Datasheet | Check Point Spark 1500 Pro Security Gateways

Secure SMB and branch office networks with Check Point Spark 1500 Pro Security Gateways. Combine AI-powered threat prevention, NGFW, SD-WAN, Wi‑Fi 6, optional 5G, VPN, and simplified cloud management to strengthen cyber security and connectivity.

/live_board/v2/downloads?uid=c204c483-d74c-4044-a951-7c5c7d21d53d&redirect=true

DATASHEET QUANTUM SPARKTM 1500 PRO

QUANTUM SPARK 1500 PRO SECURITY GATEWAYS

Industry’s best security used by the world’s largest enterprises, tailored to protect your SMB from cyberattacks.

Quantum Spark 1500 Pro NGFWs are the industry’s first firewalls with integrated AI ML security and cutting- edge Wi-Fi 6 with 5G cellular. SD-WAN provides faster Internet connectivity, application performance, and maximum uptime. Managing Quantum Spark firewalls is easy via an intuitive web interface and a mobile management app.

SPARK 1500 PRO HIGHLIGHTS Next Gen Firewall Threat Prevention Interfaces

1, 300 Mbps 900 Mbps 5G, Wi-Fi 6, LAN switch

Named Leader by Top Analyst Firms: Gartner® Firewall Magic Quadrant™ Forrester Wave™: Enterprise Firewalls 2022

Top Security Effectiveness: Leader with 99.7% malware block rate in Miercom NGFW Security Benchmark 2023

AI ML powered Threat Prevention: Protect networks and users from zero-day, phishing, DNS, and ransomware attacks

All-In-One Security and Connectivity: Optimize connectivity with integrated 5G, Wi-Fi 6 and SD-WAN for remote branch offices

Unified Management and Ops Efficiency: Increase protection and reduce TCO with a consolidated security architecture

1535 and 1555 Pro Wi-Fi 1595 Pro Wi-Fi 5G

Advanced security, uncompromising performance The Check Point Quantum Spark 1500 Pro security gateway family delivers enterprise-grade security in a series of simple and affordable, all-in-one security solutions to protect small business employees, networks, and data from cyber-theft. Models with Wi- Fi, and Wi-Fi with an embedded 5G modem fit seamlessly into your home and branch office networks.

Comprehensive, Industry-Leading Security • Next Generation Firewall

• Site-to-Site, Remote Access VPN

• Application Control and Web Filtering

• Intrusion Prevention

• Antivirus and Anti-Bot

• Anti-Spam Email Security

• SandBlast Threat Emulation (sandboxing)

Part of the Quantum Cyber Security Family R81 software for SMB increases performance and brings

enterprise-grade security to small and medium size businesses.

Centrally managed SMB gateways support:

• Unified access policy: firewall, application control, URLF

• Policy layers and sub-policies

• Acceleration of domain, dynamic and time objects

• Multicore VPN and VPN acceleration

• Smart Accel 30% performance improvement of low risk, high

bandwidth apps

Wired, Wi-Fi 6, and Wi-Fi 6 with 5G Models 5G is an essential component of any enterprise

wireless WAN, either as a primary or failover link connecting

fixed remote sites or a mobile fleet of vehicles. The 1595 Pro

supports:

• Dual SIM single standby (DSSS)

• 5G antennas: 1x main, 2x MIMO, 1x Auxillary

• Global coverage

Lower the complexity of managing your security Check Point Quantum Spark management is designed to increase scalability, improve operational efficiency, and reduce the overall

cost for your business. With Zero Touch deployment and pre-defined security policies, your business is secured in minutes. Manage

security locally via a Web interface or scale management with a cloud-based Check Point Security Management service. A mobile

management app enables real-time access to immediately remediate threats on the go.

Cloud Management Quantum Spark cloud management enables service providers to

provision security efficiently across all Check Point products and

services from the Infinity Portal. Unified logs and dashboards

enables Managed Service Providers to manage hundreds of

thousands of Quantum Spark firewalls for their small and

medium business customers so they can focus on growing their

own business.

Security Management App The intuitive mobile app provides real- time monitoring of network events, alerts you when your network is at risk, enables you to quickly block security threats, and configure the security policy for multiple gateways.

• Network security snapshot: view connected devices and any threats

• Real-time security alerts: highlights attacks and unauthorized devices

• On-the-spot threat mitigation: quickly block infected devices

• Network statistic reports and charts: gain insights on network usage patterns

• Manage multiple gateways: manage security in the palm of your hand

1535, 1555 Pro (Wi-Fi model)

802.11 a/b/g/n/ac/ax Wi-Fi (option)

SPECIFICATIONS

1535 1555

Enterprise Testing Conditions

Threat Prevention with Smart Accel* 440 Mbps 600 Mbps

Threat Prevention 1 340 Mbps 450 Mbps

Next Generation Firewall 2 600 Mbps 800 Mbps

IPS Throughput 670 Mbps 900 Mbps

Firewall Throughput 1,000 Mbps 1,000 Mbps

RFC 3511, 2544, 2647, 1242 Performance (LAB)

Firewall 1518 Byte UDP Packets 2,000 Mbps 2,000 Mbps

VPN AES-128 Throughput 970 Mbps 1,300 Mbps

Connections per Second 10,500 14,000

Concurrent Connections 1,000,000 1,000,000

Software

Security Firewall, VPN, User Aware, QoS, Application Control, URLF, IPS, Anti-Bot, Antivirus, Anti-Spam, sandboxing

Unicast, Multicast Routing and Clustering OSPFv2, BGPv4 and 4++, RIP, PIM (SM, DM, SSM), IGMP, ClusterXL High Availability

IPv6 local network and internet connections, dual stack tunneling IPv4 over IPv6 networks, prefix delegation

Mobile Access License (Users) 100 remote SNX or Mobile VPN client users

Hardware

WAN Port 1x 10/100/1000Base-T RJ-45 port

LAN Ports 5x 10/100/1000Base-T RJ-45 ports

Wi-Fi (optional) 802.11 a/b/g/n/ac/ax MU-MIMO 3x3

Radio Band One radio band non-concurrent: 2.4GHz or 5GHz

Console Port 1x USB-C

USB Port 1x USB 3.0

Dimensions

Enclosure Desktop, wall mount

Dimensions (W x D x H) 210 x 160 x 37.5 mm, 8.3 x 6.3 x 1.5 in.

Weight 0.43 kg (0.95 lbs.)

Environment

Operating / Storage 0ºC ~ 40ºC / -45ºC ~ 60ºC (5~95%, non-condensing)

Power Requirements

AC Input 100 – 240VAC, 50 – 60 Hz

Power Supply Rating 12V/3.3A 40W power adapter

Power Consumption (Max) 17.92 (non-Wi-Fi); 21.95W (Wi-Fi)

Heat Dissipation 61.11(non-Wi-Fi); 74.85(Wi-Fi)

1. Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot, SandBlast Zero-Day Protection with logging. 2. Includes Firewall, Application Control, IPS with logging. * Smart Accel is available on release R81.10 and above. Smart Accel must be enabled on Web UI and is currently supported on devices managed via Web UI or SMP

SPECIFICATIONS

1575 1595

Enterprise Testing Conditions

Threat Prevention with Smart Accel* 650 Mbps 900 Mbps

Threat Prevention 1 500 Mbps 660 Mbps

Next Generation Firewall 2 970 Mbps 1,300 Mbps

IPS Throughput 1,050 Mbps 1,400 Mbps

Firewall Throughput 2,800 Mbps 2,800 Mbps

RFC 3511, 2544, 2647, 1242 Performance (LAB)

Firewall 1518 Byte UDP Packets 6,400 Mbps 6,400 Mbps

VPN AES-128 Throughput 1,950 Mbps 2,600 Mbps

Connections per Second 15,750 21,000

Concurrent Connections 1,000,000 1,000,000

Software

Security Firewall, VPN, User Aware, QoS, Application Control, URLF, IPS, Anti -Bot, Antivirus, Anti-Spam, sandboxing

Unicast, Multicast Routing and Clustering OSPFv2, BGPv4 and 4++, RIP, PIM (SM, DM, SSM), IGMP, ClusterXL High Availability

IPv6 local network and internet connections, dual stack tunneling IPv4 over IPv6 networks, prefix delegation

Mobile Access License (Users) 200 remote SNX or Mobile VPN client users

Hardware

WAN Port 1x 10/100/1000Base-T RJ-45 port

DMZ Port 1x 10/100/1000Base-T RJ-45 / 1x 1000BaseF SFP port (transceiver not included)

LAN Ports 8x 10/100/1000Base-T RJ-45 ports

Wi-Fi (optional) 802.11 a/b/g/n/ac/ax MU-MIMO 4x4

Radio Band Two radio bands concurrent: 2.4GHz and 5GHz

5G (1595 option) Sub-6 GHz, max 4.5Gbps downlink speed and 660Mbps uplink speed. external SIM support. Dual SIM single standby (DSSS). 4x4

MIMO

Console, USB ports Console: 1x USB-C, USB1x USB 3.0:

SD Card Slot Micro-SD slot

Dimensions

Dimensions (W x D x H) Desktop form factor: 210 x 170 x 42 mm, 8.3 x 6.7 x 1.7 in.

Weight 0.87 kg (1.9 lbs.)

Environment

Operating / Storage 0ºC ~ 40ºC / -45ºC ~ 60ºC (5~95%, non-condensing)

Power Requirements

AC Input 100 – 240VAC, 50 – 60 Hz

Power Supply Rating 12V/3.3A 40W power adapter (non-Wi-Fi), 12V/5A 60W power adapter (all Wi-Fi models)

Power Consumption (Max) 26.01W (non-Wi-Fi); 31.28W (Wi-Fi); 35.5W (Wi-Fi-LTE), 37.26W (Wi-Fi-DSL)

Heat Dissipation (BTU/hr.) 88.75 (non-Wi-Fi); 106.73 (Wi-Fi), 121.13 (Wi-Fi-LTE); 127.14 (Wi-Fi-DSL)

1595 Pro (Wi-Fi, 5G model)

802.11 a/b/g/n/ac/ax (Wi-Fi 5G option)

8x 1GbE LAN switch

1x 1GbE copper/fiber DMZ port

1x 1GbE WAN port

USB 3.0 port

USB-C console port

12V power connector

4 5 3

6 7

SPECIFICATIONS (Continued)

CERTIFICATIONS

1535, 1555

Safety CB 62368-1, CE, CE 62368-1, UL 62638-1, CB 60950-1

Emissions FCC IC Class B, CE LVD, VCCI, AS/NZS RCM EMC

Environment RoHS, REACH, WEEE

1575, 1595

Safety CB 62368-1, CE, CE 62368-1, UL 62638-1

Emissions FCC IC Class B, VCCI, AS/NZS RCM EMC

Environment RoHS, REACH, WEEE

Cellular1 PTCRB, GCF and Carriers AT&T and Verizon certified

1. 1595 models with embedded cellular modem

ORDERING QUANTUM SPARK 1500 PRO SECURITY APPLIANCES 1

1535 Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year CPAP-SG1535-SNBT

1535 Wi-Fi Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year CPAP-SG1535W-SNBT-xx

1555 Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year CPAP-SG1555-SNBT

1555 Wi-Fi Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year CPAP-SG1555W-SNBT-xx

1575 Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year CPAP-SG1575-SNBT

1575 Wi-Fi Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year CPAP-SG1575W-SNBT-xx

1595 Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year CPAP-SG1595-SNBT

1595 Wi-Fi Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year CPAP-SG1595W-SNBT-xx

1595 Wi-Fi + 5G* Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year CPAP-SG1595W5G-SNBT-xx

WI-FI REGIONS (replace –xx in the SKU to specify the Wi-Fi region)

USA, Canada change –xx to -US

Europe change –xx to -EU

Japan change –xx to -JP

Australia, Argentina change –xx to -AU

Israel change –xx to -IL

China change –xx to -CN

India, Chile change –xx to -IN

New Zealand change –xx to -NZ

Latin America, Singapore, Hong Kong, Thailand, Sri-Lanka change –xx to -LA

ACCESSORIES

SFP Short range transceiver (for the DMZ 1000BaseF port) CPAC-1500-TR-1SX

SFP Long range transceiver (for the DMZ 1000BaseF port) CPAC-1500-TR-1LX

DSL modem in SFP form factor for 1570, 1590 WLTE CPAC-1500-TR-DSL

DSL modem in SFP form factor for 1570, 1590 WLTE with TAE cable CPAC-1500-TR-DSL-B

SD memory card 32 GB CPAC-1500-32GB-SD

SD memory card 64 GB CPAC-1500-64GB-SD

Replacement Wi-Fi Antenna CPAC-1500-WIFI-ANTENNA

Replacement 40W AC Power Supply for 1555 and 1595 Wired CPAC-1550-PSU

Replacement 60W AC Power Supply for 1575 and 1595 Wi-Fi and Wi-Fi-LTE CPAC-1590-PSU

Rack Mount kit for the 1500 CPAC-1500/3600-RM-DUAL 1 Add a NGFW, NGTP or NGTX subscription. Promotion bundles for 3 and 5 years include the security appliance, support and subscription package (see below). License includes SMP cloud management. * The 5G option will be available starting in May 2023

IOT, SD-WAN AND MOBILE SOFTWARE BLADES 1

Mobile Access Blade for 50 concurrent connections CPSB-MOB-50

Quantum IoT Protect for 1 year for 15x5 Firewall (1535, 1555, 1575, 1595) CPSB-IOTP-15x5-1Y

Quantum SD-WAN for 1 year for 15x5 Firewall (1535, 1555, 1575, 1595) CPSB-SDWAN-15x5-1Y

1 Concurrent remote SNX or Mobile VPN client users. The MOB license is additive. The full Mobile Access web portal functionalit y is not supported.

3 and 5 Year Security Appliance, Support and Services Bundles

NGFW NGTP SNBT

Security Appliance (wired, Wi-Fi or Wi-Fi with embedded 5G)   

Premium Support (24 x 7 response, software upgrades and more)   

PRO Support option (proactive health monitoring service)   

Firewall   

VPN   

Mobile Access (includes 100 concurrent users in the 1535, 1555 or 200 in the 1575, 1595)    Application Control   

Intrusion Prevention System   

URL Filtering  

Antivirus and Anti-Bot  

Anti-Spam and Email Security  

DNS Security  

Threat Emulation (sandboxing)  IoT Network protection for SMBs*  SD-WAN network optimization for SMBs*   

IoT network protection for enterprises** Optional Optional Optional

SD-WAN network optimization for enterprises** Optional Optional Optional

Optional security capabilities can be ordered a-la-carte or separately. * Starting from release R81.10.10. and supported on Web UI and Spark Management only

** Supported on Smart-1 only

SUBSCRIPTION SERVICES SEE THE TABLE ABOVE FOR SECURITY CAPABILITIES INCLUDED IN THE NGFW, NGTP AND SNBT SERVICES PACKAGES. IOT AND SD-WAN ARE ORDERED A LA CARTE SERVI CE SERVICES HIGHLIGHTS

Next-Gen Firewall (NGFW): segment networks and apply zero trust policy with IPS

• Accept, prevent, schedule, and apply traffic-shaping based controls to application traffic

• 10,000+ pre-defined apps or customize your own application

• Protect vulnerable systems with 12,000+ IPS protections

Next-Gen Threat Prevention (NGTP): AI Deep Learning DNS security with antivirus and anti-bot prevents threats

• DNS security prevents Command & Control (C2) connections and blocks data theft through DNS tunneling

• Antivirus stops incoming malicious files and links in web, email, FTP and SMB content

• Anti-Bot detects infected hosts and prevents communications with external C2 servers

• Apply web and application control using 100+ categories or customize your own

SandBlast (SNBT): comprehensive, multi-layered defense with sandboxing protection from unknown and zero-day threats

• Average emulation time for unknown files that require full sandbox evaluation is under 100 seconds

• Emulation OS Support: Windows XP, 7, 8.1, 10 applications

• CPU-level, OS-level and static file analysis

• Maximal file size for Emulation is 15MB

IoT Network Protection: simple, effective, autonomous discovery and protection of IoT devices in minutes

• Passive and active discovery of enterprise IoT devices with autonomous mapping to 200+ profiles

• IoT attributes include function, manufacturer, model, risk, confidence, VLAN, IP and MAC address

• Automatically creates and applies an inline zero-trust IoT policy layer

• Sees and controls over 1,500 IoT and OT protocols and commands

SD-WAN: reliable and optimum network connectivity at the lowest cost

• Link aggregation and link prioritization according to latency, jitter, and packet loss

• Advanced multi-path orchestration and steering for 10,000+ apps

• Sub-second failover for overlay and supported applications

• SLA monitoring and autonomous link swapping

Note: Spark appliances offer SD-WAN Local Breakout capabilities when managed through the local web UI or Spark Management Infinity portal application service. These capabilities come without the need for additional licensing. When managed through a Smart Management server or the Smart-1 Cloud Infinity Portal services, they can leverage both SD-WAN Local Breakout and VPN Overlay. However, it's important to note that additional Quantum SD-WAN licensing is required in this specific use case.

Datasheet | Check Point Spark 1500 Pro Security Gateways

Item Type: pdf