Checkpoint Quantum Spark 1570R User manual

Models: V81R [Classification: Protected]
29 July2021
QUANTUM SPARK 1570R
APPLIANCE
R80.20.XX
Getting Started Guide

Check Point Copyright Notice
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|2
CheckPointCopyrightNotice
©2020CheckPointSoftwareTechnologiesLtd.

Allrightsreserved.Thisproductandrelateddocumentationareprotectedbycopyrightanddistributedunder
licensingrestrictingtheiruse,copying,distribution,anddecompilation.Nopartofthisproductorrelated
documentationmaybereproducedinanyformorbyanymeanswithoutpriorwrittenauthorizationofCheck
Point.Whileeveryprecautionhasbeentakeninthepreparationofthisbook,CheckPointassumesno
responsibilityforerrorsoromissions.Thispublicationandfeaturesdescribedhereinaresubjecttochange
withoutnotice.

RESTRICTEDRIGHTSLEGEND:
Use,duplication,ordisclosurebythegovernmentissubjecttorestrictionsassetforthinsubparagraph(c)
(1)(ii)oftheRightsinTechnicalDataandComputerSoftwareclauseatDFARS252.227-7013andFAR
52.227-19.

TRADEMARKS:
RefertotheCopyrightpageforalistofourtrademarks.
RefertotheThirdPartycopyrightnoticesforalistofrelevantcopyrightsandthird-partylicenses.

Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|3
ImportantInformation
LatestSoftware
Werecommendthatyouinstallthemostrecentsoftwarereleasetostayup-to-datewiththe
latestfunctionalimprovements,stabilityfixes,securityenhancementsandprotectionagainst
newandevolvingattacks.
Certifications
ForthirdpartyindependentcertificationofCheckPointproducts,seetheCheckPoint
Certificationspage.
CheckPoint1500Appliances
Formoreaboutthe1500ApplianceSeries,seethe1500Appliancehomepage.
LatestVersionofthisDocumentinEnglish
OpenthelatestversionofthisdocumentinaWebbrowser.
DownloadthelatestversionofthisdocumentinPDFformat.
Feedback
CheckPointisengagedinacontinuousefforttoimproveitsdocumentation.
Pleasehelpusbysendingyourcomments.

RevisionHistory
Date Description
29July2021 UpdatedMaritimecertification
17February2021 AddedLTEAntennainformation
11February2021 Updated "UsingDCPower"onpage15 ,rebranding
19November2020 Firstreleaseofthisdocument

Table of Contents
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|4
TableofContents
Introduction 6
TheQuantumSpark1570RAppliance 6
ShippingCartonContents 8
ConnectingtheCables 9
SettinguptheAppliance 10
MountingOptions 10
UsingDCPower 15
FieldWiringforDCMains 17
FirstTimeDeploymentOptions 19
3G/4G/LTE 20
ApplianceDiagramsandSpecifications 23
FrontPanel 25
ManagementLED 29
NetworkLEDs 30
BackPanel 31
SidePanels 33
SIMCardInstallation 36
UsingtheFirstTimeConfigurationWizard 38
Welcome 39
ZeroTouch 39
AuthenticationDetails 41
ApplianceDateandTimeSettings 43
ApplianceName 44
SecurityPolicyManagement 45
InternetConnection 46
LocalNetwork 48
WirelessNetwork 49
AdministratorAccess 51
ApplianceRegistration 53
SecurityManagementServerAuthentication 56
SecurityManagementServerConnection 57
SoftwareBladeActivation 59
Summary 60

Table of Contents
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|5
ZeroTouchCloudService 61
USBDriveorSDCard 62
HealthandSafetyInformation 63
InformationsurlaSantéetlaSécurité 71
Support 78

Introduction
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|6
Introduction
ThankyouforchoosingCheckPoint'sInternetSecurityProductSuite.CheckPointproductsprovideyour
businesswiththemostuptodateandsecuresolutionsavailabletoday.
CheckPointalsodeliversworldwidetechnicalservicesincludingeducational,professional,andsupport
servicesthroughanetworkofAuthorizedTrainingCenters,CertifiedSupportPartners,andCheckPoint
technicalsupportpersonneltoensurethatyougetthemostoutofyoursecurityinvestment.
Formoreinformationabouttheappliance,seethe QuantumSpark1500 , 1600  and  1800  Appliance  Series
AdministrationGuide .
Formoretechnicalinformation,gotoCheckPointSupportCenter.
TheQuantumSpark1570RAppliance
TheQuantumSpark1570Ristheruggedmemberofthe1500SecurityAppliancefamilythatdelivers
enterprise-gradesecurityinaseriesofsimpleandaffordable,all-in-oneSecurityGatewaystoprotect
branchofficeemployees,networksanddatafromcyber-theft.Thesesecurityappliancesincludea
comprehensivesecuritysuiteandthelatestR80softwareforSMBappliances.
TheQuantumSpark1570RNextGenerationFirewall(NGFW)securesCriticalInfrastructureandIndustrial
ControlSystems(ICS)withoutimpactingoperations.Over70standardandproprietaryprotocolsidentify
andsecureSCADA(SupervisoryControlandDataAcquisition)andICSequipment.Thisincludesthemost
popularprotocolsusedinUtilitiesandEnergysectors,Manufacturingsectors,BuildingManagement
SystemsandIoT(InternetofThings)devices.
Features
nFanless,Aluminum-baseddesign
nWiredandWiFi+LTE
nConnectivity
lLAN:8x1GbE
lWAN:1x1GbE/SFPport
lDMZ:1x1GbE/SFPport
lSupportsFlexiport(LANportcanoperateasWAN)
nEmbeddedCAT63/4G/LTEcellularmodem
lWorldwideLTEcoveragewithjusttwoproductvariants:oneforNorthAmericaandEMEA,and
oneforAsia-Pacific
lTwoexternalantennas(MainandDiversity)toallowthebestRFsignalandcoverage
lDualSIM(NanoandMicro)functionalityissupportedtoenableautomaticfailoverbetween
SIMs
nEmbedded3x3WiFimodem,Dualbandnon-concurrent802.11n/ac
nSerialport(DB9femaleconnector),supportsserialprotocolsRS232,RS422,R485(SW-
configurable)forendpointPLCcontrol.
nTwopowersources

Introduction
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|7
lPoweradapter(12V,40WCommercialgradeand120WIndustrial-40to70degreeCgrade)
PleasefollowtheSKUoptionsinthecatalog.
l3-Pinterminalblock,12V-60VDCand-48VDC,suppliedbythecustomer’spowerinfrastructure
lPowerredundancy(whenthetwoaboveareconnected)
nDesktop,WallmountandDINrail(2typesofassembly-rearandbottom)
nUSBType-Cconsoleport
nUSB3.0Port
nSDCardsupport
nICS/SCADAProtocolSupport
BACNet,CIP,DNP3,IEC-60870-5-104,IEC60870-6(ICCP),IEC61850,MMS,ModBus,OPCDA&
UA,Profinet,Step7(Siemens)andmore;1400+inall.
Seethefulllistatappwiki.checkpoint.com.
nWi-FiCryptography:supportsWPA(TKIP128bit)andWPA2(AES,128/256bit)
n3/4G/LTECryptography:supportsNAS/ASsecurityproceduresandSnow3G/AES/ZUCsecurity
nCertifiedtooperateinharshconditions
lIndustrial:IEEE1613,IEC61850-3,IEC60945,EN/IEC60529,heatandimmunityto
electromagneticinterference
lRugged:EN/IEC60529,IEC60068-2-27shock,IEC60068-2-6vibration
lOperatingTemperatureRange:-40ºC~75ºC(-40ºF~167ºF)
lIP(IngressProtection)Rating:IP30
 Certification:IEC-60945B,IACSE10:1991,DNV-GL2.4,DNV-GL-CG-0339,IEC61162-460
nMarineapplication:ratedvoltage24VDC,12VDCpowerinputconnectorisnotapplicable.
nWallmount(formarineapplication).
nOperatingranges-40~70deg.Cformarineapplication.
Maritime

Shipping Carton Contents
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|8
ShippingCartonContents
Item Quantity Description
Appliance 1 QuantumSpark1570RAppliance.
LANcable 1 1.8m-RJ45toRJ45,CAT5e,shielded,STP,blackcolor.
Consolecable 1 1m,USBtype-CtoUSB-2.0type-A,blackcolor.
Rubberfeet 4 Notassembledontheappliance.
Terminalblock
connector
1 TerminalblockconnectorforexternalDCMainsconnection
(customer'spowerinfrastructure)
Wallmountkit 1
2
2
Includesdrillingholelocationsticker.
Screws:M4x6,trussscrew.
Screwanchors.
DINrailkit 1 DINrailadapter+4screws.
SIMpin(WiFi-LTE
modelonly)
1 SIMslotpin
Antenna(WiFi-LTE
modelonly)
3
2
WiFiAntenna(RP-SMAconnector,blackcolor).
LTEAntenna(RP-SMAconnector,blackcolor).
Guides 1
1
QuantumSpark1570RApplianceQuickStartGuide .
SIMInstallationGuide (forWiFi-LTEmodelonly)
LicenseAgreement 1 Enduserlicenseagreement.

Connecting the Cables
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|9
ConnectingtheCables
1. Connectthepowersupplyunittotheapplianceandtoapoweroutlet.
Theapplianceisturnedonwhenthepowersupplyisconnected.
2. Whentheapplianceisturnedon,thePowerLEDonthefrontpanellightsupinredforashortperiod.
TheLEDthenturnsblueandstartstoblink.Thisshowsabootisinprogressandfirmwareisbeing
installed.
WhentheLEDturnsasolidblue,theapplianceisreadyforlogin.
Note-TheLEDisredifthereisanalertorerror.
3. ConnectthestandardnetworkcabletotheLAN1portandtothenetworkadapteronyourPC.
4. Ifyouuseanexternalmodem:
ConnecttheEthernetcabletotheWANportontheappliancebackpanelandplugitintoyourexternal
modemorrouter’sPC/LANnetworkport.TheInternetLEDontheappliancefrontpanellightsup
whentheEthernetisconnected.
ForDSLappliancesonly:ConnectthetelephonecabletotheDSLportontheappliancebackpanel
andplugitintotheDSLlinesocket.TheDSLLEDaswellastheInternetLEDremainsoffuntilyou
configuretheappliance,includingsettinguptheDSLasaninternetconnection.
Note-Wait10secondsbetweenpowercycles(offandon).

Setting up the Appliance
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|10
SettinguptheAppliance
1. RemovetheQuantumSpark1570Rappliancefromtheshippingcartonandplaceitonatabletop.
Forothermountingoptions,seebelow.
2. IdentifythenetworkinterfacemarkedasLAN1.Thisinterfaceispre-configuredwiththeIPaddress
192.168.1.1.
MountingOptions
nDesktop-Nospecialhardwareormountinginstructionsnecessary.Assemblethe4rubberfeet(as
partoftheboxaccessorykit)onthemarkedlocationsonthebottomsideofthe1570RAppliance.
nDINrailkit(complieswithIEC61850-3class0)aspartoftheboxaccessorykit–Attachestoeither
backpanel(for1570RWired)orbottompanel(for1570RWiredandWired-LTE).
TheDINrailissupportedonthebottomsideforbothflavorsandontherearsideforthe1570Rwired
flavor.
nWallmount-Attachedfrombottompanel.Usethestickerincludedintheboxandthe2screwsand
anchors.(aspartoftheboxaccessorykit).
nWallmountbrackets(complywithIEC60068-2-27,severitylevel30g/11ms,IEC61850-3Class2)-2
sidebracketsfromthebottomsideofthe1570R(WiredandWiFi-LTE).ItissoldseparatelyasaFRU.
Note-ForMaritimeinstallations,useonlythewallmountbrackets.
Thistablepresentsthedimensionsofthe1570RAppliancewiththeDINadapteroftheWiredandWireless.
Usethistodesigntherequiredspacefortheappliance.
 Flavor Height
(mm)
Width
(mm)
Depth
(mm) Notes
1570R
Wired
90 150 150 Withoutrubberfeet
1570Rwith
rearDIN
adapter
90 150 168 
1570Rwith
bottomDIN
adapter
108 150 150 
1570WLE
withrearDIN
adapter
WiFi-LTE
177 150 225 IncludestheLTEandWiFiantennas.
Forthatsetup,amiddle-partadapter
isrequiredbetweentheDINadapter
andthe1570RAppliance.
1570WLE
withbottom
DINadapter
195 150 225 IncludestheLTEandWiFiantennas.

Setting up the Appliance
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|11
TomounttheapplianceusingtheDINrailkit:
AttachtheDINrailkitwiththe4M3screwswhichcameinthebox.Dependingonthemodel,theDINrail
mountholesarelocatedonthebackpanelorbottompanelorboth.

Setting up the Appliance
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|12
Backpanel


Setting up the Appliance
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|13
Bottomoftheappliance
Inthe1570RWiFi-LTEmodel,usetheDINrailmountholeslocatedonthebottompanel:

Setting up the Appliance
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|14
Tomounttheappliancetothewall(standard):
1. Placethewall-mountstickeronthewallanddrilltwoholesforthescrews.
2. Insertthescrewanchorsintothewall.
3. Attachthe2screwsintheaccessorykit(M4*6)tothewall.
4. Mounttheapplianceandverifythe2screwsarefastenedwelltotheappliance.
Tomounttheappliancetothewall(sidebrackets):
ThesidewallmountbracketsarenotpartofthekitandaresoldseparatelyasanFRU.
1. Attacheachbrackettothesideofthe1570Rappliance.Use2screwsforeachbracket.(#2onthe
diagram)
2. Usetheholesonthebracket(#1onthediagram)tomarkthescrewplacementonthewallorsurface.
Insertascrewthrougheachholeandmakesuretheapplianceissecurelyfastened..

Using DC Power
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|15
UsingDCPower
TousetheDCterminalblock:
1. InsertthepositiveandnegativewiresintotheV+V-andground(middle)contactsontheterminal
blockconnector.
2. Tightenthewire-clampsscrewstopreventtheDCwirescomingloose.
3. Fastenthe2sidescrewsoftheterminalblockconnector.
Beforewiringthedevice,makesurethat:
nTheterminalblockissuitablefor14AWG(6A).Torquevalueis0.60Newton/meter(5Pound/inch).
nThecrosssectionalareaoftheearthingconductorsshouldbeatleast14AWG.
nThetemperatureratingoftheinputconnectioncableshouldbehigherthan95°C.
nTheproductsupportstwopowerinputs:
lExternalpoweradapter(AC-to-DC)deliveredbyCheckPointseparately(commercialwithTma
40°CorindustrialgradewithTma70°C),asDCsource.

Using DC Power
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|16
l3pinterminalblockconnector,connectedthecustomer’sinfrastructurepowersource,withthe
following:
oNominal:from12to60VDC,-48VDC,asDCMains
oTolerances:-15%for12VDC,and+20%for60VDC
oMaximumRange:from12to72VDC,asDCSource
nBasedupontheproductspecificationprovidedbythemanufacturer,thisunitisintendedtobe
suppliedbyanULListedpowersupplysuitableforuseatTma75°C,altitude5000m,andthese
voltageandcurrent:
lForV-81WLRseries:12VDC-60VDC,-48VDC,2.3A
lForV-81Rseries:12VDC-60VDC,-48VDC,2.1A
ContactCheckPointformoreinformationorifyourequirefurtherassistance.
-48VDCPowering
1. Topowerthe1570Rappliancewith-48VDCsupply,youneedaspecialpowersource/supply,suchas
DeltaDPS1800-48/30.
2. Connectthepowersupply“+”poletothe1570R“+”pole.
3. Connectthepowersupply"-"poletothe1570R“-“pole.
Powersub-station
Tocomplywiththepowersub-stationcertification(IEEE1613andIEC61850-3),youmustconnectboth
powerinputsforpowerredundancy.
ToconnectDCpowertotheequipment:
1. TurnOFFallpowersourcesandequipmentthatwillbeattachedtothisappliance.
2. Connectprotectiveearthingfirst,withatleast14AWGG/YcolorPEconductor,diameter4.0mmmin.,
screwtypePEterminal,andaSpring/Starwashertoprovidesatisfactorylocking.
3. Attachsignalcablestotheappliance.
4. Attachthepowercordstotheappliance.
ForDCsystems,makesurethepolarityis12-60VDC,or-48VDCconnections.
5. Attachthesignalcablestootherdevices.
6. Connectthepowercordstotheirsources.
7. TurnONallthepowersources.
TodisconnectDCpowerfromtheequipment:
1. TurnOFFallpowersourcesandequipmentthatareattachedtothisappliance.
DisconnectDCpowersourcesatthebreakerpanelorbyturningoffthepowersource.Thenremove
theDCcables.
2. Removethesignalcablesfromtheconnectors.
3. Removetheprotectiveearthingconductorfromthedevices.
Tolerance

Using DC Power
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|17
ThisequipmentisintendedforpowersuppliedbyDCmains.
nTheproductsupports10.2VDC~72VDC,butwithnopowerinputtolerance.
Makesuretheproductisconnectedwithapowersupplyofoutputvoltagelowerthan72VDC.AUPS,
batteryorpowerregulatorisrecommended.
nIfthepowersupplycannotprovidestablevoltage,werecommendtoselectlowervoltagelike48VDC
topreventdamageduetoovervoltage.
FieldWiringforDCMains
Onlytrainedservicepersonnelareauthorizedtoinstallandremovethe12VDC-60VDCMainsorthepower
adapterAC2DC,andmaketheconnectionstoanddisconnectionsfromthe12VDC-60VDCMains.
Thecustomerisresponsibleforensuringthatonlytrainedservicepersonnelinstallorremovethe12VDC-
60VDCpowercable.
SafetyStatement
Caution
Toreducetheriskofelectricshockorenergyhazards:
nItisthecustomer'sresponsibilitytosupplythenecessarypowercable.
nUseacircuitbreakerthatisratedat20amps.
nUseoneofthesewireswithaminimaltemperatureratingof90°C:
l1.5mm2(14AWG)singlecopperwire
l1.5mm2(14AWG)multi-corecopper
nStripthewire,andleavethebareleadapproximately10mmforterminalsconnection.
nTorquethewiring-terminalscrewsto0.60Newton/meter(5Pound/inch).
nWirestriplengthis4-4mm.
nForsupplyconnections,usewireswithaminimaltemperatureratingof90°C.
nIfthepowersourcerequiresringterminals,youmustuseacrimpingtooltoinstalltheringterminalsto
thepowercordwires.
TheringterminalsmustbeULapprovedandmustaccommodatethewirethatisdescribedabove.
ThisequipmentisdesignedtopermittheconnectiontheearthedconductoroftheDCsupplycircuittothe
earthedconductorattheequipment.Ifthisconnectionismade,allofthefollowingconditionsmustbemet:
nThisequipmentshallbeconnecteddirectlytotheDCsupplysystemearthedelectrodeconductoror
toabondingjumperfromanearthingterminalbarorbus,towhichtheDCsupplysystemearthed
electrodeconductorisconnected.
nThisequipmentshallbelocatedinthesameimmediatearea(suchas,adjacentcabinets)asany
otherequipmentthathasaconnectionbetweentheearthedconductorofthesameDCsupplycircuit
andtheearthedconductor,andalsothepointofearthedoftheDCsystem.TheDCsystemshallnot
beearthedelsewhere.
nTheDCsupplysourceshallbelocatedwithinthesamepremisesasthisequipment.

Using DC Power
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|18
nSwitchingordisconnectingdevicesshallnotbeintheearthedcircuitconductorbetweentheDC
sourceandthepointofconnectionoftheearthedelectrodeconductor.
Danger
Electricalcurrentfrompower,telephone,andcommunicationcablesishazardous.
Toavoidashockhazard:
nDonotconnectordisconnectanycablesorperforminstallation,maintenance,orreconfigurationof
thisproductduringanelectricalstorm.
nConnectallpowercordstoproperlywiredsources.
nConnecttoproperlywiredpowersourcesanyequipmentthatwillbeattachedtothisproduct.
nWhenpossible,useonehandonlytoconnectordisconnectsignalcables.
nNeverturnonanyequipmentwhenthereisevidenceoffire,water,orstructuraldamage.
nDisconnecttheattachedDCpowersourcesbeforeyouopenthedevicecovers,unlessyouare
instructedotherwiseintheinstallationandconfigurationprocedures.
nConnectanddisconnectcablesasdescribedwhenyouinstall,move,oropencoversonthisproduct
orattacheddevices.
CAUTION:
WiringmethodsusedfortheconnectionoftheequipmenttotheDCmainssupplyareaccordancewiththe
NationalElectricalCode,ANSI/NFPA70,andtheCanadianElectricalCode,PartI,CSAC22.1.
CAUTION:
ThisequipmenthasaconnectionbetweentheearthedconductoroftheDCsupplycircuitandtheearthing
conductor.Seeinstallationinstructions.
ThisequipmenthasaconnectionbetweentheearthedconductoroftheDCsupplycircuitandtheearthing
conductor.Allofthefollowinginstallationconditionsmustbemet:
nThisequipmentshallbeconnecteddirectlytotheDCsupplysystemearthingelectrodeconductoror
toabondingjumperfromanearthingterminalbarorbustowhichtheDCsupplysystemearthing
electrodeconductorisconnected.
nThisequipmentshallbelocatedinthesameimmediatearea(suchasadjacentcabinets)asanyother
equipmentthathasaconnectionbetweentheearthedconductorofthesameDCsupplycircuitand
theearthingconductor,andalsothepointofearthingoftheDCsystem.TheDCsystemshallnotbe
earthedelsewhere.
nTheDCsupplysourceshallbelocatedwithinthesamepremisesasthisequipment.
nSwitchingordisconnectingdevicesshallnotbeintheearthedcircuitconductorbetweentheDC
sourceandthepointoftheconnectionoftheearthingelectrodeconductor.
InstallationmanualoffieldwiringforDCPowerconnected
Attention:Thisequipmentmustbeinstalledandremovedbytrainedskilledpersoninarestricted-access
location,asdefinedbytheNECandIEC62368-1/IEC60950-1,TheStandardforSafetyofAudio/video,
informationandcommunicationtechnologyequipment.

First Time Deployment Options
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|19
FirstTimeDeploymentOptions
Therearedifferentoptionsforfirsttimedeploymentofyourgateways:
n "UsingtheFirstTimeConfigurationWizard"onpage38
n "ZeroTouchCloudService"onpage61
n "USBDriveorSDCard"onpage62

3G/4G/LTE
Quantum Spark 1570R Appliance R80.20.XX Getting Started Guide|20
3G/4G/LTE
The1570RLTEsupportsthesefeatures:
nEmbeddedmodemthatsupportsthelatestadvanced4G/LTE,withfallbackto3GHSPA+networksin
NorthAmerica,Europe,andAsia.
nWorldwideLTEcoveragewithjusttwoproductvariants:oneforNorthAmericaandEMEA,andone
forAsia-Pacific.
nDualSIMfunctionalityissupportedtoenableautomaticfailoverbetweenSIMs.
n4G/LTEsupportsCAT6,while3GsupportsHSPA+andUMTS(no2Gsupport).
nPeakdownloadrateis300Mbpsanduplinkof50Mbps.
nTwoexternalantennas(RP-SMAtype,Main,andDiversity)toallowthebestRFsignalandcoverage.
Frequencyandbandssupported:
4G/LTERadiofrequencyandbands
Region/country Frequency(MHz) Band
APACandAustralia 2100 1
1800 3
850 5
2600 7
900 8
700 28
EMEA 2100 1
1800 3
2600 7
900 8
800 20