Check Point firewall appliances: Force 3900, 9000, 19000 and 29000

The Check Point Force range

Check Point Force (also sold as Quantum Force) comes in three groups:

• Force 3900 for branch offices: the desktop 3920 and 3950 and the 1U 3970 and 3980. Check Point describes them as optimised for SD-WAN, and they follow the Quantum 3600 and 3800.
• Force 9000 for the perimeter: the 1U 9100, 9200, 9300, 9400, 9700 and 9800, with two slots for network cards.
• Force 19000 and 29000 for data centres: the 2U 19100, 19200, 29100 and 29200, with 1/10GbE, 10/25GbE and 40/100GbE port options.

Check Point's 2026 datasheets call the ranges Check Point Force and Check Point Spark; you will also see them as Quantum Force and Quantum Spark, their earlier names, and the part numbers are the same. The small-business range is on Check Point Spark firewalls.

Check Point Force models and part numbers

Press Add next to a part number to put it in your basket. Where a subscription or support option goes with the hardware, you choose it in the same step and it goes into your basket with the hardware. Part numbers come from the vendor; we confirm each line, quantity and term when we quote.

Force 9000 models compared

Figures are Check Point's own, from each model's datasheet (linked under Vendor sources). Firewall throughput is the plain figure, NGFW is the figure with application control and IPS on, and threat prevention is the figure with Check Point's threat prevention protections on, so size on that one if you plan to use the package the appliance ships with. Each 9000 model also has a management port and a sync port. Check Point's 9100 datasheet lists two network card slots, for an 8-port 1/10G SFP+ card or a 4-port 10/25G SFP28 card.

Force 19000 and 29000 models compared

Each model also has two 1/10GbE copper management ports and two 1/10/25GbE SFP28 sync ports. Check Point lists the 19100 with up to 32 x 1/10GbE, 16 x 10/25GbE or 8 x 40/100GbE ports when its slots are filled. The Base models have one 960 GB NVMe drive and the Plus models have two.

Force 3900 branch firewalls compared

The 3920 has a connector for a second external power supply. Check Point's datasheets print lower NGFW and threat prevention figures for the 3970 than for the 3950; the 3970 is the 1U model with 30 network ports and two internal power supplies.

Base, Plus and Maestro part numbers

The ending of a Force part number tells you the configuration:

• -SNBT: the Base appliance with the Threat Prevention and Sandboxing package for one year.
• -PLUS-SNBT: the Plus appliance. It adds network ports and memory, Lights-Out Management and Virtual Systems (2 on the 9000 range, 5 on the 19000 and 29000 ranges), and a second power supply where the Base model has one.
• -PLUS-MHS-SNBT: the appliance in Check Point's Maestro configuration, as a gateway for a Maestro Hyperscale cluster. Its fitted ports differ from the Plus model: four 10/25GbE ports on the 9000 range and two 40/100GbE ports on the 19000 and 29000 ranges, with direct attach cables for the orchestrator.

Tell us which you need, or add the Base model and say in your quote request what you plan to connect, and we check the configuration.

Maestro Hyperscale solutions

A Maestro Hyperscale Orchestrator joins several Force gateways into one security group, so capacity grows by adding gateways. Check Point lists the MHO-140 (48 x 10/25GbE and 8 x 40/100GbE ports, 2 Tbps fabric capacity) and the MHO-175 (32 x 40/100GbE ports, 3.2 Tbps) on their own, and complete solutions of two or three gateways with one orchestrator under a single part number. The solutions for the 29100 and 29200 use the MHO-200, which has 32 x 400GbE ports and 12.8 Tbps of fabric capacity:

Packages, blades and SD-WAN

Every appliance above includes the SNBT package for its first year. Check Point's packages are:

• NGFW (Next Generation Firewall): firewall, VPN, Identity Awareness, Application Control and IPS.
• NGTP (Next Generation Threat Prevention): NGFW plus URL Filtering, Antivirus, Anti-Bot, Anti-Spam and DNS Security.
• SNBT (Threat Prevention and Sandboxing, the SandBlast package): NGTP plus Threat Emulation sandboxing, with Zero Phishing on the current datasheets.

When you add a firewall, the configurator offers the NGFW, NGTP and SNBT packages for one, two or three additional years, the Data Loss Prevention, IPS and IoT Network Protection blades and the SD-WAN subscription that Check Point lists for that model; pick what you need or skip the step. For renewals and licences on appliances you already run, see Check Point licences (opens in a new tab) on softwarelicensing.uk.

Sandboxing appliances

The SandBlast TE250XN and TE2000XN run Check Point's Threat Emulation sandboxing on your own premises, for gateways covered by a Threat Prevention and Sandboxing licence. They are sized by virtual machines: 8 on the TE250XN (Check Point's figure: 1,300 unique files an hour) and 28 or 56 on the TE2000XN (5,000 or 8,000). Their part numbers are in the table above.

Cards, transceivers and spares

Force 9000, 19000 and 29000 appliances take Check Point's network cards (8 x 1/10G SFP+, 4 x 10/25G SFP28 and 2 x 40/100G QSFP28), with memory kits, power supplies, rails and transceivers listed per range. When you add a firewall, the configurator offers the accessories Check Point lists for that model, to add or skip. Every accessory part number is on Check Point accessories.

Replacing a Quantum 3600, 3800 or 6000 appliance

Check Point's Support Life Cycle Policy names a Force successor for each earlier gateway: the Force 3920 for the 3600, the 3950 for the 3800, and the 9100, 9200, 9300, 9400, 9700 and 9800 for the 6200, 6400, 6600, 6700, 6900 and 7000. The Quantum 3600 and 3800 are still listed above, with end of sale in February 2027 and support to February 2032; the Quantum 6000 range reached end of sale in October 2026, with support to October 2031. We can quote the successor with its package and move your policy across, with the scope confirmed at quote.

Lifecycle and replacements

Dates are the vendor's published end-of-sale and support dates. We can quote current replacements and plan the swap.

Management and Harmony

Force firewalls are managed from a Check Point Security Management Server; Check Point's own appliances for that are on Smart-1 appliances. Check Point's Harmony products for endpoints, email and mobile devices are on check-point-harmony.co.uk (opens in a new tab).

How to order

How ordering works. Press Add next to a part number and it goes into your basket; where a security package for further years, a blade or an accessory goes with the appliance, you pick it in the same step or skip it. Then View basket and Request a quote. We check every line, quantity and term against your sites and come back with a personalised quote by email. Nothing is charged online. We can also design, supply, stage, install and configure the firewalls as a project, with the scope confirmed at quote (see network installation). Every row shows Check Point's own part number, and your quote confirms the exact code for each appliance, package and term.

Vendor sources

• Check Point: Force 9100 datasheet (opens in a new tab)
• Check Point: Force 9200 datasheet (opens in a new tab)
• Check Point: Force 9300 datasheet (opens in a new tab)
• Check Point: Force 9400 datasheet (opens in a new tab)
• Check Point: Force 9700 datasheet (opens in a new tab)
• Check Point: Force 9800 datasheet (opens in a new tab)
• Check Point: Support Life Cycle Policy (appliance end-of-sale and support dates) (opens in a new tab)
• Check Point: Force 19100 datasheet (opens in a new tab)
• Check Point: Force 19200 datasheet (opens in a new tab)
• Check Point: Force 29100 datasheet (opens in a new tab)
• Check Point: Force 29200 datasheet (opens in a new tab)
• Check Point: Force 3920 datasheet (opens in a new tab)
• Check Point: Force 3950 datasheet (opens in a new tab)
• Check Point: Force 3970 datasheet (opens in a new tab)
• Check Point: Force 3980 datasheet (opens in a new tab)
• Check Point: 3600 security gateway datasheet (opens in a new tab)
• Check Point: 3800 security gateway datasheet (opens in a new tab)
• Check Point: Maestro Hyperscale Orchestrator datasheet (opens in a new tab)
• Check Point: SandBlast Threat Emulation appliances datasheet (opens in a new tab)