DATA SHEET

QUANTUM Force 3950

Quantum Force 3950

Security Gateway

Optimized for SD-WAN

Y OU D E S E R VE T H E B E ST S E C U R I T Y

Quantum Force 3950 branch office firewalls

deliver up to 20 Gbps of firewall throughput
and 5.5 Gbps of Threat Prevention throughput.

Top Security Effectiveness It includes Check Point’s full AI-powered

security and real-time threat intelligence – in
Check Point has been ranked #1 for the third
a space saving desktop form factor.
consecutive year, achieving a 99.9% malware
block rate, 99.7% phishing prevention and 98% The 3950 is optimized for SD-WAN, high-speed

high and critical exploit prevention in the connectivity to support the demanding

Miercom Hybrid Mesh Firewall Benchmark 2025 requirements of today’s hybrid mesh branch
office networks.
Named a Leader by Top Analyst Firms
Forrester Wave™ for Enterprise Firewalls 2024

Check Point Recognized as a Leader and

Outperformer for Enterprise Firewalls
GigaOm Radar for Enterprise Firewalls 2025

Quantum Force 3950 Performance Highlights

Firewall Next Gen Firewall Threat Prevention
20 Gbps 16.2 Gbps 5.5 Gbps
 DATASHEET
QUANTUM Force 3950 2

Productivity Loss and Cyber Risks in Branch Offices

Today's branch offices are on the frontline, directly interacting with customers and the public. They
directly connect the public cloud and internet which expose them to cyber threats. This often makes
branch offices a weak link in enterprise network security.

As employees return to the office, they experience downgraded network performance compared to their
high-speed home internet. Suddenly, the same bandwidth-hungry SaaS and enterprise apps become
frustrating to use at the office due to lag, choppiness, and freeze ups.

Frontline Defense for the Branch

Secure, Blazing Fast SaaS Apps
The 3950 delivers 4x higher threat prevention
throughput compared to previous models. This
ensures secure, blazing fast network
performance for SaaS productivity apps like
Zoom, Teams, Salesforce, etc.

Industry-Leading Security High Speed Connectivity & SD-WAN

• Next Generation Firewall The 3950 is optimized for SD-WAN has
redundant power supply, 8 x 1GbE and 2 x 2.5
• Site-to-Site and Remote Access VPN
GbE and 2x 10GbE connections to support
• Application and Web Filtering highspeed network in today’s hybrid mesh
• Intrusion Prevention branch networks.

• Antivirus and Anti-Bot

• Advanced DNS Security High Performance HTTPS Inspection

• Malware Prevention While commonly used for good, HTTPS web
• Sandboxing traffic can also hide illegal user activity and
malicious traffic. Enterprises need the ability to
• Zero-phishing (no agent required)
inspect a broad range of encrypted TLS 1.3 and
• HTTPS Inspection (Layer 1-7) HTTPS channels while also excluding inspection
• DLP, IoT Security of sensitive regulated industry traffic, such as
• SD-WAN Health Care and Financial. Check Point makes it
easy to fine-tune HTTPS security using
customizable dynamic security policies.

© 2025 Check Point Software Technologies Ltd. All rights reserved | June 3, 2025
 DATASHEET
QUANTUM Force 3950 3

Quantum Force 3950

RJ45 10GbE RJ45 USB3 USB-C

RJ45 2.5GbE LAN RJ45 1GbE LAN LAN / MGMT Console Console

Power Supply (Dual) Power Switch

Specifications
Performance Additional Features
Enterprise Test Conditions1 Highlights

Threat Prevention2 [Gbps] 5.5 • 1 CPU, 8 Physical Cores

Next Generation Firewall3 [Gbps] • 32 GB RAM
16.2
• 480 GB SSD NVME M.2
IPS Throughput [Gbps] 20
• 2x External AC-DC power adapters
Firewall Throughput [Gbps]
20 • Desktop (Rack Mount installation - optional)
RFC 3511, 2544, 2647, 1242 Performance (Lab)
Firewall 1518 bytes UDP [Gbps] 20
Firewall Latency (μSec) 13
VPN AES-GCM 1452B [Gbps] 17.5
Connections/Sec 130,000
Concurrent Connections (M) 7.2

TLS Inspection Performance

Threat Prevention [Gbps]
1,2
1.75
Threat Prevention web mix [Gbps]
2 4
1.1
IPS web mix [Gbps]
4
1.4

1
Enterprise traffic profile measured with maximum memory.
2
Includes Firewall, App Control, URLF, IPS. Anti Malware and SandBlast (Incl. DNS Security & Zero Phishing) with logging enabled.
3
Includes Firewall. App Control and IPS with logging enabled.
4
Web traffic mix is based on RFC 9411 (NetSecOpen) web traffic profile.

© 2025 Check Point Software Technologies Ltd. All rights reserved | June 3, 2025
 DATASHEET
QUANTUM Force 3950 4

Network Physical

Network Connectivity Power Requirements

• Optimized for SD-WAN, network efficiency and resilience • Dual External AC-DC Adaptors
• Single AC-DC Adaptor ratings: 60W
• Total physical and virtual (VLAN) interfaces per appliance: 1024/4096
(single gateway/with virtual systems) • Power input: 100 to 240VAC (50-60Hz)
• Power consumption avg/max: 46W/54W
• 802.3ad passive and active link aggregation
• Maximum thermal output avg/max: 160.73 BTU/hr /191.07 BTU/hr
• Layer 2 (transparent) and Layer 3 (routing) mode

High Availability
Dimensions
• Active/Active L2, Active/Passive L2 and L3
• Enclosure: Desktop
• Session failover for routing change, device and link failure
• Dimensions (WxDxH): 8.27 x 8.26 x 1.67 in. (210 x 209.9 x 42.5mm)
• ClusterXL or VRRP
• Weight: 2.17 lbs / 0.988 kg
• Box Weight: 4.52 lbs / 2.052 kg
IPv6
• Box Dimensions: 10.43 in(L) x 9.45 in(W) x 4.33 in(H)
• NAT66, NAT64, NAT46
26.5 cm(L) x 24 cm(W) x 11 cm(H)
• CoreXL, SecureXL, HA with VRRPv3

Unicast and Multicast Routing (see SK98226) Environmental Conditions

• OSPFv2 and v3, BGP, RIP • Operating: 32°F - 104°F 0ºC - 40ºC, humidity 5% to 95%
• Static routes, Multicast routes • Storage: -4°F - 158°F –20° - 70°C, humidity 5% to 95%
• Policy-based routing • MTBF: 234086 hrs @ 25°C / 138550 hrs @ 40°C
• PIM-SM, PIM-SSM, PIM-DM, IGMP v2, and v3 • Noise Level: 34.3dB

Certifications
• Safety: CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1
• Emissions: CE, FCC IC, VCCI, ASNZS ACMA
• Environmental: ROHS, REACH, WEEE, ISO14001

© 2025 Check Point Software Technologies Ltd. All rights reserved | June 3, 2025
 DATASHEET
QUANTUM Force 3950 5

Hardware QF 3950

RJ-45 (1 GbE) 8x 1GbE

RJ-45 (2.5 GbE) 2x 2.5GbE

RJ-45 (10 GbE) 2x 10GbE

Console USB Type C & RJ-45

USB 1x USB 3.0 Type A

Memory 32 GB

Storage 480 GB SSD NVME M.2

PSU Dual (External)

Dimensions

Dimensions (W x D x H) 8.27 x 8.26 x 1.67 in. (210 x 209.9 x 42.5mm)

Weight 4.524 lbs / 2.052 kg

Environment

Operating / Storage 32°F - 104°F 0ºC - 40ºC / -4°F - 158°F –20° - 70°C

MTBF 234086 hrs @ 25°C / 138550 hrs @ 40°C

Power Requirements

AC Input 100 - 240VAC (50-60Hz)

Power Supply Rating 12V/5A 60W power adapter

Power Consumption Max. 54W

Heat Dissipation Max. (BTU/hr.) 192

Noise Level @ 25oc (dB) 34.3

Certifications

Safety CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASNZS 62368.1

Emissions CE, FCC IC, VCCI, ASNZS ACMA

Environmental ROHS, REACH, WEEE, ISO14001

© 2025 Check Point Software Technologies Ltd. All rights reserved | June 3, 2025
 DATASHEET
QUANTUM Force 3950 6

VIRTUAL SYSTEM

Firewall VS Firewall + IPS VS Next Gen. Threat Prevention VS

# of VS’s 28 14 7

ORDERING QUANTUM FORCE 3950 SECURITY GATEWAY

The 3950 includes 1x1GbE copper GbE management port plus an additional 8x 1GbE ports for synchronization when using the 3950 in a cluster. With the 8 network I/O ports, to
meet your networking requirements. The 2x10GbE Ports enables firewall traffic acceleration at line-rate.

Security Appliance SKU

3950 configuration: 1x1GbE RJ45 management port & 1x1GbE RJ45 sync port, on-board 8x1GbE RJ45 ports,
2x2.5GbE RJ45 ports, 2x10GbE RJ45 ports, 32 GB RAM, 1x 480 GB SSD SATA, 1x AC external PSUs, SandBlast (SNBT) CPAP-SG3950-SNBT
Security Subscription Package for 1 Year

Next Generation Threat Prevention & SandBlast package for 1 year for Quantum Force 3950 appliance CPSB-SNBT-3950-1Y

Next Generation Threat Prevention package for 1 year for Quantum Force 3950 appliance CPSB-NGTP-3950-1Y

Next Generation Firewall Package for 1 year for Quantum Force 3950 appliance CPSB-NGFW-3950-1Y

Quantum IoT Network Protection for 1 year for Quantum Force 3950 appliances CPSB-IOTP-3950-1Y

Quantum SD-WAN subscription for 1 year for Quantum Force 3950 appliances CPSB-SDWAN-3950-1Y

Data Loss Prevention (DLP) blade for 1 year for Quantum Force 3950 appliances CPSB-DLP-3950-1Y

Accessories SKU

Replacement Power Supply for 2550W5G,2570, 2570W, 2590, 2590W, 2680, 3920 and 3950 models CPAC-2550W5G/2590/3920/3950-PSU

Rack Mount shelf for Single/Dual 2500/ 3920/ 3950 desktop appliances. The mount does not support Wi-Fi models CPAC-2500/3900-RM-DUAL

Rack Mount ears for 2570, 2590, 2680, 3920, 3950 models CPAC-2590/2680/3900-RM-EARS

© 2025 Check Point Software Technologies Ltd. All rights reserved | June 3, 2025
 DATASHEET
QUANTUM Force 3950 7

SUBSCRIPTION SERVICES NGFW NGTP SNBT (Sandblast)

Application Control   
IPS   
URL Filtering  
Anti-Bot  
Anti-Virus  
Anti-Spam  
DNS Security  
SandBlast Threat Emulation (sandboxing) 
SandBlast Threat Extraction (CDR) 
Zero Phishing 
DLP Optional Optional Optional

IoT Optional Optional Optional

SD-WAN Optional Optional Optional

Worldwide Headquarters

5 Shlomo Kaplan Street, Tel Aviv 6789159, Israel | Tel: +972-3-753-4599

U.S. Headquarters

100 Oracle Parkway, Suite 800 Redwood City, CA 94065 | Tel: 1-800-429-4391

www.checkpoint.com

© 2025 Check Point Software Technologies Ltd. All rights reserved. QF3950030625A