Check Point 1500 Pro Security Gateway Datasheet
QUANTUM SPARK TM 1900, 2000
DATASHEET TM QUANTUM SPARK 1900, 2000 FIREWALLS
QUANTUM SPARK 1900, 2000 SECURITY GATEWAYS
Top Security Effectiveness
Check Point #1 for the 3rd year in a row with 99.9% malware block rate in Miercom Enterprise & Hybrid Mesh Firewall Report 2025 Benchmark
Named a Leader by Top Analyst Firms
Forrester Wave for Zero Trust Platform
Providers, Q3 2023 Gartner® Firewall Magic Quadrant (2022)
AI/ML powered Threat Prevention
Protect networks and users from zero-days, phishing, DNS, and ransomware attacks
Hyperscale Network Security
On-demand expansion, load balancing firewall clustering, and resilient access to mission-critical applications
Industry’s best security used by the world’s largest enterprises, tailored to protect your SMB from cyberattacks.
Quantum Spark 1900 and 2000 NGFWs are fast, high port density firewalls with integrated AI ML security to prevent new and novel threats. Integrated capabilities like SD-WAN and IoT security provide faster Internet connectivity, application performance, proven security, and maximum uptime with management made easy via an intuitive web interface.
SPARK 1900, 2000 HIGHLIGHTS Next Gen Firewall Threat Prevention
| Next Gen Firewall | Threat Prevention | Interfaces |
|---|---|---|
| up to 10 Gbps | up to 5 Gbps | 24 ports |
AI-Powered advanced security, uncompromising performance
The Check Point Quantum Spark 1900 and 2000 security gateways deliver enterprise-grade security in simple, affordable, all-inone security solutions in a 1 Rack Unit (RU) form factor to protect small to mid-size business employees, networks, and data from cyber-theft. High threat prevention throughput and high port capacity with 18x1GbE, 2x2.5GbE and 4x10GbE network interfaces make these gateways ideal for larger branch and SMB networks.
Comprehensive, Industry-Leading Security
• Next Generation Firewall
• Site-to-Site, Remote Access VPN
• Application Control and Web Filtering
• Intrusion Prevention
• Antivirus and Anti-Bot
• Anti-Spam Email Security
• SandBlast Threat Emulation (sandboxing)
• Integrated SD-WAN network optimization
The 1900 and 2000 have a 18 1GbE coppper LAN switch, ideal for segmenting multiple networks by department or function. Two copper 2.5GbE ports and four fiber 10GbE SFP+ LAN ports are also available. In addition, the 1GbE copper or fiber WAN and DMZ ports offer connection flexibility. The DMZ can also be used as a second WAN port.
Part of the Quantum Cyber Security Family R81 software for SMB increases performance and brings enterprise-grade security to small and midsized businesses. Centrally managed SMB gateways support:
High Port Capacity for Large SMB Networks
• Unified access policy: firewall, application control, URLF
• Policy layers and sub-policies
• Acceleration of domain, dynamic and time objects
• Multicore VPN and VPN acceleration
• Smart Accel 30% performance improvement of low risk, high bandwidth apps
1900, 2000 Port Configuration
SPECIFICATIONS
| 1900 | 2000 | |
|---|---|---|
| Enterprise Testing Conditions | ||
| Threat Prevention1 | 4 Gbps | 5 Gbps |
| Next Generation Firewall2 | 8 Gbps | 10 Gbps |
| IPS Throughput | 9 Gbps | 11 Gbps |
| Firewall Throughput | 16 Gbps | 20 Gbps |
| RFC 3511,2544,2647,1242 Performance (LAB) | ||
| Firewall 1518 Byte UDP Packets | 32 Gbps | 40 Gbps |
| VPN AES-128 Throughput | 5 Gbps | 6 Gbps |
| Connections per Second | 90,000 | 100,000 |
| Concurrent Connections | 4,200,000 | 4,200,000 |
| Software | ||
| Security | Firewall,VPN,User Aware,QoS,Application Control,URLF,IPS,Anti-Bot,Antivirus,Anti-Spam,sandboxing | |
| Unicast,Multicast Routing and Clustering | OSPFv2,BGPv4 and 4++,RIP,PIM(SM,DM,SSM),IGMP,ClusterXL High Availability | |
| IPv6 | local network and internet connections,dual stack tunneling IPv4 over IPv6 networks,prefix delegation | |
| Mobile Access License(Users) | 1000 remote SNX or Mobile VPN client users | |
| Hardware | ||
| WAN Port | 1x10/100/1000Base-T RJ-45 port | |
| DMZ Port | 1x10/100/1000Base-T RJ-45 port | |
| LAN 1 GbE and 2.5 GbE copper Ports | 2x2.5GbE Base-T RJ-45 plus 16x10/100/1000Base-T RJ-45 ports | |
| LAN 10 GbE fiber Ports | 4x10GbE SFP+ ports | |
| Console Port | 1xUSB-C or RJ45 | |
| USB Ports | 2xUSB 3.0 | |
| Memory | 16 GB DDR | |
| Storage | 512 GB SSD and Micro-5D slot with 32 and 64 GB card options | |
| Dimensions | ||
| Enclosure | 1RU | |
| Dimensions(W x D x H) | 432 x 300 x 44 mm[16.93 x 11.8 x 1.74 in.] | |
| Weight | 6.76 kg[14.9 lbs.] | |
| Environment | ||
| Operating / Storage | 0°C-40°C/-45°C-60°C[5~95%,non-condensing] | |
| Power Requirements | ||
| AC Input | 100-240VAC,50-60Hz | |
| Power Supply Rating | two redundant 150W power supplies | |
| Power Consumption(Max) | 93.6W | |
| Heat Dissipation | 319.3 BTU/hr. | |
| Certifications | ||
| Safety | Emissions | Environment |
- Includes Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot, SandBlast Zero-Day Protection with logging.
- Includes Firewall, Application Control, IPS with logging.
ORDERING QUANTUM SPARK 1900, 2000
1900, 2000 Firewall
SD card slot
2x 2.5GbE LAN ports
16x 1GbE LAN switch
1x 1GbE copper/fiber DMZ port
4x 10GbE/1GbE SFP+ LAN ports
Console port (USB-C or RJ45)
1x 1GbE copper/fiber WAN port
USB ports
2x power supplies
Fans
SECURITY APPLIANCES 1
| 1900 Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG1900-SNBT |
|---|---|
| 2000 Security Appliance, includes SandBlast (SNBT) Security Subscription Package for 1 Year | CPAP-SG2000-SNBT |
| ACCESSORIES | |
|---|---|
| SFP+ Short range transceiver | CPAC-1800-TR-10SR |
| SFP+ Long range transceiver | CPAC-1800-TR-10LR |
| SD memory card 32GB | CPAC-1500-32GB-SD |
| SD memory card 64GB | CPAC-1500-64GB-SD |
1Add a NGFW, NGTP or NGTX subscription. Promotion bundles for 3 and 5 years include the security appliance, support and subscription package (see below). License includes SMP cloud management.
IOT, SD-WAN AND MOBILE SOFTWARE BLADES 1
| Mobile Access Blade for 50 concurrent connections | CPSB-MOB-50 |
|---|---|
| Quantum IoT Protect for 1 year for 15x5 Firewall [1535,1555,1575,1595] | CPSB-IOTP-15x5-1Y |
| Quantum SD-WAN for 1 year for 15x5 Firewall [1535,1555,1575,1595] | CPSB-SDWAN-15x5-1Y |
1Concurrent remote SNX or Mobile VPN client users. The MOB license is additive. The full Mobile Access web portal functionality is not supported.
SUBSCRIPTION SERVICES
See the table below for security capabilities included in the NGFW, NGTP and SNBT services packages. IoT and SD-WAN are ordered a la carte. SERVICE SERVICES HIGHLIGHTS
| SERVICE | SERVICES HIGHLIGHTS |
|---|---|
| Next-Gen Firewall (NGFW): segment networks and apply zero trust policy with IPS | Accept, prevent, schedule, and apply traffic-shaping based controls to application traffic10,000+ pre-defined apps or customize your own applicationProtect vulnerable systems with 12,000+ IPS protections |
| Next-Gen Threat Prevention (NGTP):AI Deep Learning DNS security with antivirus and anti-bot prevents threats | DNS security prevents Command & Control(C2) connections and blocks data theft through DNS tunnelingAntivirus stops incoming malicious files and links in web, email,FTP and SMB contentAnti-Bot detects infected hosts and prevents communications with external C2 serversApply web and application control using 100+ categories or customize your own |
| SandBlast(SNBT):comprehensive,multi-layered defense with sandboxing protection from unknown and zero-day threats | Average emulation time for unknown files that require full sandbox evaluation is under 100 secondsCPU-level,OS-level and static file analysisMaximal file size for Emulation is 15MB |
| IoT Network Protection:simple,effective,autonomous discovery and protection of IoT devices in minutes | Passive and active discovery of enterprise IoT devices with autonomous mapping to 200+ profilesIoT attributes include function, manufacturer, model,risk,confidence,VLAN,IP and MAC addressAutomatically creates and applies an inline zero-trust IoT policy layer |
| SD-WAN:reliable and optimum network connectivity at the lowest cost | Link aggregation and link prioritization according to latency,jitter,and packet lossAdvanced multi-path orchestration and steering for 10,000+ appsSub-second failover for overlay and supported applicationsSLA monitoring and autonomous link swapping |
Services Bundles
| NGFWaccess control with IPS | NGTPprevent known threats | SNBTprevent zero-day threats | |
|---|---|---|---|
| Security Appliance | √ | √ | √ |
| Premium Support [24 x 7 response, software upgrades and more] | √ | √ | √ |
| PRO Support option [proactive health monitoring service] | √ | √ | √ |
| Firewall | √ | √ | √ |
| VPN | √ | √ | √ |
| Mobile Access (includes 500 concurrent users in the 1900, 2000) | √ | √ | √ |
| Identity Awareness | √ | √ | √ |
| Application Control | √ | √ | √ |
| Intrusion Prevention System | √ | √ | √ |
| SD-WAN Network Optimization Services for Web UI/SMP | √ | √ | √ |
| URL Filtering | √ | √ | |
| Antivirus and Anti-Bot | √ | √ | |
| Anti-Spam and Email Security | √ | √ | |
| DNS Security | √ | √ | |
| Threat Emulation (sandboxing) | √ | ||
| IoT Network Protection Services for Web UI/SMP | √ | √ | √ |
| IoT Network protection for SMBs* | √ | ||
| SD-WAN network optimization for SMBs* | √ | √ | √ |
| IoT network protection for enterprises** | Optional | Optional | Optional |
| SD-WAN network optimization for enterprises** | Optional | Optional | Optional |
Optional security capabilities can be ordered a-la-carte or separately.
- Starting from release R81.10.10. and supported on Web UI and Spark Management only. SD-WAN does not support VPN overlay.