Quantum Spark 2500 Series
Quantum Spark 2500 Series for SMBs and Branches
Security Gateways
Quantum Network Security
YOU DESERVE THE BEST SECURITY
Check Point has been ranked #1 for the third consecutive year, achieving a 99.9% malware block rate, 99.7% phishing prevention and 98% high and critical exploit prevention in the Miercom Hybrid Mesh Firewall Benchmark 2025.
GigaOm Radar for Enterprise Firewalls 2025
Named a Leader by Top Analyst Firms
Forrester Wave™ for Enterprise Firewalls 2024
Supercharge your network security with the Quantum Spark 2500 gateway series of next generation firewalls designed for today's fast-paced SMBs and branches. Experience lightning-fast threat prevention with throughputs up to 5,500 Mbps, and stay connected with the latest Wi-Fi 7, 5G cellular, and 10GbE LAN ports.
Enterprise Grade Security
Fastest Connectivity with Wi-Fi 7 and 5G Cellular
Quantum Spark 2500 Performance Highlights
| Model | Next Gen Firewall | Threat Prevention |
|---|---|---|
| QS 2530 | 1,200 Mbps | 750 Mbps |
| QS 2550 | 1,600 Mbps | 1,000 Mbps |
| QS 2560 | 3,750 Mbps | 1,850 Mbps |
| QS 2570 | 5,000 Mbps | 2,500 Mbps |
| QS 2580 | 9,000 Mbps | 3,200 Mbps |
| QS 2590 | 11,000 Mbps | 5,500 Mbps |
Advanced security and uncompromising performance, built for SMBs & branches.
Check Point Quantum Spark 2500 security gateway family delivers enterprise-grade security for small and medium businesses and enterprise branches in a series of simple and affordable, all-in-one security solutions. Models with the latest Wi-Fi 7 and embedded 5G modem provide fast and resilient connectivity.
Comprehensive and Industry-Leading Security
- Site-to-Site and Remote Access VPN
- Application and Web Filtering
- Antivirus and Anti-Bot
- Intrusion Prevention
- Sandboxing
Managed Service Providers use Quantum Spark Management to provision up to thousands of gateways efficiently, reducing operational overhead. Interactive dashboards provide quick identification of security, connectivity and licensing issues across all customers. With proactive management alerts, MSP administrators can be notified of issues over SMS, email, MS Teams and more, enabling faster resolution. Spark Management is included with the Spark Management Server.
5G cellular connectivity
Get the latest 5G cellular standard, offering the highest throughputs, which can be used as a primary WAN connection (Fixed Wireless Access) or as a backup link. Supports Dual SIM Single Standby (DSSS) and backward compatibility to 4G/LTE networks.
The Quantum Spark 2500 series support the latest Wi-Fi 7 standard with up to 30% added throughput over previous Wi-Fi 6 models as well as improved client density and reduced latency.
Latest Wi-Fi 7
Highest Performance Threat Prevention
Thanks to R82 security and management technology, with the 2500 Series, you can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 5.5 Gbps of threat prevention throughput and 17.5 Gbps of firewall throughput.
Quantum Spark 2530/2550
- Power Switch
- 6x RJ45 1GbE LAN ports
- 1GbE RJ45/SFP WAN port
- 1GbE RJ45/SFP DMZ port
- USB 3.0 Type-A port
- USB Type-C console port
- Power Supply Connector
- Wi-Fi Antennas (x2) for supported models:
- CPAP-SG2530W-SNBT
- CPAP-SG2550W-SNBT
- CPAP-SG2550W5G-SNBT (4 Antennas)
Quantum Spark 2560/2570
- Power Switch
- 8x RJ45 1GbE LAN ports
- 1GbE RJ45 WAN port
- 1GbE SFP DMZ port
- 2x 10GbE SFP+ LAN/WAN ports
- USB 3.0 Type-A port
- USB Type-C console port
- Power Supply Connector (Dual)
- Wi-Fi Antennas (x4) for supported models:
- CPAP-SG2560W-SNBT
- CPAP-SG2570W-SNBT
- CPAP-SG2570W5G-SNBT (8 Antennas)
Quantum Spark 2580
- Power Switch
- 2x RJ45 2.5GbE LAN ports
- 8x RJ45 1GbE LAN ports
- Dual power Supply Connector
- USB 3.0 Type-A port
- RJ45 console port
- USB Type-C console port
- Reset switch
- Factory Default switch
Quantum Spark 2590
- 8x 1GbE SFP LAN ports
- 2x RJ45 2.5GbE LAN ports
- 1GbE RJ45/SFP DMZ ports
- 16x RJ45 1GbE LAN ports
- 1GbE RJ45/SFP WAN ports
- 4x 10GbE SFP+ LAN ports
- USB Type-C console port
- Power Supply sockets (Dual)
- Power Switch
Specifications
| Test Conditions | 2530 | 2550 | 2560 | 2570 | 2580 | 2590 |
|---|---|---|---|---|---|---|
| Threat Prevention [Mbps]¹ | 750 | 1,000 | 1,850 | 2,500 | 3,200 | 5,500 |
| Next Generation Firewall [Mbps]² | 1,200 | 1,600 | 3,750 | 5,000 | 7,500 | 11,000 |
| IPS Throughput [Mbps] | 1,720 | 2,300 | 5,170 | 6,900 | 8,500 | 12,000 |
| Firewall Throughput [Mbps] | 2,250 | 3,000 | 6,750 | 9,000 | 10,000 | 18,000 |
RFC 3511, 2544, 2647, 1242 Performance (Lab)
| Firewall 1518 bytes UDP [Mbps] | 3,000 | 4,000 | 11,600 | 15,500 | 20,000 | 25,000 |
|---|---|---|---|---|---|---|
| Firewall Latency Avg. (μSec) | 90 | 30 | 24 | |||
| VPN AES-GCM 1452B [Mbps] | 1,400 | 4,000 | 4,500 | 5,500 | ||
| Connections/Sec | 16,000 | 20,000 | 53,000 | 62,000 | 72,000 | 75,000 |
| Concurrent Connections | 1,000,000 | 2,000,000 | 4,000,000 |
| Security | Firewall, VPN, User Awareness, QoS, Application Control, URLF, IPS, Anti-Bot, Antivirus, Anti-Spam, sandboxing |
|---|---|
| Unicast, Multicast Routing and Clustering | OSPFv2, BGPv4 and 4++, RIP, PIM(SM,DM,SSM), IGMP, ClusterXL High Availability |
| IPv6 | local network and internet connections, dual stack tunneling IPv4 over IPv6 networks, prefix delegation |
| Remote Access Users | 100 |
| SD-WAN | Integrated SD-WAN network optimization and resilience |
| VLAN's | Total physical and virtual(VLAN) interfaces per appliance: 1024(single gateway) |
| Link Aggregation | 802.3ad passive and active link aggregation |
| Layer2 | Layer2(transparent) and Layer3(routing) mode |
| IPv6 | NAT66/CoreXL, SecureXL & VRRPv3 |
| Management Options | WebUI, Spark Management application, Smart-1 Cloud & Management Server |
| Hardware | 2530 | 2550 | 2560 | 2570 | 2580 | 2590 | |
|---|---|---|---|---|---|---|---|
| WAN Port | 1 x 16GE RJ45/SFP | 1 x 16GE RJ45 | 1 x 16GE RJ45/SFP+ | ||||
| DMZ Ports | 1 x 16GE RJ45/SFP | 1 x 16GE SFP | 1 x 16GE RJ45/SFP+ | ||||
| LAN Ports | 6 x 16GE RJ45 | 8 x 16GE RJ45, 2 x 16GE SFP+ | 8 x 16GE RJ45, 2 x 2.5GE RJ45 | ||||
| Wi-Fi & bands | Wi-Fi 7 2x2 2.4GHz + 5GHz | Wi-Fi 7 4x4 2.4GHz + 5GHz + 6GHz | - | ||||
| 5G / LTE (optional) | - | 5G (SA, retcap) / LTE Cat 4 | - | 5G (SA / non-SA) / LTE Cat 20 | - | ||
| SD Card Slot | Micro-SD slot | ||||||
| Dimensions / Weights | |||||||
| Dimensions [WX d X H] Wired | 210x180x42.5 mm, 8.3x7.1x1.7 in. | 210x194x42.5 mm, 8.3x7.6x1.7 in. | 210x210x42.5 mm, 8.3x8.3x1.7 in. | 420x300x42.5 mm, 16.9x11.8x1.7 in. | |||
| Weight – Wired | 0.70 kg (1.53 lbs.) | 0.77 kg (1.70 lbs.) | 0.98 kg (2.15 lbs.) | 0.99 kg (2.18 lbs.) | 1.37 kg (3.02 lbs.) | 4.47 kg (9.85 lbs.) | |
| Power Requirements | |||||||
| AC Input | 100 to 240VAC [47-63Hz] | ||||||
| Certifications | |||||||
| Safety | CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASN2S 62368.1 | ||||||
| Environmental | ROHS, REACH, WEEE, ISO14001 | ||||||
| Regulated Model | T90 [Wired], T90W [Wi-Fi] | T91 [Wired], T91W [Wi-Fi] | T92 | T93 |
- Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot, SandBlast Zero-Day Protection with logging.
- Includes Firewall, Application Control, IPS with logging.
| Security Appliances | SKU |
|---|---|
| 2530 Desktop form factor, 1x1G6E RJ45/SFP WAN port, 1x1G6E RJ45/SFP port, 6x1G6E RJ45 LAN ports. | CPAP-SG2530-SNBT |
| 2530W Desktop form factor, 1x1G6E RJ45/SFP WAN port, 1x1G6E RJ45/SFP port, 6x1G6E RJ45 LAN ports, 802.11be 2x2 MIMO Wi-Fi 7. | CPAP-SG2530W-SNBT |
| 2550 Desktop form factor, 1x1G6E RJ45/SFP WAN port, 1x1G6E RJ45/SFP port, 6x1G6E RJ45 LAN ports, 802.11be 2x2 MIMO Wi-Fi 7. | CPAP-SG2550-SNBT |
| 2550W Desktop form factor, 1x1G6E RJ45/SFP WAN port, 1x1G6E RJ45/SFP port, 6x1G6E RJ45 LAN ports, 802.11be 2x2 MIMO Wi-Fi 7, 5G cellular | CPAP-SG2550-W-5G-SNBT |
| 2560 Desktop form factor, 1x1G6E RJ45 WAN port, 1x1G6E RJ45/SFP DMZ port, 8x1G6E RJ45 LAN ports, 2x10G6E SFP+ LAN ports. | CPAP-SG2560-SNBT |
| 2560W Desktop form factor, 1x1G6E RJ45 WAN port, 1x1G6E RJ45/SFP DMZ port, 8x1G6E RJ45 LAN ports, 2x10G6E SFP+ LAN ports, 802.11be 4x4 MIMO Wi-Fi 7. | CPAP-SG2560W-SNBT |
| 2570 Desktop form factor, 1x1G6E RJ45 WAN port, 1x1G6E RJ45/SFP DMZ port, 8x1G6E RJ45 LAN ports, 2x10G6E SFP+ LAN ports. | CPAP-SG2570-SNBT |
| 2570W Desktop form factor, 1x1G6E RJ45 WAN port, 1x1G6E RJ45/SFP DMZ port, 8x1G6E RJ45 LAN ports, 2x10G6E SFP+ LAN ports, 802.11be 4x4 MIMO Wi-Fi 7, 5G cellular. | CPAP-SG2570-W-5G-SNBT |
| 2580 half-sized rack mount, 1x10G6E RJ45/SFP WAN port, 1x10G6E RJ45/SFP DMZ port, 8x1G6E and 2x2.5G6E RJ45 LAN ports and Dual power supply. | CPAP-SG2580-SNBT |
| 2590 1U rack mount, 1x1G6E RJ45, 2x2.5G6E RJ45, 4x10G6E SFP, 8x1G6E SFP, LAN ports 1x1G6E RJ45/SFP WAN Ports, 1x1G6E RJ45/SFP DMZ Ports and dual internal power supply. | CPAP-SG2590-SNBT |
ACCESSORIES
| Power Supplies | SKU |
|---|---|
| Replacement Power Supply for 2530, 2550 wired and Wi-Fi models | CPAC-2530/2550-PSU |
| Replacement Power Supply for 2550W5G, 2560, 2560W, 2570, 2570W, 2580, 3920, & 3950 models | CPAC-2550W5G/2580/3920/3950-PSU |
| Replacement Power Supply for 2570W5G models | CPAC-2570W5G-PSU |
| Rack Mounts | SKU |
|---|---|
| Rack Mount ears for 2530, 2550, 2560, 2570, 2580, 3920, 3950 models | CPAC-2500/3900-RM-EARS |
| Rack Mount shelf for Single/Dual for 2500/3600/3800 desktop appliances. The mount does not support Quantum Spark models with Wi-Fi | CPAP-2500/3900-RM-DUAL |
Antennas
| Transceivers | SKU |
|---|---|
| 1GB Short Range Transceiver | CPAC-TR-1SX-D |
| 1GB Long Range Transceiver | CPAC-TR-1LX-D |
| 10GB Short Range Transceiver | CPAC-TR-10SR-D |
| 10GB Long Range Transceiver | CPAC-TR-10LR-D |
SUBSCRIPTION SERVICES
| NGFW | NGTP | SNBT(SandBlast)* | |
|---|---|---|---|
| Application Control | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering | √ | √ | |
| Anti-Bot | √ | √ | |
| Anti-Virus | √ | √ | |
| Anti-Spam | √ | √ | |
| SandBlast Threat Emulation(sandboxing) | √ | ||
| Zero Phishing | √ | ||
| IoT Network Protection | IoT for SMB(Web UI and Spark Management) is included; IoT for Enterprise(Smart-1) requires an additional license | ||
| SD-WAN Network Optimization | SD-WAN for SMB(Web UI and Spark Management) is included; SD-WAN for Enterprise(Smart-1) requires an additional license |
*The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP and SNBT are available for subsequent years.