Predictika · Security gateway orders

An AI sales agent's firewall order, checked before it goes out

An AI sales agent prepares an order for a Check Point Quantum Force perimeter firewall: a model, a Base, Plus or Max configuration, the ports, memory, concurrent sessions and virtual systems it needs, the threat prevention and VPN throughput, and the rating it states for the model. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the figures Check Point publishes in its appliance comparison chart and returns a verdict, every reason and the figures it computed.

Scope: Check Point Quantum Force 9100, 9200, 9300, 9400, 9700 and 9800 firewalls in the Base, Plus and Max configurations. See everything this validator covers

This validator models orders for the Check Point Quantum Force 9100 to 9800 (1U perimeter firewalls), not just the scenarios shown below.

  • Configuration limits — each model and each of its Base, Plus and Max configurations lists the 1/10 GbE fiber, 10/25 GbE and 40/100 GbE ports it offers, its memory, its concurrent sessions and its on-board copper ports; an order that asks for more than the listed configuration is blocked.
  • Virtual systems — the maximum number of virtual systems depends on the model, the configuration and the software set (firewall, firewall with IPS, or next generation threat prevention).
  • Throughput — the threat prevention, VPN and HTTPS inspection throughput the order needs is compared with the rating Check Point lists for the model, and so is the rating the order states.
  • Options and scale-out — redundant storage is listed for the 9700 and 9800 only; a Maestro scale-out system is checked against the listed Maestro scalability and goes to a person.

Any order for these six Quantum Force models that touches these rules is in scope — not only the scenarios pictured here. Not covered: prices (Check Point publishes no list prices for these appliances, so this validator produces no price build-up or line-item quote), the Quantum Force 19100 to 29200 data center models, the Quantum Spark and legacy gateways, Smart-1 management, software subscriptions and support, how many expansion cards fit in the network slots (the comparison chart and the datasheets describe the slots differently, so only the listed port counts are checked), the Maestro hyperscale ordering options, and licensing. Assumptions: the Base, Plus and Max port and memory counts are taken as the limits of each configuration; the Maestro approval is this model's way of passing a scale-out design to a person. The model reflects the comparison chart dated February 1, 2026 and the Force datasheets read in October 2026; later editions may differ.

The AI sales agentBuilds the gateway order from the conversation and says it is ready.
Predictika validatorChecks every rule at once and returns the verdict, each finding, and the computed figures.

7 scenarios in 3 groups · each group runs from the agent’s first attempt to the outcome · click one to switch

What the agent proposes

The AI sales agent says

Illustrative agent statement. The validator receives the structured request below.

Proposing agent: AI sales agent (scripted)

Before sending, the agent must call Recorded run

Predictika validator


      

        
        
        
      

      
Waiting for the call.

      
    

  

  
  

    
Where rules-based CPQ gets it wrong
Click to expand
    
Our assessment of what a typical rules-based CPQ (product rules, price rules and validation rules, as in Salesforce CPQ) does with the same cases. It is a judgment about effort and reliability, not a claim that nothing can be built.

    
What the validator caughtTypical rules-based CPQPredictika
A port count that depends on the model and the configurationOnly with care
Port counts differ for six models and three configurations, so a long table and a rule reading it have to be kept in step.		Model, configuration and port counts are in one request; the table is applied on every call.
A virtual-system limit that depends on model, configuration and software setOnly with workarounds
The limit changes with three selections at once; a rules-based CPQ needs a lookup keyed to all three.		The three choices are checked together with the count requested.
HTTPS inspection throughput lower than the headline ratingOnly with workarounds
Two ratings per model, and the lower one applies only when inspection is on; extra formulas are needed.		The rule is applied whenever inspection is requested.
A stated rating that disagrees with the published valueOnly with workarounds
The published figure is derived from the model; checking a stated figure against it takes extra formulas.		The stated rating is a field in the request and is compared with the published value.
Every problem returned in one answerOnly with workarounds
Rules tend to fire as the order is saved or a step is completed, so a rep often fixes one error and meets the next.		All findings come back together, whatever order the choices arrived in.

  

  

    
What this validator catches: findings from its test cases
Click to expand
    
Every rule is checked on every call, in any order the choices arrive; one problem never hides another. Blocking findings stop the quote; approval findings need a person to sign off; everything else is computed.

    
1The quote has 12 1/10 GbE fiber ports; this model and configuration offer up to 4.
2The quote asks for 32 GB of memory; this model and configuration have 16 GB.
3The quote needs 7,000 thousand concurrent sessions; this model and configuration are listed for 2,750 thousand.
4The quote has 10 virtual systems; with the selected software set this model and configuration support up to 9.
5The quote has 4 10/25 GbE fiber ports; this model and configuration offer up to 0.
6The quote has 2 40/100 GbE fiber ports; this model and configuration offer up to 0.
7The quote has 8 on-board 1/10 GbE copper ports; this model has 6.
8The quote needs 7,500 thousand concurrent sessions; this model and configuration are listed for 7,270 thousand.
9The quote has 17 virtual systems; with the selected software set this model and configuration support up to 16.
10The quote has 65 virtual systems; with the selected software set this model and configuration support up to 64.
11Redundant storage is not listed for this model.
12The quote needs 15,000 Mbps of threat prevention; this model is rated for 14,000 Mbps.
13With HTTPS inspection the quote needs 8,000 Mbps of threat prevention; this model is rated for 5,500 Mbps with HTTPS inspection.
14The quote needs 40,001 Mbps of VPN throughput; this model is rated for 40,000 Mbps.
15The quote states 15,000 Mbps of threat prevention for this model, but the listed rating is 14,000 Mbps.
16A Maestro scale-out system is requested; a person should confirm the orchestrator and gateway count, which this validator does not size.
17The quote needs 170,000 Mbps of threat prevention; a Maestro system of this model scales up to 165,000 Mbps.
18The quote asks for 128 GB of memory; this model and configuration have 64 GB.
19The quote needs 29,000 thousand concurrent sessions; this model and configuration are listed for 15,000 thousand.
20The quote has 8 1/10 GbE fiber ports; this model and configuration offer up to 0.
21The quote has 12 virtual systems; with the selected software set this model and configuration support up to 9.
22The quote needs 9,000 Mbps of threat prevention; this model is rated for 8,000 Mbps.
23The quote needs 30,000 Mbps of VPN throughput; this model is rated for 28,600 Mbps.
24The quote states 9,000 Mbps of threat prevention for this model, but the listed rating is 8,000 Mbps.

  

  

    
Scenarios and results
Click to expand
    
The recorded result of the validator for each scenario on this page: the request the AI agent sent, the verdict, and every finding, in the order they appear above.

    
1. Virtual systems and storage: A Force 9200 with 30 virtual systems and redundant storage

    
The agent's request. Please prepare an order for a Check Point Quantum Force 9200 in the Plus configuration with 8 1/10 GbE fiber ports, 32 GB of memory, room for 7,000 thousand concurrent sessions and 30 virtual systems running next generation threat prevention. It must handle 7,000 Mbps of threat prevention and 25,000 Mbps of VPN throughput, and redundant storage. The order states a threat prevention rating of 8,000 Mbps for this model. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • More virtual systems than the configuration supports. The quote has 30 virtual systems; with the selected software set this model and configuration support up to 12.
    • 
      
  • Redundant storage not offered on this model. Redundant storage is not listed for this model.
    • 
    

    
2. Virtual systems and storage: The agent resubmits after fixing the errors

    
The agent's request. Please prepare an order for a Check Point Quantum Force 9700 in the Plus configuration with 8 1/10 GbE fiber ports, 32 GB of memory, room for 7,000 thousand concurrent sessions and 30 virtual systems running next generation threat prevention. It must handle 7,000 Mbps of threat prevention and 25,000 Mbps of VPN throughput, and redundant storage. The order states a threat prevention rating of 20,000 Mbps for this model. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Order summary. Up to 12 fiber ports of 1/10 GbE, 64 GB of memory, 20,000 Mbps of threat prevention and 32 virtual systems for this model and configuration.
    • 
    

    
3. Ports and memory: A Force 9400 Base with 12 fiber ports

    
The agent's request. Please prepare an order for a Check Point Quantum Force 9400 in the Base configuration with 12 1/10 GbE fiber ports, 32 GB of memory, room for 2,750 thousand concurrent sessions and 8 virtual systems running next generation threat prevention. It must handle 12,000 Mbps of threat prevention and 30,000 Mbps of VPN throughput. The order states a threat prevention rating of 14,000 Mbps for this model. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • More 1/10 GbE fiber ports than the configuration offers. The quote has 12 1/10 GbE fiber ports; this model and configuration offer up to 4.
    • 
      
  • More memory than the configuration includes. The quote asks for 32 GB of memory; this model and configuration have 16 GB.
    • 
    

    
4. Ports and memory: The agent resubmits after fixing the errors

    
The agent's request. Please prepare an order for a Check Point Quantum Force 9400 in the Plus configuration with 12 1/10 GbE fiber ports, 32 GB of memory, room for 2,750 thousand concurrent sessions and 8 virtual systems running next generation threat prevention. It must handle 12,000 Mbps of threat prevention and 30,000 Mbps of VPN throughput. The order states a threat prevention rating of 14,000 Mbps for this model. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Order summary. Up to 12 fiber ports of 1/10 GbE, 32 GB of memory, 14,000 Mbps of threat prevention and 16 virtual systems for this model and configuration.
    • 
    

    
5. HTTPS inspection: A Force 9300 with HTTPS inspection at 8,000 Mbps

    
The agent's request. Please prepare an order for a Check Point Quantum Force 9300 in the Plus configuration with 8 1/10 GbE fiber ports, 32 GB of memory, room for 7,000 thousand concurrent sessions and 10 virtual systems running next generation threat prevention. It must handle 8,000 Mbps of threat prevention and 25,000 Mbps of VPN throughput, with HTTPS inspection turned on. The order states a threat prevention rating of 10,500 Mbps for this model. It is ready to send.

    
Verdict: Blocked.

    
    
      
  • Threat prevention need above the HTTPS inspection rating. With HTTPS inspection the quote needs 8,000 Mbps of threat prevention; this model is rated for 5,100 Mbps with HTTPS inspection.
    • 
    

    
6. HTTPS inspection: The agent resubmits after fixing the errors

    
The agent's request. Please prepare an order for a Check Point Quantum Force 9700 in the Plus configuration with 8 1/10 GbE fiber ports, 32 GB of memory, room for 7,000 thousand concurrent sessions and 10 virtual systems running next generation threat prevention. It must handle 8,000 Mbps of threat prevention and 25,000 Mbps of VPN throughput, with HTTPS inspection turned on. The order states a threat prevention rating of 20,000 Mbps for this model. It is ready to send.

    
Verdict: Allowed.

    
    
      
  • Order summary. Up to 12 fiber ports of 1/10 GbE, 64 GB of memory, 20,000 Mbps of threat prevention and 32 virtual systems for this model and configuration.
    • 
    

    
7. Scale-out: A Force 9800 Maestro system at 120,000 Mbps

    
The agent's request. Please prepare an order for a Check Point Quantum Force 9800 in the Plus configuration with 12 1/10 GbE fiber ports, 64 GB of memory, room for 15,000 thousand concurrent sessions and 30 virtual systems running next generation threat prevention. It must handle 120,000 Mbps of threat prevention and 50,000 Mbps of VPN throughput, as a Maestro scale-out system. It is ready to send.

    
Verdict: Needs approval.

    
    
      
  • Maestro scale-out to confirm. A Maestro scale-out system is requested; a person should confirm the orchestrator and gateway count, which this validator does not size.
    • 
      
  • Order summary. Up to 12 fiber ports of 1/10 GbE, 64 GB of memory, 25,000 Mbps of threat prevention and 40 virtual systems for this model and configuration.
    • 
    

  

  

    
Narration transcript
Click to expand
    
The text of the narrated walkthrough, step by step.

    
    
      
  1. Welcome to a demo of Predictika's Validator. An AI sales agent prepares an order for a Check Point Quantum Force perimeter firewall: a model, a Base, Plus or Max configuration, and more. Before it goes out, the agent sends it to Predictika, which checks it against a declarative model of the figures Check Point publishes in its appliance comparison chart and returns a verdict, every reason and the figures it computed.
    2. 
      
  2. I will start with the first request by the agent.
    3. 
      
  3. The agent says. Please prepare an order for a Check Point Quantum Force 9200 in the Plus configuration. It must handle 7,000 Mbps of threat prevention and 25,000 Mbps of VPN throughput, and redundant storage. The rest of the request is on screen. The order states a threat prevention rating of 8,000 Mbps for this model.
    4. 
      
  4. Before it goes out, the agent calls the validator.
    5. 
      
  5. Blocked, with two findings, all in one answer. The quote has 30 virtual systems; with the selected software set this model and configuration support up to 12. Redundant storage is not listed for this model.
    6. 
      
  6. The validator returned two blocking findings in one answer. A check that reads one field at a time would pass most of this; it shows only when the choices in the quote are checked against each other.
    7. 
      
  7. What this shows: for a virtual-system limit that depends on model, configuration and software set, a rules-based CPQ can do this only with workarounds.
    8. 
      
  8. Now the agent resubmits.
    9. 
      
  9. The corrected request. It changes the model to Force 9700 and the stated threat prevention rating as to 20,000 Mbps.
    10. 
      
  10. It calls the validator again.
    11. 
      
  11. This time the validator clears it.
    12. 
      
  12. Both earlier findings are cleared, and the validator's figure matches the quote.
    13. 
      
  13. Two problems caught in one call, fixed in one pass, and a clean quote. That is the value of Predictika's validator: catching mistakes before they reach the customer.
    14.