Check Point firewall models compared

How the model numbers work

The first digits of a Check Point model number give its range, and a higher number within a range means more throughput:

• 2500s: Check Point Spark, for small businesses and small branches. See Check Point Spark firewalls.
• 3900s: Check Point Force for branch offices.
• 9000s: Check Point Force for the network perimeter, 1U.
• 19000s and 29000s: Check Point Force for data centres, 2U.

The Force part numbers are on Check Point Force firewalls. Check Point's 2026 datasheets call the ranges Check Point Force and Check Point Spark; you will also see them as Quantum Force and Quantum Spark, their earlier names, and the part numbers are the same.

Spark 2500 models

From Check Point's Spark 2500 datasheet.

Force 3900 models

Force 9000 models

Force 19000 and 29000 models

Figures are Check Point's own, from each model's datasheet (linked under Vendor sources). Firewall throughput is the plain figure, NGFW is the figure with application control and IPS on, and threat prevention is the figure with Check Point's threat prevention protections on, so size on that one if you plan to use the package the appliance ships with.

Choosing a model

A first pass at the shortlist:

• Size on threat prevention throughput. Compare the threat prevention figure with your fastest internet or WAN link and leave room to grow. The plain firewall figure is measured with inspection off.
• Count the ports you need. Desktop Spark and Force 3900 models have their ports built in; Force 9000, 19000 and 29000 models take network cards, and their Plus versions come with more ports fitted.
• Decide on Wi-Fi, 5G and form. Wi-Fi 7 and 5G are options on the desktop Spark models. The Spark 2590, Force 3970 and 3980 and every model above them are rack-mount with redundant power.
• Plan for growth. Force models can be clustered with a Maestro Hyperscale Orchestrator, so capacity is added by adding gateways.

Contact us with your link speeds, user numbers and sites and we will suggest two or three models to compare.

Earlier models and end-of-sale dates

Check Point publishes the dates and the successor for each appliance in its Support Life Cycle Policy (opens in a new tab):

Dates are the vendor's published end-of-sale and support dates. We can quote current replacements and plan the swap.

Management, licences and Harmony

Every model is managed from a Check Point Security Management Server, for which Check Point makes the Smart-1 appliances. Licences and renewals are on softwarelicensing.uk (opens in a new tab), and Check Point's Harmony products for endpoints, email and mobile devices are on check-point-harmony.co.uk (opens in a new tab).

How to order

How ordering works. Press Add next to a part number and it goes into your basket; where a security package for further years, a blade or an accessory goes with the appliance, you pick it in the same step or skip it. Then View basket and Request a quote. We check every line, quantity and term against your sites and come back with a personalised quote by email. Nothing is charged online. We can also design, supply, stage, install and configure the firewalls as a project, with the scope confirmed at quote (see network installation).