Rugged Firewall Appliance 1570R

Product: Spark Firewall
Version: R80.20.X (EOS), R81.10.X
OS: Gaia Embedded
Platform: 1570R
Last Modified: 2026-04-23

Solution

Table of Contents:

• Introduction
• Key Features - Hardware
• Overview of 1500 Series Security Gateways
• Powering Options
• Installation Options
• Performance / Radio Frequency and Bands
• Downloads
• Known Limitations
• Resolved Issues
• Documentation

Introduction to 1570R Appliances

The Check Point 1570R (see datasheet) is the rugged member of the 1500 Security Appliance family that delivers enterprise-grade security in a series of simple and affordable, all-in-one security Gateways. These security appliances include a comprehensive security suite and the latest R80 software for SMB appliances.

The Check Point 1570R Next Generation Firewall (NGFW) secures Critical Infrastructure and Industrial Control Systems (ICS) without impacting operations. Our NGFWs identify and secure over 70 standard and proprietary SCADA (Supervisory Control and Data Acquisition) and ICS protocols. This includes the most popular protocols used in Utilities and Energy sectors, Manufacturing sectors, and Building Management Systems.

The solid-state design of the 1570R Rugged operates in temperatures ranging from minus 40° C to 75° C, making it ideal for securing any industrial application: power and manufacturing plants, oil and gas facilities, maritime fleets, building management systems, and more.

Connect your field devices to the 1570R via serial RS232/RS422/R485, wired or Wi-Fi, and in turn connect your 1570R to OT management networks via 1 GbE copper or fiber or a highly available dual SIM LTE modem. The Check Point NGFW in the 1570R ensures that the connection is secure.

The 1570R is certified for the industrial specifications IEEE 1613 and IEC 61850-3 for heat, vibration, and immunity to electromagnetic interference (EMI). In addition, the 1570R is certified for maritime operation per IEC-60945 and IACS E10 and complies with DNV-GL-CG-0339.

The 1570R mounts on walls or on DIN rails from the back or bottom. Connecting redundant power supplies is supported, ensuring continuous operation in case one power source fails. For added redundancy, two 1570R firewalls can be deployed in a High Availability cluster. Dual SIM LTE modem ensures that the 1570R stays connected to operational management networks.

| | | |

1570R Key Features - Hardware

• Fanless, Aluminum-based design
• Wired and WiFi + LTE
• Connectivity:
  • LAN: 8x1GbE
  • WAN: 1x1GbE / SFP port
  • DMZ: 1x1GbE / SFP port
  • Supports Flexiport (LAN port can operate as WAN)
• Embedded CAT6 3/4G/LTE cellular modem:
  • Worldwide LTE coverage with just two product variants: one for North America and EMEA, and one for Asia-Pacific
  • Two external antennas (Main and Diversity) to allow the best RF signal and coverage
  • Dual SIM (Nano and Micro) functionality is supported to enable automatic fail over between SIMs
• Embedded 3x3 WiFi modem, Dual band non-concurrent 802.11n/ac
• Serial port (DB9 female connector) supports serial protocols RS232, RS422, R485 (SW-configurable) for end point PLC control.
• Two power sources:
  • Power adapter (12V, 40W Commercial grade and 120W Industrial -40 to 70 degree C grade)
    • These power adapters are sold separately and are not part of the 1570R box.
  • 3-Pin terminal block, 12V-72VDC and -48VDC, supplied by the customer's power infrastructure
  • Power redundancy (when the two above are connected)
• Desktop, Wall mount and DIN rail (2 types of assembly - rear and bottom)
• USB Type-C console port
• USB 3.0 Port
• SD Card support
• ICS/SCADA Protocol Support:
  • BACNet, CIP, DNP3, IEC-60870-5-104, IEC 60870-6 (ICCP), IEC 61850, MMS, ModBus, OPC DA & UA, Profinet, Step7 (Siemens) and more; 1400+ in all. See the full list at appwiki.checkpoint.com.
• Wi-Fi Cryptography: supports WPA (TKIP 128 bit) and WPA2 (AES, 128/256 bit)
• 3/4G/LTE Cryptography: supports NAS/AS security procedures and Snow 3G/AES/ZUC security
• Certified to operate in harsh conditions:
  • Industrial: IEEE 1613, IEC 61850-3, IEC 60945, EN/IEC 60529, heat and immunity to electromagnetic interference
  • Rugged: EN/IEC 60529, IEC 60068-2-27 shock, IEC 60068-2-6 vibration
  • Maritime (on-going certification process): IEC-60945 B, IACS E10:1991, DNV-GL 2.4, DNV-GL-CG-0339, IEC 61162-460
  • Operating Temperature Range: -40°C ~ 75°C (-40°F ~ 167°F)
  • IP (Ingress Protection) Rating: IP30

Overview of 1500 Series Security Gateways

The Check Point 1570R is the rugged member of the 1500 Security Appliance family, which offer high performance, integrated devices offering Firewall, VPN, Anti-Virus, Application Control, URL Filtering, Email Security, and SandBlast Zero-Day Protection, all in compact form factors that are simple to configure and manage.

Check Point's 1570R Security Gateway is available in Wired, and WiFi+LTE flavors.

1500 Security Gateways offer integrated, multi-layered security in a compact desktop form factor. Setup can be done in minutes using pre-defined security policies and our step-by-step configuration wizard. 1500 Security Gateways are conveniently manageable locally via a Web interface, centrally by the Check Point Security Management Portal (vSMP), or centrally by Check Point's central management systems: SmartConsole, MDM, LSM, Maas.

Comprehensive Protection

• Next Generation Firewall
• Site-to-Site VPN
• Remote Access VPN
• Application Control and Web Filtering
• Intrusion Prevention
• Anti-Virus
• Anti-Bot
• Anti-Spam
• SandBlast Threat Emulation (sandboxing)
• Device Recognition
• Email Inspection

1570R Powering Options

When you order the 1570R, you must choose one of these power supplies: DC power (no external PSU), AC industrial, or AC commercial.

The 1570R supports these power inputs:

• External power adapter (AC2DC 12VDC, C14 inlet, as DC-Source) delivered by Check Point separately:
  • CPAC-1570R-PSU-STD, 40W commercial 0 - 40 degree C or
  • CPAC-1570R-PSU-IND, 120W Industrial grade -40 to 70 degree C
• 3-pin terminal block connector, connected to the customer's infrastructure power source, with the following:
  • Nominal 12 to 60VDC, -48VDC, as DC Mains
  • Tolerance: -15% for 12VDC and +20% for 60VDC
  • Maximum Range 10.2 to 72VDC

Note: The matching connector is included in the 1570R box. The terminal block is suitable for 14 AWG (6A). The torque value is 5 lb-in.

Maximal current and power rating (both power inputs):

• 1570R - 2.1A, 25.1W
• 1570WLR - 2.3A, 30.7W

Redundancy: The 1570R supports power redundancy while connecting both power inputs. If one fails, the other source takes over.

1570R Installation Options

The 1570R supports the following installation options:

1. Desktop:

   • Assemble the 4 rubber feet included in the box.

2. Wall-mount:

   • Use the 2 screws and anchors included in the box.
   • Use the sticker included in the box.

3. DIN Rail:

   • There are two installation options. The box includes the DIN rail adapter and 4 screws. The adapter supports shock tests IEC 61850-3, severity "Class 0".

     Rear side	Bottom side

   • Currently, the 1590WLR supports only the bottom side option. If you must support the rear side, a middle-part adapter is required and delivered as a FRU (SKU: CPAC-1570R-DIN-EXT)

4. Wall mount bracket to support shock tests IEC 60068-2-27, severity level 5g / 6ms (will be released soon).

   The following table presents the dimensions of the 1570R with the DIN adapter of the Wired and Wireless options:

   | | Flavor | Height
   (mm) | Width
   (mm) | Depth
   (mm) | Notes | | 1570R | Wired | 90 | 150 | 150 | Without rubber feet | | 1570R with rear DIN adapter | 90 | 150 | 168 | | | 1570R with bottom DIN adapter | 108 | 150 | 150 | | | 1570WLE with rear DIN adapter | Wireless | 177 | 150 | 225 | Including the LTE and WiFi antennas. For that setup a middle-part adapter is required between the DIN adapter and 1570R | | 1570WLE with bottom DIN adapter | 195 | 150 | 225 | Including the LTE and WiFi antennas |

Performance / Radio Frequency and Bands for 1570R Appliances

Cellular Carrier certification in USA:

US/EU:

• Rogers
• Bell
• Vodafone
• Telus
• US Cellular
• SouthernLINC

APAC:

• DoCoMo
• KDDI
• Softbank
• Telstra

Customers cannot use those networks with the 1570R until it is fully certified. Certification is on-going and will be published once done.

For Cellular Bands, and support, refer to sk180545.

Performance Table

4G Radio frequency and bands

3G Radio frequency and bands

Downloads for 1570R Appliances

The 1570R appliance supports these firmware versions:

• R81.10.05 and higher. Refer to sk179615: Quantum Spark Appliances - Releases R81.10.X.
• R80.20.10 and higher. Refer to sk165734: Quantum Spark Appliances - Releases R80.20.X.

Known Limitations for 1570R Appliances

Refer to:

• sk178604: R81.10.X Known Limitations
• sk159772: R80.20.X Known Limitations and Resolved Issues

Resolved Issues for 1570R Appliances

Refer to:

• sk181134: R81.10.X Resolved Issues and Enhancements
• sk159772: R80.20.X Known Limitations and Resolved Issues

Documentation for 1570R Appliances