Check Point 1500 Pro Security Gateway Datasheet
DATASHEET
TM
QUANTUM SPARK 1500 PRO
QUANTUM SPARK 1500 PRO SECURITY GATEWAYS
1535 and 1555 Pro Wi-Fi 6
1595 Pro Wi-Fi 6 & 5G
Top Security Effectiveness
Check Point #1 for the 2nd year in a row with
99.8% malware block rate in Miercom Next-
Generation Firewall Security Benchmark
(2024)
Forrester Wave for Zero Trust Platform
Providers, Q3 2023
Gartner® Firewall Magic Quadrant (2022)
AI/ML powered Threat Prevention
Named a Leader by Top Analyst Firms
Industry’s best security used by the world’s
largest enterprises, tailored to protect your
SMB from cyberattacks.
Quantum Spark 1500 Pro NGFWs are the industry’s
first firewalls with integrated AI ML security and
cutting-edge Wi-Fi 6 with 5G/LTE cellular. SD-WAN
provides faster Internet connectivity, application
performance, and maximum uptime. Managing
Quantum Spark firewalls is easy via an intuitive
web interface and a mobile management app.
| Next Gen Firewall | Threat Prevention | Interfaces |
|---|---|---|
| 1,300 Mbps | 900 Mbps | 5G，Wi-Fi6，LAN switch |
Advanced security, uncompromising performance
The Check Point Quantum Spark 1500 Pro security gateway family delivers enterprise-grade security in a series of simple
and affordable, all-in-one security solutions to protect small business employees, networks, and data from cyber-theft.
Models with Wi-Fi, and Wi-Fi with an embedded 5G modem fit seamlessly into your home and branch office networks.
Comprehensive, Industry-Leading Security • Next Generation Firewall • Site-to-Site, Remote Access VPN • Application Control and Web Filtering • Intrusion Prevention • Antivirus and Anti-Bot • Anti-Spam Email Security • SandBlast Threat Emulation (sandboxing)
Check Point is #1 in Miercom 2024 Security Benchmark Highest Threat Prevention Scores for 2nd year in a row
• 5G antennas: 1x main, 2x MIMO, 1x Auxiliary • Global coverage
The 1595/1575 LTE Pro supports: • Internal Dual SIM • 2 x LTE antennas: 1x main 1x Auxiliary
Part of the Quantum Cyber Security Family
R81 software for SMB increases performance and brings
• Global coverage
R81 software for SMB increases performance and brings
enterprise-grade security to small and medium size
businesses. Centrally managed SMB gateways support:
• Unified access policy: firewall, application control, URLF
• Smart Accel 30% performance improvement of low risk,
high bandwidth apps
Lower the complexity of managing your security
Check Point Quantum Spark management is designed to increase scalability, improve operational efficiency, and reduce the overall cost for your business. With Zero Touch deployment and pre-defined security policies, your business is secured in minutes. Manage security locally via a Web interface or scale management with a cloud-based Check Point Security Management service. A mobile management app enables real-time access to immediately remediate threats on the go.
Cloud Management
Quantum Spark cloud management enables service providers to provision security efficiently across all Check Point products and services from the Infinity Portal. Unified logs and dashboards enable Managed Service Providers to manage hundreds of thousands of Quantum Spark firewalls for their small and medium business customers so they can focus on growing their own business.
Security Management App
The intuitive mobile app provides real-time monitoring of network events, alerts you when your network is at risk, enables you to quickly block security threats, and configure the security policy for multiple gateways.
- Network security snapshot: view connected devices and any threats
- Real-time security alerts: highlights attacks and unauthorized devices
- On-the-spot threat mitigation: quickly block infected devices
- Network statistic reports and charts: gain insights on network usage patterns
- Manage multiple gateways: manage security in the palm of your hand
CHECK POINT
1535, 1555 Pro (Wi-Fi model)
2 USB port
5x 1GbE LAN switch
1x 1GbE WAN interface
SPECIFICATIONS
| 1535 | 1555 | ||
|---|---|---|---|
| Enterprise Testing Conditions | |||
| Threat Prevention with Smart Accel* | 440 Mbps | 600 Mbps | |
| Threat Prevention¹ | 340 Mbps | 450 Mbps | |
| Next Generation Firewall² | 600 Mbps | 800 Mbps | |
| IPS Throughput | 670 Mbps | 900 Mbps | |
| Firewall Throughput | 1,000 Mbps | 1,000 Mbps | |
| RFC 3511,2544,2647,1242 Performance (LAB) | |||
| Firewall 1518 Byte UDP Packets | 2,000 Mbps | 2,000 Mbps | |
| VPN AES-128 Throughput | 970 Mbps | 1,300 Mbps | |
| Connections per Second | 10,500 | 14,000 | |
| Concurrent Connections | 1,000,000 | 1,000,000 | |
| Software | |||
| Security | Firewall,VPN,User Aware,QoS,Application Control,URLF,IPS,Anti-Bot,Antivirus,Anti-Spam,sandboxing | ||
| Unicast,Multicast Routing and Clustering | OSPFv2,BGPv4 and 4++,RIP,PIM(SM,DM,SSM),IGMP,ClusterXL High Availability | ||
| IPv6 | local network and internet connections,dual stack tunneling IPv4 over IPv6 networks,prefix delegation | ||
| Mobile Access License [Users] | 100 remote SNX or Mobile VPN client users | ||
| Hardware | |||
| WAN Port | 1x 10/100/1000Base-T RJ-45 port | ||
| LAN Ports | 5x 10/100/1000Base-T RJ-45 ports | ||
| Wi-Fi(optional) WiFi6 | 802.11 a/b/g/n/ac/ax MU-MIMO 3x3 | ||
| Radio Band | One radio band non-concurrent:2.4GHz or 5GHz | ||
| Console Port | 1x USB-C | ||
| USB Port | 1x USB 3.0 | ||
| Storage | eMMC 8GB | ||
| Dimensions | |||
| Enclosure | Desktop,wall mount | ||
| Dimensions(W x D x H) | 210 x 160 x 37.5 mm,8.3 x 6.3 x 1.5 in. | ||
| Weight | 0.43 kg[0.95 lbs.) | ||
| Environment | |||
| Operating/Storage | 0°C |
||
| Power Requirements | |||
| AC Input | 100 |
||
| Power Supply Rating | 12V/3.3A 40W power adapter | ||
| Power Consumption(Max) | 17.92(non-Wi-Fi);21.95W(Wi-Fi) | ||
| Heat Dissipation | 61.11(non-Wi-Fi);74.85(Wi-Fi) |
- Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot, SandBlast Zero-Day Protection with logging. 2. Includes Firewall, Application Control, IPS with logging.
- Smart Accel is available on release R81.10 and above. Smart Accel must be enabled on Web UI and is currently supported on devices managed via Web UI or SMP
1595 Pro (Wi-Fi, 5G model, LTE)
1 802.11 a/b/g/n/ac/ax (Wi-Fi 5G option)
2 8x 1GbE LAN switch
3 1x 1GbE copper/fiber DMZ port
4 1x 1GbE WAN port
5 USB 3.0 port
6 USB-C console port
7 12V power connector
| 1575 | 1595 | |
|---|---|---|
| Enterprise Testing Conditions | ||
| Threat Prevention with Smart Accel* | 650 Mbps | 900 Mbps |
| Threat Prevention¹ | 500 Mbps | 660 Mbps |
| Next Generation Firewall² | 970 Mbps | 1,300 Mbps |
| IPS Throughput | 1,050 Mbps | 1,400 Mbps |
| Firewall Throughput | 2,800 Mbps | 2,800 Mbps |
| RFC 3511,2544,2647,1242 Performance (LAB) | ||
| Firewall 1518 Byte UDP Packets | 6,400 Mbps | 6,400 Mbps |
| VPN AES-128 Throughput | 1,950 Mbps | 2,600 Mbps |
| Connections per Second | 15,750 | 21,000 |
| Concurrent Connections | 1,000,000 | 1,000,000 |
| Software | ||
| Security | Firewall,VPN,User Aware,QoS,Application Control,URLF,IPS,Anti-Bot,Antivirus,Anti-Spam,sandboxing | |
| Unicast,Multicast Routing and Clustering | OSPFv2,BGPv4 and 4++,RIP,PIM ISM,DM,SSM),IGMP,ClusterXL High Availability | |
| IPv6 | local network and internet connections,dual stack tunneling IPv4 over IPv6 networks,prefix delegation | |
| Mobile Access License [Users] | 200 remote SNX or Mobile VPN client users | |
| Hardware | ||
| WAN Port | 1x 10/100/1000Base-T RJ-45 port | |
| DMZ Port | 1x 10/100/1000Base-T RJ-45 / 1x 1000BaseF SFP port(transceiver not included) | |
| LAN Ports | 8x 10/100/1000Base-T RJ-45 ports | |
| Wi-Fi(optional) | 802.11 a/b/g/n/ac/ax MU-MIMO 4x4 | |
| Radio Band | Two radio bands concurrent:2.4GHz and 5GHz | |
| 5G[1595 option] | Sub-6 GHz,max 4.5Gbps downlink speed and 660Mbps uplink speed,external SIM support.Dual SIM single standby(DSSS).4x4 MIMO | |
| LTE(optional) | LTE Embedded modern supporting fallback to 3G,CAT13 with Main and Auxiliary antennas.max 400Mbps downlink speed and 150Mbps uplink speed with dual SIM support | |
| Console,USB ports | Console:1x USB-C,USB Ix USB 3.0: | |
| Storage | eMMC 16GB | |
| SD Card Slot | Micro-SD slot | |
| Dimensions | ||
| Dimensions(W x D x H) | Desktop form factor:210 x 170 x 42 mm,8.3 x 6.7 x 1.7 in. | |
| Weight | 0.87 kg[1.9 lbs.] | |
| Environment | ||
| Operating/Storage | 0°C |
|
| Power Requirements | ||
| AC Input | 100 |
|
| Power Supply Rating | 12V/3.3A 40W power adapter(non-Wi-Fi),12V/5A 60W power adapter(all Wi-Fi models) | |
| Power Consumption(Max) | 26.01W(non-Wi-Fi);31.28W(Wi-Fi);35.5W(Wi-Fi-LTE);37.26W(Wi-Fi-DSL) | |
| Heat Dissipation(BTU/hr.) | 88.75(non-Wi-Fi);106.73(Wi-Fi);121.13(Wi-Fi-LTE);127.14(Wi-Fi-DSL) |
SPECIFICATIONS (Continued)
| CERTIFICATIONS | |
|---|---|
| 1535,1555 | |
| Safety | CB 62368-1,CE,CE 62368-1,UL 62638-1,CB 60950-1 |
| Emissions | FCC IC Class B,CE LVD,VCCI,AS/NZS RCM EMC |
| Environment | RoHS,REACH,WEEE |
| 1575,1595 | |
| Safety | CB 62368-1,CE,CE 62368-1,UL 62638-1 |
| Emissions | FCC IC Class B,VCCI,AS/NZS RCM EMC |
| Environment | RoHS,REACH,WEEE |
| Cellular1 | PTCRB,GCF and Carriers AT&T and Verizon certified |
- 1595 models with embedded cellular modem
ORDERING QUANTUM SPARK 1500 PRO
| SECURITY APPLIANCES1 | |
|---|---|
| 1535 Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG1535-SNBT |
| 1535 Wi-Fi Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG1535W-SNBT-xx |
| 1555 Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG1555-SNBT |
| 1555 Wi-Fi Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG1555W-SNBT-xx |
| 1575 Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG1575-SNBT |
| 1575 Wi-Fi Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG1575W-SNBT-xx |
| 1595 Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG1595-SNBT |
| 1595 Wi-Fi Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG1595W-SNBT-xx |
| 1595 Wi-Fi + 5G Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG1595W5G-SNBT-xx |
| 1575 Wi-Fi + LTE Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG1575WLTE-SNBT-xx |
| 1595 Wi-Fi + LTE Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG1595WLTE-SNBT-xx |
ORDERING QUANTUM SPARK 1500 PRO (Continued)
IOT, SD-WAN AND MOBILE SOFTWARE BLADES 1
| Mobile Access Blade for 50 concurrent connections | CPSB-MOB-50 |
|---|---|
| Quantum IoT Protect for 1 year for 15x5 Firewall(1535,1555,1575,1595) | CPSB-IOTP-15x5-1Y |
| Quantum SD-WAN for 1 year for 15x5 Firewall(1535,1555,1575,1595) | CPSB-SDWAN-15x5-1Y |
- Concurrent remote SNX or Mobile VPN client users. The MOB license is additive. The full Mobile Access web portal functionality is not supported.
Services Bundles
| NGFW | NGTP | SNBT | |
|---|---|---|---|
| Security Appliance (wired, Wi-Fi or Wi-Fi with embedded 5G) | √ | √ | √ |
| Premium Support (24 x 7 response, software upgrades and more) | √ | √ | √ |
| PRO Support option (proactive health monitoring service) | √ | √ | √ |
| Firewall | √ | √ | √ |
| VPN | √ | √ | √ |
| Mobile Access (includes 100 concurrent users in the 1535, 1555 or 200 in the 1575, 1595) | √ | √ | √ |
| Application Control | √ | √ | √ |
| Intrusion Prevention System | √ | √ | √ |
| URL Filtering | √ | √ | |
| Antivirus and Anti-Bot | √ | √ | |
| Anti-Spam and Email Security | √ | √ | |
| DNS Security | √ | √ | |
| Threat Emulation(sandboxing) | √ | ||
| IoT Network protection for SMBs* | √ | ||
| SD-WAN network optimization for SMBs* | √ | √ | √ |
| IoT network protection for enterprises** | Optional | Optional | Optional |
| SD-WAN network optimization for enterprises** | Optional | Optional | Optional |
- Starting from release R81.10.10. and supported on Web UI and Spark Management only. Does not support VPN overlay. ** Supported on Smart-1 only
SUBSCRIPTION SERVICES
SEE THE TABLE ABOVE FOR SECURITY CAPABILITIES INCLUDED IN THE NGFW, NGTP AND SNBT SERVICES PACKAGES. IOT AND SD-WAN ARE ORDERED A LA CARTE.
SERVICE SERVICES HIGHLIGHTS
| SERVICE | SERVICES HIGHLIGHTS |
|---|---|
| Next-Gen Firewall (NGFW): segment networks and apply zero trust policy with IPS | Accept, prevent, schedule, and apply traffic-shaping based controls to application traffic10,000+ pre-defined apps or customize your own applicationProtect vulnerable systems with 12,000+ IPS protections |
| Next-Gen Threat Prevention (NGTP):AI Deep Learning DNS security with antivirus and anti-bot prevents threats | DNS security prevents Command & Control(C2) connections and blocks data theft through DNS tunnelingAntivirus stops incoming malicious files and links in web, email,FTP and SMB contentAnti-Bot detects infected hosts and prevents communications with external C2 serversApply web and application control using 100+ categories or customize your own |
| SandBlast(SNBT):comprehensive,multi-layered defense with sandboxing protection from unknown and zero-day threats | Average emulation time for unknown files that require full sandbox evaluation is under 100 secondsEmulation OS Support:Windows XP,7,8.1,10 applicationsCPU-level,OS-level and static file analysisMaximal file size for Emulation is 15MB |
| IoT Network Protection:simple,effective,autonomous discovery and protection of IoT devices in minutes | Passive and active discovery of enterprise IoT devices with autonomous mapping to 200+ profilesIoT attributes include function,manufacturer,model,risk,confidence,VLAN,IP and MAC addressAutomatically creates and applies an inline zero-trust IoT policy layerSees and controls over 1,500 IoT and OT protocols and commands |
| SD-WAN:reliable and optimum network connectivity at the lowest cost | Link aggregation and link prioritization according to latency,jitter,and packet lossAdvanced multi-path orchestration and steering for 10,000+ appsSub-second failover for overlay and supported applicationsSLA monitoring and autonomous link swapping |
QSP261124A
© 2023 Check Point Software Technologies Ltd. All rights reserved. | February 4, 2024