an optional extra?  if these units are targeted at remote offices then a LOM port would be welcome to allow rebuild or other recovery tasks if SSH or https connectivity was lost to the in-band management IP.

I also think POE option would have been good.

Another question related to production selection:
Why should I purchase a 3950 / 3970 as an example over a 9100

[Yaron_Weiler]

LOM wasn't planned for these Branch Offices, the same goes for POE.

As far as why to purchase 3970 when we have 9100 - if you do not need LOM, Maestro, Acceleration then the 3970 is a great choice since

• many more ports (32 ports in 3970 vs 16 max ports in 9100)
• better pricing

[Ben_Dunkley]

tbh - if that kind of remote console connection was that important - I'd be looking at some sort of LTE serial console server device anyway.

(They can be a bit expensive, but still cheaper than a 10 hour fly/drive).

[Bob_Zimmerman]

Console servers can't hit the power button for you (either to forcibly shut down a wedged system or to power on a system which has been shut down). LOM can.

[genisis__]

I agree, also by design 39xx serial are marketed as SOHO of branch offices I believe, so realistically having an out of band solution to potentially do a complete rebuild as an example would surely be a good thing and potentially save hours of delay if you have to send someone to site because a device has lost connection.

[Magnus-Holmberg]

I wouldn´t check the performance diff here but the formfactor and port density.
ie: 3950 lacks SFP slots for both 1G and 10G, while 3970 for 8 x 1Gb sfp and 10 x 10gb sfp

[Alex-]

Is this Check Point's M Chip moment? 😀

[PhoneBoy]

I don't see us discontinuing Intel any time soon, particularly due to virtualization and such.

[Chris_Atkinson]

Looks like a great enhancement to the portfolio, many will be happy to see the flexibility and density of connectivity these offer.

[CheckPointerXL]

can anyone clarify if VSX is supported?

based on relevant SK and this doc,https://www.checkpoint.com/downloads/products/check-point-appliance-comparison-chart.pdf, it seems that only VSNEXT is not supported, but legacy VSX is supported

but reading some FAQ and presentation, VSX is not supported at all

[Alex-]

Also interested. Where did you read VSX is not supported? Virtual Systems are mentioned in the data sheets and as purchase options in the catalog.

[ks87]

Just curious - will it be possible to install the GAIA Embedded system instead of the full GAIA in the future?
We have the same architecture here (ARM), so technically it should be possible.

[PhoneBoy]

Our plan is to bring in the features from Gaia Embedded into regular Gaia so that won't be necessary.

[ks87]

All the features? Even an easy-to-use local WebUI and the WatchTower app?

[D_W]

I would also love to see managing the firewall (and rules!) locally when the central management is down/not accessible

[PhoneBoy]

Even current Embedded Gaia does not allow you to manage the Access Policy/Threat Prevention when centrally managed.

However, R82 already offers a Dynamic Policy Layer which can be changed without central management using the Gaia API.

[PhoneBoy]

Not 100% certain what it will look like.
However, we had mentioned these plans both in the context of CPX 2025 and the new 3900 series appliances.