Rugged Firewall Appliance 1575R

Solution

Table of Contents:

• Introduction
• Key Features - Hardware
• General Information
• Power Information
• Installation Options
• Performance Table
• Supported Frequency and Bands
• Cellular Certifications
• Downloads
• Known Limitations
• Resolved Issues
• Documentation

Introduction

The Check Point 1575R (see datasheet) is one of the rugged members of the 1500 Security Appliance family that delivers enterprise-grade security in a series of simple and affordable, all-in-one security Gateways. These security appliances include a comprehensive security suite and the latest R81.10 software for SMB appliances.

The Check Point 1575R Next Generation Firewall (NGFW) secures Critical Infrastructure and Industrial Control Systems (ICS) without impacting operations. Our NGFWs identify and secure over 70 standard and proprietary SCADA (Supervisory Control and Data Acquisition) and ICS protocols. This includes the most popular protocols used in Utilities and Energy sectors, Manufacturing sectors, Building Management Systems and IoT (Internet of Things) devices.

The solid-state design of the 1575R Rugged operates in temperatures ranging from minus 40° C to 75° C, making it ideal for securing any industrial application: power and manufacturing plants, oil and gas facilities, maritime fleets, building management systems, and more.

Connect your field devices to the 1575R via serial RS232/RS422/RS485, wired or Wi-Fi, and in turn connect your 1575R to OT management networks via 1 GbE copper or fiber or a highly available dual SIM LTE modem. The Check Point NGFW in the 1575R ensures that the connection is secure.

The 1575R is certified for the industrial specifications IEEE 1613 and IEC 61850-3 for heat, vibration, and immunity to electromagnetic interference (EMI). In addition, the 1575R is certified for maritime operation per IEC-60945 and IACS E10 and complies with DNV-GL-CG-0339.

Key Features - Hardware

The 1575R mounts on walls or on DIN rails from the back or bottom. Connecting redundant power supplies is supported, ensuring continuous operation in case one power source fails. For added redundancy, two 1575R firewalls can be deployed in a High Availability cluster. Dual SIM LTE modem ensures that the 1575R stays connected to operational management networks.

The Check Point 1575R is the rugged member of the 1500 Security Appliance family, which offer high performance, integrated devices offering Firewall, VPN, Anti-Virus, Application Control, URL Filtering, Email Security, and SandBlast Zero-Day Protection, all in compact form factors that are simple to configure and manage.

Check Point's 1575R Security Gateway is available in Wired, and WiFi+LTE flavors.

1500 Security Gateways offer integrated, multi-layered security in a compact desktop form factor. Setup can be done in minutes using pre-defined security policies and our step-by-step configuration wizard. 1500 Security Gateways are conveniently manageable locally via a Web interface, centrally by the Spark Management application on the Infinity Portal (vSMP), or centrally by Check Point's central management systems: SmartConsole, MDM, LSM, Maas.

General Information

• Fanless, Aluminum-based design

• Wired and WiFi + LTE

• Connectivity:

  • LAN: 8x1GbE
  • WAN: 1x1GbE / SFP port
  • DMZ: 1x1GbE / SFP port
  • Supports Flexiport (LAN port can operate as WAN)

• Embedded CAT13 3/4G/LTE cellular modem:

  • Worldwide LTE coverage
  • Two external antennas (Main and Diversity) to allow the best RF signal and coverage
  • Dual SIM (Nano and Micro) functionality is supported to enable automatic fail over between SIMs

• Embedded 3x3 WiFi6 modem, Dual band non-concurrent 802.11ax

• Serial port (DB9 female connector) supports serial protocols RS232, RS422, RS485 (SW-configurable) for end point PLC control.

• Two power sources

  • Power adapter (120W Industrial -40 to 70 degree C grade)
    • These power adapters are sold separately and are not part of the 1575R box.
  • 3-Pin terminal block, 12V-72VDC and -48VDC, supplied by the customer’s power infrastructure
  • Power redundancy (when the two above are connected)

• Desktop, Wall mount and DIN rail (2 types of assembly - rear and bottom)

• USB Type-C console port

• USB 3.0 Port

• SD Card support

• ICS/SCADA Protocol Support

  • BACNet, CIP, DNP3, IEC-60870-5-104, IEC 60870-6 (ICCP), IEC 61850, MMS, ModBus, OPC DA & UA, Profinet, Step7 (Siemens) and more; 1400+ in all. See the full list at appwiki.checkpoint.com.

• Wi-Fi Cryptography: supports WPA (TKIP 128 bit) and WPA2 (AES, 128/256 bit)

• 3/4G/LTE Cryptography: supports NAS/AS security procedures and Snow 3G/AES/ZUC security

• Certified to operate in harsh conditions:

  • Industrial: IEEE 1613, IEC 61850-3, IEC 60945, EN/IEC 60529, heat and immunity to electromagnetic interference
  • Rugged: EN/IEC 60529, IEC 60068-2-27 shock, IEC 60068-2-6 vibration
  • Maritime (on-going certification process): IEC-60945 B, IACS E10:1991, DNV-GL 2.4, DNV-GL-CG-0339, IEC 61162-460
  • Operating Temperature Range: -40°C ~ 75°C (-40°F ~ 167°F)
  • IP (Ingress Protection) Rating: IP30

• Next Generation Firewall

• Site-to-Site VPN

• Remote Access VPN

• Application Control and Web Filtering

• Intrusion Prevention

• Anti-Virus

• Anti-Bot

• Anti-Spam

• SandBlast Threat Emulation (sandboxing)

• Device Recognition

• Email Inspection

Power Information

When you order the 1575R, you must choose one of these power supplies: DC power (no external PSU), AC industrial, or AC commercial.

The 1575R supports these power inputs:

• External power adapter (AC2DC 12VDC, C14 inlet, as DC-Source) delivered by Check Point separately:
  • CPAC-15750R-PSU-IND, 120W Industrial grade -40 to 70 degree C
• 3-pin terminal block connector, connected to the customer's infrastructure power source, with the following:
  • Nominal 12 to 60VDC, -48VDC, as DC Mains
  • Tolerance: -15% for 12VDC and +20% for 60VDC
  • Maximum Range 10.2 to 72VDC

Note: The mating connector is included in the 1575R box. The terminal block is suitable for 14 AWG (6A). The torque value is 5 lb-in.

Maximal current and power rating:

• 1575R - 2.1A, 25.1W
• 1575RWL - 2.3A, 30.7W

Redundancy:

• The 1575R supports power redundancy while connecting both power inputs. If one fails, the other source takes over.

Installation Options

The 1575R supports the following installation options:

1. Desktop:
   1. Assemble the 4 rubber feet included in the box.
2. Wall-mount:
   1. Use the 2 screws and anchors included in the box.
   2. Use the sticker included in the box.
3. DIN Rail:
   1. There are two installation options. The box includes the DIN rail adapter and 4 screws. The adapter supports shock tests IEC 61850-3, severity "Class 0".

| | | | --- | --- | | Rear side | Bottom side | | | |

2. Currently, the 1575RWL supports only the bottom side option. If you must support the rear side, a middle-part adapter is required and delivered as a FRU (SKU: CPAC-1570R-DIN-EXT)
3. Wall mount bracket to support shock tests IEC 60068-2-27, severity level 5g / 6ms (will be released soon).

The following table presents the dimensions of the 1575R with the DIN adapter of the Wired and Wireless options:

| | | | | | | | --- | --- | --- | --- | --- | --- | | | Flavor | Height
(mm) | Width
(mm) | Depth
(mm) | Notes | | 1575R | Wired | 90 | 150 | 150 | Without rubber feet | | 1575R with rear DIN adapter | 90 | 150 | 168 | | | 1575R with bottom DIN adapter | 108 | 150 | 150 | | | 1575RWLE with rear DIN adapter | Wireless | 177 | 150 | 225 | Including the LTE and WiFi antennas. For that setup a middle-part adapter is required between the DIN adapter and 1575R | | 1575RWLE with bottom DIN adapter | 195 | 150 | 225 | Including the LTE and WiFi antennas |

Performance Table

Supported Frequency and Bands

EM7590 Module and the 1575R appliance support all of the following bands and frequencies (worldwide coverage). Actual band usage is determined according to local region/country regulations and carrier capabilities.

Note - Operation in 814-824MHz is disabled in Canada 20, 29, 32.

Cellular Certifications

1575R Cellular model use a fully certified cellular modem made by Sierra Wireless providing worldwide coverage with just one module.

As such, all granted carriers/operators are approved.

1575R certification:

Note: The modules have worldwide carrier's support.

Downloads for 1575R Appliances

The 1575R appliance supports firmware versions R81.10.10 and higher.

Refer to sk178615 - Quantum Spark R81.10.X Releases.

Known Limitations for 1575R Appliances

Refer to sk178604: R81.10.X Known Limitations.

Resolved Issues for 1575R Appliances

Refer to sk181134: R81.10.X Resolved Issues and Enhancements.

Documentation for 1575R Appliances

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.