Checkpoint small business firewall: Check Point Spark 2500 models

The Spark 2500 range

From Check Point's Spark 2500 datasheet:

• 2530 and 2550: desktop models with a WAN port and a DMZ port that each take copper or an SFP module, and a 1GbE LAN switch. The W versions add Wi-Fi 7 (2x2, 2.4 and 5 GHz), and the 2550W5G adds a 5G modem.
• 2560 and 2570: desktop models with eight 1GbE LAN ports and two 10GbE SFP+ ports. Their W versions have 4x4 Wi-Fi 7 across 2.4, 5 and 6 GHz, and the 2570W5G adds a 5G modem.
• 2580: a half-width rack-mount model with 10GbE WAN and DMZ ports and dual power.
• 2590: a 1U model with 30 LAN ports, including four 10GbE SFP+, and dual internal power supplies.

Check Point names the 2580 as the successor to the Spark 1600 and 1800, and the 2590 as the successor to the 1900 and 2000. Check Point's 2026 datasheets call the ranges Check Point Force and Check Point Spark; you will also see them as Quantum Force and Quantum Spark, their earlier names, and the part numbers are the same.

Check Point Spark models and part numbers

Press Add next to a part number to put it in your basket. Where a subscription or support option goes with the hardware, you choose it in the same step and it goes into your basket with the hardware. Part numbers come from the vendor; we confirm each line, quantity and term when we quote.

Which part number to choose

Each Spark model has up to three kinds of appliance code, shown in the table above:

• With the SNBT package for 1 year: the standard code, for example CPAP-SG2530-SNBT. It includes the Threat Prevention and Sandboxing package for the first year.
• With a support plan: the same appliance and package plus Collaborative or Direct support, at Premium or Premium Pro level, for 1, 2, 3 or 5 years. These are listed in the next section.
• Hardware only (codes starting CPAP-MSP): the appliance for pay-as-you-go subscriptions.

Wi-Fi models are built for a radio region, and the region is part of the code. UK orders use the Europe codes ending or containing -EU, which are the ones with Add buttons here. The codes for the other regions are on Spark part numbers by region.

Spark 2500 part numbers with a support plan

Each code below is the appliance with the SNBT package and the support plan named, for the term in the column heading. Collaborative and Direct are Check Point's two support routes, each at Premium or Premium Pro level; we confirm the plan that fits when we quote.

Rugged 1575R and 1595R for industrial sites

The Check Point Rugged models are fanless firewalls rated by Check Point for -40 to 75 C, for DIN-rail, wall or desktop mounting. Check Point lists them for industrial control system networks, with one set of throughput figures for both:

• Rugged 1575R: eight 1GbE LAN ports, with WAN and DMZ ports that each take copper or an SFP module. It comes with an industrial AC power adaptor (the code ending -AC) or for a 12 to 60 V DC supply (the code ending -DC).
• Rugged 1575R Wi-Fi LTE: the same unit with Wi-Fi 6 and an LTE modem with two SIM slots, in AC and DC versions. UK orders use the Europe (-EU) codes.
• Rugged 1595R: a slimmer unit with four 1GbE LAN ports and a bypass NIC. It takes a 12 to 60 V DC supply, and the industrial AC adaptor is a separate part number (CPAC-1575R/1595R-PSU).
• Rugged 1595R 5G: the 1595R with a 5G modem and two SIM slots.

The codes ending -FW-PROMO are the base appliance with the Firewall package. The power adaptor and the rack-mount shelf for the wired models are offered when you add a Rugged firewall, and every fitting is on Check Point accessories.

Packages, blades and SD-WAN

Standard Spark appliance codes include the SNBT package for the first year. Check Point's packages are:

• NGFW (Next Generation Firewall): firewall, VPN, Identity Awareness, Application Control and IPS.
• NGTP (Next Generation Threat Prevention): NGFW plus URL Filtering, Antivirus, Anti-Bot, Anti-Spam and DNS Security.
• SNBT (Threat Prevention and Sandboxing, the SandBlast package): NGTP plus Threat Emulation sandboxing, with Zero Phishing on the current datasheets.

When you add a Spark firewall, the configurator offers the packages for additional years, IoT Protect and the SD-WAN subscription that Check Point lists for that model, to add or skip. For renewals on firewalls you already run, see Check Point licences (opens in a new tab) on softwarelicensing.uk.

Rack mounting, power and transceivers

Check Point lists a rack-mount shelf and rack ears for the Spark 2500 desktop models, replacement power supplies and antennas, and SFP and SFP+ transceivers for the fibre ports. The configurator offers the ones listed for your model when you add it, and every part number is on Check Point accessories.

Earlier Spark models

The Spark 1500 Pro models (1535, 1555, 1575 and 1595) and the Spark 1600, 1800, 1900 and 2000 are still listed, with end of sale in March 2027. They are on Spark 1500 Pro, 1600, 1800, 1900 and 2000, with the 2500 model Check Point names as each one's successor.

Lifecycle and replacements

Dates are the vendor's published end-of-sale and support dates. We can quote current replacements and plan the swap.

How to order

How ordering works. Press Add next to a part number and it goes into your basket; where a security package for further years, a blade or an accessory goes with the appliance, you pick it in the same step or skip it. Then View basket and Request a quote. We check every line, quantity and term against your sites and come back with a personalised quote by email. Nothing is charged online. We can also design, supply, stage, install and configure the firewalls as a project, with the scope confirmed at quote (see network installation). Every row shows Check Point's own part number, and your quote confirms the exact code for each appliance, package and term.

Vendor sources

• Check Point: Spark 2500 datasheet (opens in a new tab)
• Check Point: Support Life Cycle Policy (appliance end-of-sale and support dates) (opens in a new tab)
• Check Point: Rugged 1575R and 1595R datasheet (opens in a new tab)