Quantum Spark 2500 Series
Quantum Spark 2500 Series
Security Gateways
Quantum Network Security
You deserve the best security
Check Point has been ranked #1 for the third consecutive year, achieving a 99.9% malware block rate, 99.7% phishing prevention, and 98% high and critical exploit prevention in the Miercom Hybrid Mesh Firewall Benchmark 2025.
Named a Leader by Top Analyst Firms
- GigaOm Radar for Enterprise Firewalls 2025
- Forrester Wave™ for Enterprise Firewalls 2024
Supercharge your network security with the Quantum Spark 2500 gateway series of next-generation firewalls designed for today's fast-paced SMBs and branches. Experience lightning-fast threat prevention with throughputs up to 5,500 Mbps, and stay connected with the latest Wi-Fi 7, 5G cellular, and 10GbE LAN ports.
Quantum Spark 2500 Performance Highlights
| Model | Next Gen Firewall | Threat Prevention |
|---|---|---|
| QS 2530 | 1,200 Mbps | 750 Mbps |
| QS 2550 | 1,600 Mbps | 1,000 Mbps |
| QS 2560 | 3,750 Mbps | 1,850 Mbps |
| QS 2570 | 5,000 Mbps | 2,500 Mbps |
| QS 2580 | 9,000 Mbps | 3,200 Mbps |
| QS 2590 | 11,000 Mbps | 5,500 Mbps |
Advanced security and uncompromising performance, built for SMBs & branches.
Check Point Quantum Spark 2500 security gateway family delivers enterprise-grade security for small and medium businesses and enterprise branches in a series of simple and affordable, all-in-one security solutions. Models with the latest Wi-Fi 7 and embedded 5G modem provide fast and resilient connectivity.
Comprehensive and Industry-Leading Security
- Site-to-Site and Remote Access VPN
- Application and Web Filtering
- Antivirus and Anti-Bot
- Intrusion Prevention
- Sandboxing
Managed Service Providers use Quantum Spark Management to provision up to thousands of gateways efficiently, reducing operational overhead. Interactive dashboards provide quick identification of security, connectivity, and licensing issues across all customers. With proactive management alerts, MSP administrators can be notified of issues over SMS, email, MS Teams, and more, enabling faster resolution.
Quantum Spark Management is included with the Spark Management Server.
5G Cellular Connectivity
Get the latest 5G cellular standard, offering the highest throughputs, which can be used as a primary WAN connection (Fixed Wireless Access) or as a backup link. Supports Dual SIM Single Standby (DSSS) and backward compatibility to 4G/LTE networks.
The Quantum Spark 2500 series supports the latest Wi-Fi 7 standard with up to 30% added throughput over previous Wi-Fi 6 models as well as improved client density and reduced latency.
Highest Performance Threat Prevention
Thanks to R82 security and management technology, with the 2500 Series, you can inspect encrypted traffic and prevent even the most evasive attacks without impacting internal network performance. Achieve 5.5 Gbps of threat prevention throughput and 17.5 Gbps of firewall throughput.
Quantum Spark 2530/2550
- Power Switch
- 6x RJ45 1GbE LAN ports
- 1GbE RJ45/SFP WAN port
- 1GbE RJ45/SFP DMZ port
- USB 3.0 Type-A port
- USB Type-C console port
- Power Supply Connector
- Wi-Fi Antennas (x2) for supported models:
- CPAP-SG2530W-SNBT
- CPAP-SG2550W-SNBT
- CPAP-SG2550W5G-SNBT (4 Antennas)
Quantum Spark 2560/2570
- Power Switch
- 8x RJ45 1GbE LAN ports
- 1GbE RJ45 WAN port
- 1GbE SFP DMZ port
- 2x 10GbE SFP+ LAN/WAN ports
- USB 3.0 Type-A port
- USB Type-C console port
- Power Supply Connector (Dual)
- Wi-Fi Antennas (x4) for supported models:
- CPAP-SG2560W-SNBT
- CPAP-SG2570W-SNBT
- CPAP-SG2570W5G-SNBT (8 Antennas)
Quantum Spark 2580
- Power Switch
- 2x RJ45 2.5GbE LAN ports
- 8x RJ45 1GbE LAN ports
- Dual power Supply Connector
- 10GbE RJ45/SFP+ DMZ ports
- USB 3.0 Type-A port
- RJ45 console port
- USB Type-C console port
- Reset switch
- Factory Default switch
Quantum Spark 2590
- 8x 1GbE SFP LAN ports
- 2x RJ45 2.5GbE LAN ports
- 1GbE RJ45/SFP DMZ ports
- 16x RJ45 1GbE LAN ports
- 1GbE RJ45/SFP WAN ports
- 4x 10GbE SFP+ LAN ports
- USB Type-C console port
- Power Supply sockets (Dual)
- Power Switch
Specifications
| Test Conditions | 2530 | 2550 | 2560 | 2570 | 2580 | 2590 |
|---|---|---|---|---|---|---|
| Threat Prevention [Mbps]¹ | 750 | 1,000 | 1,850 | 2,500 | 3,200 | 5,500 |
| Next Generation Firewall [Mbps]² | 1,200 | 1,600 | 3,750 | 5,000 | 7,500 | 11,000 |
| IPS Throughput [Mbps] | 1,720 | 2,300 | 5,170 | 6,900 | 8,500 | 12,000 |
| Firewall Throughput [Mbps] | 2,250 | 3,000 | 6,750 | 9,000 | 10,000 | 18,000 |
RFC 3511, 2544, 2647 Performance (Lab)
| Firewall 1518 bytes UDP [Mbps] | 3,000 | 4,000 | 11,600 | 15,500 | 20,000 | 25,000 |
|---|---|---|---|---|---|---|
| Firewall Latency Avg. (μSec) | 90 | 30 | 24 | |||
| VPN AES-GCM 1452B [Mbps] | 1,400 | 4,000 | 4,500 | 5,500 | ||
| Connections/Sec | 16,000 | 20,000 | 53,000 | 62,000 | 72,000 | 75,000 |
| Concurrent Connections | 1,000,000 | 2,000,000 | 4,000,000 |
| Security | Firewall, VPN, User Awareness, QoS, Application Control, URLF, IPS, Anti-Bot, Antivirus, Anti-Spam, sandboxing | ||
|---|---|---|---|
| Unicast, Multicast Routing and Clustering | OSPFv2, BGPv4 and 4++, RIP, PIM(SM,DM,SSM), IGMP, ClusterXL High Availability | ||
| IPv6 | local network and internet connections, dual stack tunneling IPv4 over IPv6 networks, prefix delegation | ||
| Remote Access Users | 100 | 200 | 1,000 |
| SD-WAN | Integrated SD-WAN network optimization and resilience | ||
| VLAN's | Total physical and virtual(VLAN) interfaces per appliance: 1024(single gateway) | ||
| Link Aggregation | 802.3ad passive and active link aggregation | ||
| Layer2 | Layer2(transparent) and Layer3(routing) mode | ||
| Management Options | WebUI, Spark Management application, Smart-1 Cloud & Management Server |
| Hardware | 2530 | 2550 | 2560 | 2570 | 2580 | 2590 |
|---|---|---|---|---|---|---|
| WAN Port | 1 x 1 GbE RJ45/SFP | 1 x 1 GbE RJ45 | 1 x 10 GbE RJ45/SFP+ | |||
| DMZ Ports | 1 x 1 GbE RJ45/SFP | 1 x 1 GbE SFP | 1 x 10 GbE RJ45/SFP+ | |||
| LAN Ports | 6 x 1 GbE RJ45 | 8 x 1 GbE RJ45, 2 x 10 GbE SFP+ | 8 x 1 GbE RJ45, 2 x 2.5 GbE RJ45 | |||
| Wi-Fi & bands | Wi-Fi 7 2x2 2.4GHz + 5GHz | Wi-Fi 7 4x4 2.4GHz + 5GHz + 6GHz | - | |||
| 5G / LTE (optional) | - | 5G (SA, retcap) / LTE Cat 4 | - | 5G (SA / non-SA) / LTE Cat 20 | - | |
| SD Card Slot | Micro-SD slot | |||||
| Dimensions / Weights | ||||||
| Dimensions [WX d X H] | 210x180x42.5 mm, 8.3x7.1x1.7 in. | 210x194x42.5 mm, 8.3x7.6x1.7 in. | 210x210x42.5 mm, 8.3x8.3x1.7 in. | |||
| Weight | 0.70 kg (1.53 lbs.) | 0.77 kg (1.70 lbs.) | 0.79 kg (2.15 lbs.) | 0.99 kg (2.18 lbs.) | 4.47 kg (9.85 lbs.) | |
| Operating / Storage | OMC - 4PVC / 4PVC - 6PVC [5-95% non-condensing] | |||||
| MTBF | Wired / Wi-Fi Models - 126 Years | Wired / Wi-Fi Models - 33 Years | Wired - 57 Years | |||
| Power Requirements | ||||||
| AC Input | 100 to 240VAC [47-63Hz] | |||||
| Dual Power | Not Available | |||||
| Power Supply Rating | 12V/3.3A 40W power adapter (non-Wi-Fi) | |||||
| Power Consumption [Max] | 26.01W (non-Wi-Fi), 31.28W (Wi-Fi), 35.5W (Wi-Fi-5G) | |||||
| Certifications | ||||||
| Safety | CB IEC 62368-1, CE LVD EN62368-1, UL62368-1, ASN2S 62368.1 | |||||
| Emissions | CE, FCC IC, VCCI, ASN2S ACMA | |||||
| Environmental | ROHS, REACH, WEEE, ISO14001 | |||||
| Regulated Model | T90 [Wired], T90W [Wi-Fi] | T91 [Wired], T91W [Wi-Fi] | T92 |
- Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot, SandBlast Zero-Day Protection with logging.
- Includes Firewall, Application Control, IPS with logging.
Security Appliances
| Security Appliances | SKU |
|---|---|
| 2530 Desktop form factor, 1x1GE RJ45/SFP WAN port, 1x1GE RJ45/SFP port, 6x1GE RJ45 LAN ports. | CPAP-SG2530-SNBT |
| 2530W Desktop form factor, 1x1GE RJ45/SFP WAN port, 1x1GE RJ45/SFP port, 6x1GE RJ45 LAN ports, 802.11be 2x2 MIMO Wi-Fi7. | CPAP-SG2530W-SNBT |
| 2550 Desktop form factor, 1x1GE RJ45/SFP WAN port, 1x1GE RJ45/SFP port, 6x1GE RJ45 LAN ports, 802.11be 2x2 MIMO Wi-Fi7. | CPAP-SG2550-SNBT |
| 2550W Desktop form factor, 1x1GE RJ45/SFP WAN port, 1x1GE RJ45/SFP port, 6x1GE RJ45 LAN ports, 802.11be 2x2 MIMO Wi-Fi7, 5G cellular | CPAP-SG2550-W-5G-SNBT |
| 2560 Desktop form factor, 1x1GE RJ45 WAN port, 1x1GE RJ45/SFP DMZ port, 8x1GE RJ45 LAN ports, 2x10GE SFP+LAN ports. | CPAP-SG2560-SNBT |
| 2560W Desktop form factor, 1x1GE RJ45 WAN port, 1x1GE RJ45/SFP DMZ port, 8x1GE RJ45 LAN ports, 2x10GE SFP+LAN ports, 802.11be 4x4 MIMO Wi-Fi7. | CPAP-SG2560W-SNBT |
| 2570 Desktop form factor, 1x1GE RJ45 WAN port, 1x1GE RJ45/SFP DMZ port, 8x1GE RJ45 LAN ports, 2x10GE SFP+LAN ports. | CPAP-SG2570-SNBT |
| 2570W Desktop form factor, 1x1GE RJ45 WAN port, 1x1GE RJ45/SFP DMZ port, 8x1GE RJ45 LAN ports, 2x10GE SFP+LAN ports, 802.11be 4x4 MIMO Wi-Fi7, 5G cellular. | CPAP-SG2570-W-5G-SNBT |
| 2580 half-sized rack mount, 1x10GE RJ45/SFP WAN port, 1x10GE RJ45/SFP DMZ port, 8x1GE and 2x2.5GE RJ45 LAN ports and Dual power supply. | CPAP-SG2580-SNBT |
| 2590 1U rack mount, 1x1GE RJ45, 2x2.5GE RJ45, 4x10GE SFP, 8x1GE SFP, LAN ports 1x1GE RJ45/SFP WAN Ports, 1x1GE RJ45/SFP DMZ Ports and dual internal power supply. | CPAP-SG2590-SNBT |
Accessories
| Power Supplies | SKU |
|---|---|
| Replacement Power Supply for 2530, 2550 wired and Wi-Fi models | CPAC-2530/2550-PSU |
| Replacement Power Supply for 2550W5G, 2560, 2560W, 2570, 2570W, 2580, 3920, & 3950 models | CPAC-2550W5G/2580/3920/3950-PSU |
| Replacement Power Supply for 2570W5G models | CPAC-2570W5G-PSU |
| Rack Mounts | SKU |
|---|---|
| Rack Mount ears for 2530, 2550, 2560, 2570, 2580, 3920, 3950 models | CPAC-2500/3900-RM-EARS |
| Rack Mount shelf for Single/Dual for 2500/3600/3800 desktop appliances. The mount does not support Quantum Spark models with Wi-Fi | CPAP-2500/3900-RM-DUAL |
| Transceivers | SKU |
|---|---|
| 1GB Short Range Transceiver | CPAC-TR-1SX-D |
| 1GB Long Range Transceiver | CPAC-TR-1LX-D |
| 10GB Short Range Transceiver | CPAC-TR-10SR-D |
| 10GB Long Range Transceiver | CPAC-TR-10LR-D |
Subscription Services
| NGFW | NGTP | SNBT(SandBlast)* | |
|---|---|---|---|
| Application Control | √ | √ | √ |
| IPS | √ | √ | √ |
| URL Filtering | √ | √ | |
| Anti-Bot | √ | √ | |
| Anti-Virus | √ | √ | |
| Anti-Spam | √ | √ | |
| SandBlast Threat Emulation(sandboxing) | √ | ||
| Zero Phishing | √ | ||
| IoT Network Protection | IoT for SMB (Web UI and Spark Management) is included, IoT for Enterprise (Smart-1) requires an additional license | ||
| SD-WAN Network Optimization | SD-WAN for SMB (Web UI and Spark Management) is included, SD-WAN for Enterprise (Smart-1) requires an additional license |
*The first-year purchase includes the SNBT package. Security subscription renewals, NGFW, NGTP, and SNBT are available for subsequent years.