Support Center > Search Results > SecureKnowledge Details
Data Center Security Appliances R76SP Technical Level
Solution

Table of Contents

  • What's New in Data Center Security Appliances 61000 R76SP
  • Data Center Security Appliances 61000/41000 R76SP Downloads
  • Data Center Security Appliances 61000/41000 R76SP Documentation
  • Revision History
For more information on Check Point releases see: release map, upgrade map, backward compatibility map.

For more information on Data Center Security Appliances 61000/41000 R76SP, see the:

You can also visit our Data Center Security Appliances forum or any other Check Point discussion forum to ask questions and get answers from technical peers and Support experts.

 

What's New in Data Center Security Appliances 61000 R76SP

General

  • R76SP is based on R76, bringing stability and Security fixes from R77 and R77.10 releases.
  • IPv6 Firewall Inspection support, L2 and L3, both for Security Gateways and VSX environments

Performance Enhancements

  • Scalable Performance Pack (SecureXL) - allowing assigning up to 16 CPU cores to Performance Pack
  • HyperSpect support on SGM260
  • IPS optimization using asg_ips_enhance
  • Performance figures

    • Session rate - Up to 3M connections per second
    • Packet rate - Up to 100 Mpps
    • Firewall throughput - Up to 400 Gbps
    • Concurrent Connections - Up to 210M connections
    • SPU - Up to 33,000
    • IPS throughput (production) - 70 Gbps
    • VPN AES-128 110Gbps throughput

Distribution

  • Improved monitoring and control of Distribution modes
  • VLAN-based distribution

Hardware Enhancements

  • SGM 260 support
  • Enhanced port density:

    • Up to 60 * 10G interfaces
    • Up to 8 * 40G interfaces
    • Up to 400 Gbps throughput

Hardware Integration

  • Enable and monitor 40G interface from SGM CLI
  • Restore SSM factory defaults from SGM CLI
  • Automatic SSM firmware upgrade

Monitoring & Reporting Enhancements

  • Monitor past and present system status (asg_archive)
  • Monitor and verify bond state (asg_bond)
  • Monitor and verify ARP entries across system SGMs
  • SNMP enhancements
  • New diagnostic tests

DDoS Protections

  • SynDefender Acceleration in Performance Pack (enabled by default)
  • Mitigate DDoS attack by limiting the traffic forwarded to a slow path (asg f2fq)

LTE Features

  • GTP v1 and v2 support
  • SCTP support
  • VPN S1 support
  • Multiple tunnels

NAT Protocol Support

  • NAT 44
  • NAT 66
  • NAT 64
  • Carrier Grade NAT (CGNAT)

Routing

  • Policy Based Routing (PBR)

Dynamic Routing

  • RIP v1 and v2 support
  • BGP

    • BGP Graceful Restart
    • BGP Multipath (BGP with ECMP)
    • BGP Peers Grouping to apply Import/Export Route maps
    • BGP ASPATH reg
    • BGP Communities matching with ASPATH regular expressions

VSX Enhancements

  • Support for up to 128 interfaces per Virtual System
  • asg_vsx_verify enhancements

VPN

  • Support 3rd party peers (sticky SA)

 

Data Center Security Appliances 61000/41000 R76SP Downloads

In order to receive the images, please contact the following mailing list
(it might take up to 24 hours to provide an answer, not including Fridays and Saturdays):
61000_41000_installation_forum@checkpoint.com

To speed up the process, please fill out this form and attach it to the e-mail request you send to the mailing list.

Note: For Official Data Center Security Appliances version names, see sk65305.

 

Data Center Security Appliances 61000/41000 R76SP Documentation

 

Revision History

Show / Hide the revision history

Date Description
15 July 2019 Link to Release map was replaced 
23 Aug 2017 Updated link to the Known Limitations article
23 Apr 2014 Addition of 41000 Security Appliance
20 Feb 2014 First release of this document
This solution is about products that are no longer supported and it will not be updated

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment