Checkpoint QUANTUM SPARK 1595R User manual

[Classification: Protected]
28 May 2023
QUANTUM SPARK 1595R
Getting Started Guide

Check Point Copyright Notice
© 2023 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation are protected by copyright and distributed under
licensing restricting their use, copying, distribution, and decompilation. No part of this product or related
documentation may be reproduced in any form or by any means without prior written authorization of Check
Point. While every precaution has been taken in the preparation of this book, Check Point assumes no
responsibility for errors or omissions. This publication and features described herein are subject to change
without notice.
RESTRICTED RIGHTS LEGEND:
Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)
(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR
52.227-19.
TRADEMARKS:
Refer to the Copyright page for a list of our trademarks.
Refer to the Third Party copyright notices for a list of relevant copyrights and third-party licenses.

Important Information
Quantum Spark 1595R Getting Started Guide|3
Important Information
Latest Software
We recommend that you install the most recent software release to stay up-to-date with the
latest functional improvements, stability fixes, security enhancements and protection against
new and evolving attacks.
Certifications
For third party independent certification of Check Point products, see the Check Point
Certifications page.
Check Point Quantum Spark 1595R Getting Started Guide
For more about 1595R appliance, see the home page.
Latest Version of this Document in English
Open the latest version of this document in a Web browser.
Download the latest version of this document in PDF format.
Feedback
Check Point is engaged in a continuous effort to improve its documentation.
Please help us by sending your comments.
Revision History
Date Description
28May 2023 First release of this document

Table of Contents
Quantum Spark 1595R Getting Started Guide|4
Table of Contents
Introduction 6
The Quantum Spark 1595R Appliance 7
Shipping Carton Contents 9
Connecting the Cables 10
Setting up the Appliance 11
Mounting Options 11
Using DC Power 15
Field Wiring for DC Mains 16
First Time Deployment Options 19
3G/4G/LTE/5G 20
Appliance Diagrams and Specifications 21
Front Panel 23
Management LED 27
Network LEDs 28
Back Panel 29
Side Panels 31
SIM Card Installation 34
Using the First Time Configuration Wizard 36
Welcome 37
Zero Touch 37
Authentication Details 39
Appliance Date and Time Settings 41
Appliance Name 42
Security Policy Management 43
Internet Connection 44
Local Network 46
Administrator Access 48
Appliance Registration 50
Security Management Server Authentication 53
Security Management Server Connection 54
Software Blade Activation 56
Summary 57
Zero Touch Cloud Service 58

Table of Contents
Quantum Spark 1595R Getting Started Guide|5
USB Drive or SD Card 59
Health and Safety Information 60
Information sur la Santé et la Sécurité 69
Support 78

Introduction
Quantum Spark 1595R Getting Started Guide|6
Introduction
Thank you for choosing Check Point's Internet Security Product Suite. Check Point products provide your
business with the most up to date and secure solutions available today.
Check Point also delivers worldwide technical services including educational, professional, and support
services through a network of Authorized Training Centers, Certified Support Partners, and Check Point
technical support personnel to ensure that you get the most out of your security investment.
For configuration instructions, see the:
n
Quantum Spark Appliances Release Notes for your version.
n
Quantum Spark Appliances Locally Managed Administration Guide for your version.
n
Quantum Spark Appliances Centrally Managed Administration Guide for your version.
For more technical information, go to Check Point Support Center .

The Quantum Spark 1595R Appliance
Quantum Spark 1595R Getting Started Guide|7
The Quantum Spark 1595R Appliance
The Quantum Spark 1595R is the rugged member of the 1500 Security Appliance family that delivers
enterprise-grade security in a series of simple and affordable, all-in-one Security Gateways to protect
branch office employees, networks and data from cyber-theft. These security appliances include a
comprehensive security suite and the latest R81.10 software for Quantum Spark appliances.
The Quantum Spark 1595R Next Generation Firewall (NGFW) secures Critical Infrastructure and Industrial
Control Systems (ICS) without impacting operations. Over 70 standard and proprietary protocols identify
and secure SCADA (Supervisory Control and Data Acquisition) and ICS equipment. This includes the most
popular protocols used in Utilities and Energy sectors, Manufacturing sectors, Building Management
Systems and IoT (Internet of Things) devices.
Features
nFanless, Aluminum-based design
nWired and WiFi + LTE
nConnectivity
lLAN: 4x1GbE
lWAN: 1x1GbE / SFP port
lDMZ: 1x1GbE / SFP port
lSupports Flexiport (LAN port can operate as WAN)
n5G supports Sub-6 GHz, while 4G supports Cat-20 and 3G supports DC-HSPA+ and WCDMA (no
2G support).
lFour external antennas (Main, MIMO1, MIMO2 and AUX) to allow the best RF signal and
coverage
leSIM + Dual SIM (Nano and Micro) functionality is supported to enable automatic fail over
between SIMs
nSerial port (RJ45 female connector), supports serial protocols RS232, RS422, R485 (SW-
configurable) for end point PLC control.
nTwo power sources
lPower adapter (12V, 40W Commercial grade and 120W Industrial -40 to 70 degree C grade)
Please follow the SKU options in the catalog.
l3-Pin terminal block, 12V-60VDC and -48VDC, supplied by the customer’s power infrastructure
lPower redundancy (when the two above are connected)
nDesktop, Wall mount and DIN rail (2 types of assembly - rear and bottom)
nUSB Type-C console port
nUSB 3.0 Port
nSD Card support
nICS/SCADA Protocol Support

The Quantum Spark 1595R Appliance
Quantum Spark 1595R Getting Started Guide|8
BACNet, CIP, DNP3, IEC-60870-5-104, IEC 60870-6 (ICCP), IEC 61850, MMS, ModBus, OPC DA &
UA, Profinet, Step7 (Siemens) and more; 1400+ in all.
See the full list at appwiki.checkpoint.com.
n3/4G/LTE/5G Cryptography: supports NAS/AS security procedures and Snow 3G/AES/ZUC security
nCertified to operate in harsh conditions
lIndustrial: IEEE 1613 , IEC 61850-3 , IEC 60945, EN/IEC 60529, heat and immunity to
electromagnetic interference
lRugged: EN/IEC 60529 , IEC 60068-2-27 shock, IEC 60068-2-6 vibration
lOperating Temperature Range: -40ºC ~ 75ºC (-40ºF ~ 167ºF)
lIP (Ingress Protection) Rating: IP30
Certification: IEC-60945 B, IACS E10:1991 , DNV-GL 2.4 , DNV-GL-CG-0339, IEC 61162-460
nMarine application: rated voltage 24 VDC, 12 VDC power input connector is not applicable.
nWall mount (for marine application).
nOperating ranges -40~70 deg. C for marine application.
Maritime

Shipping Carton Contents
Quantum Spark 1595R Getting Started Guide|9
Shipping Carton Contents
Item Quantity Description
Appliance 1 Quantum Spark 1595R Appliance.
LAN cable 1 1.8m - RJ45 to RJ45, CAT5e, shielded, STP, black color.
Console cable 1 1m, USB type-C to USB-2.0 type-A, black color.
Rubber feet 4 Not assembled on the appliance.
Terminal block
connector
1 Terminal block connector for external DC Mains connection
(customer's power infrastructure)
AC to DC industrial
power supply
1 CPAP-SG1570R-SNBT-AC
Relevant for all SKUs ending with -ac.
Wall mount kit 1
2
2
Includes drilling hole location sticker.
Screws: M4x6, truss screw.
Screw anchors.
DIN rail kit 1 DIN rail adapter + 4 screws.
SIM pin (WiFi-LTE
model only)
1 SIM slot pin
Antenna (WiFi-LTE
model only)
3
2
WiFi Antenna (RP-SMA connector, black color).
LTE Antenna (RP-SMA connector, black color).
Guides 1
1
Quantum Spark 1595R Appliance Quick Start Guide .
SIM Installation Guide (for Cellular model only)
License Agreement 1 End user license agreement.

Connecting the Cables
Quantum Spark 1595R Getting Started Guide|10
Connecting the Cables
1. When the appliance is turned on, the Power LED on the front panel lights up in red for a short period.
The LED then turns blue and starts to blink. This shows a boot is in progress and firmware is being
installed.
When the LED turns a solid blue, the appliance is ready for login.
Note - The LED is red if there is an alert or error.
2. Connect the standard network cable to the LAN1 port and to the network adapter on your PC.
3. If you use an external modem:
Connect the Ethernet cable to the WAN port on the appliance back panel and plug it into your external
modem or router’s PC/LAN network port. The Internet LED on the appliance front panel lights up
when the Ethernet is connected.
For DSL appliances only: Connect the telephone cable to the DSL port on the appliance back panel
and plug it into the DSL line socket. The DSL LED as well as the Internet LED remains off until you
configure the appliance, including setting up the DSL as an internet connection.
Note - Wait 10 seconds between power cycles (off and on).

Setting up the Appliance
Quantum Spark 1595R Getting Started Guide|11
Setting up the Appliance
1. Remove the Quantum Spark 1595R appliance from the shipping carton and place it on a tabletop.
For other mounting options, see below.
2. Identify the network interface marked as LAN1. This interface is pre-configured with the IP address
192.168.1.1.
Mounting Options
nDesktop - No special hardware or mounting instructions necessary. Assemble the 4 rubber feet (as
part of the box accessory kit) on the marked locations on the bottom side of the 1570R Appliance.
nDIN rail kit (complies with XXX 0) as part of the box accessory kit – Attaches to either back panel (for
1595R Wired) or bottom panel (for 1595R Wired and Wired-Cellular).
The DIN rail is supported on the bottom side for both flavors and on the rear side for the 1595R wired
flavor.
nWall mount - Attached from bottom panel. Use the sticker included in the box and the 2 screws and
anchors. (as part of the box accessory kit).
nWall mount brackets (comply with IEC60068-2-27, severity level 30g/11ms, IEC61850-3 Class 2) - 2
side brackets from the bottom side of the 1595R (Wired and WiFi-Cellular). It is sold separately as a
FRU.
Note - For Maritime installations, use only the wall mount brackets.
This table presents the dimensions of the 1595R Appliance with the DIN adapter of the Wired and Wireless.
Use this to design the required space for the appliance.
Flavor Height
(mm)
Width
(mm)
Depth
(mm) Notes
1595R
Wired
41.30 170 150 Without rubber feet
1595R with
rear DIN
adapter
41.30 170 168
1595R with
bottom DIN
adapter
108 170 150

Setting up the Appliance
Quantum Spark 1595R Getting Started Guide|12
Flavor Height
(mm)
Width
(mm)
Depth
(mm) Notes
1570WLE
with rear DIN
adapter
WiFi-LTE
177 150 225 Includes the LTE and WiFi antennas.
For that setup, a middle-part adapter
is required between the DIN adapter
and the 1595R Appliance.
1570WLE
with bottom
DIN adapter
195 150 225 Includes the LTE and WiFi antennas.
To mount the appliance using the DIN rail kit:
Attach the DIN rail kit with the 4 M3 screws which came in the box. Depending on the model, the DINrail
mount holes are located on the back panel or bottom panel or both.
Back panel

Setting up the Appliance
Quantum Spark 1595R Getting Started Guide|13
Bottom of the appliance
In the 1595R model, use the DIN rail mount holes located on the bottom panel :
Cellular Wired
To mount the appliance to the wall (standard):
1. Place the wall-mount sticker on the wall and drill two holes for the screws.
2. Insert the screw anchors into the wall.
3. Attach the 2 screws in the accessory kit (M4*6) to the wall.
4. Mount the appliance and verify the 2 screws are fastened well to the appliance.

Setting up the Appliance
Quantum Spark 1595R Getting Started Guide|14
To mount the appliance to the wall (side brackets):
The side wall mount brackets are not part of the kit and are sold separately as an FRU.
Cellular Wired
1. Attach each bracket to the side of the 1595R appliance. Use 2 screws for each bracket. (#2 on the
diagram)
2. Use the holes on the bracket (#1 on the top diagram) to mark the screw placement on the wall or
surface. Insert a screw through each hole and make sure the appliance is securely fastened.

Using DC Power
Quantum Spark 1595R Getting Started Guide|15
Using DC Power
To use the DC terminal block:
1. Insert the positive and negative wires into the V+ V- and ground (middle) contacts on the terminal
block connector.
2. Tighten the wire-clamps screws to prevent the DC wires coming loose.
3. Fasten the 2 side screws of the terminal block connector.
Before wiring the device, make sure that:
nThe terminal block is suitable for 14 AWG (6A). Torque value is 0.60 Newton/meter (5 Pound/inch).
nThe cross sectional area of the earthing conductors should be at least 14AWG.
nThe temperature rating of the input connection cable should be higher than 95°C.
nThe product supports two power inputs:
lExternal power adapter (AC-to-DC) delivered by Check Point separately (commercial with Tma
40°C or industrial grade with Tma 70°C), as DC source.
l3 pin terminal block connector, connected the customer’s infrastructure power source, with the
following:
oNominal: from 12 to 60VDC, -48VDC, as DC Mains
oTolerances: -15% for 12VDC, and +20% for 60VDC
oMaximum Range: from 12 to 72VDC, as DC Source
nBased upon the product specification provided by the manufacturer, this unit is intended to be
supplied by an UL Listed power supply suitable for use at Tma 75°C, altitude 5000m, and these
voltage and current:
lFor V91RC series: 12VDC-60VDC, -48VDC, 2.3A
lFor V91 series: 12VDC-60VDC, -48VDC, 2.1A
Contact Check Point for more information or if you require further assistance.

Using DC Power
Quantum Spark 1595R Getting Started Guide|16
-48VDC Powering
1. To power the 1595R appliance with -48VDC supply, you need a special power source/supply, such as
Delta DPS1800-48/30.
2. Connect the power supply “+” pole to the 1595R “+” pole.
3. Connect the power supply "-" pole to the 1595R “-“pole.
Power sub-station
To comply with the power sub-station certification (IEEE 1613 and IEC 61850-3), you must connect both
power inputs for power redundancy.
To connect DC power to the equipment:
1. Turn OFF all power sources and equipment that will be attached to this appliance.
2. Connect protective earthing first, with at least 14 AWG G/Y color PE conductor, diameter 4.0mm min.,
screw type PE terminal, and a Spring/Star washer to provide satisfactory locking.
3. Attach signal cables to the appliance.
4. Attach the power cords to the appliance.
For DC systems, make sure the polarity is 12-60VDC, or -48VDC connections.
5. Attach the signal cables to other devices.
6. Connect the power cords to their sources.
7. Turn ON all the power sources.
To disconnect DC power from the equipment:
1. Turn OFF all power sources and equipment that are attached to this appliance.
Disconnect DC power sources at the breaker panel or by turning off the power source. Then remove
the DC cables.
2. Remove the signal cables from the connectors.
3. Remove the protective earthing conductor from the devices.
Tolerance
This equipment is intended for power supplied by DC mains.
nThe product supports 10.2VDC~72VDC, but with no power input tolerance.
Make sure the product is connected with a power supply of output voltage lower than 72VDC. A UPS,
battery or power regulator is recommended.
nIf the power supply cannot provide stable voltage, we recommend to select lower voltage like 48VDC
to prevent damage due to over voltage.
Field Wiring for DC Mains
Only trained service personnel are authorized to install and remove the 12VDC-60VDC Mains or the power
adapter AC2DC, and make the connections to and disconnections from the 12VDC-60VDC Mains.

Using DC Power
Quantum Spark 1595R Getting Started Guide|17
The customer is responsible for ensuring that only trained service personnel install or remove the 12VDC-
60VDC power cable.
Safety Statement
Caution
To reduce the risk of electric shock or energy hazards:
nIt is the customer's responsibility to supply the necessary power cable.
nUse a circuit breaker that is rated at 20 amps.
nUse one of these wires with a minimal temperature rating of 90°C:
l1.5 mm2(14 AWG) single copper wire
l1.5 mm2(14 AWG) multi-core copper
nStrip the wire, and leave the bare lead approximately 10mm for terminals connection.
nTorque the wiring-terminal screws to 0.60 Newton/meter (5 Pound/inch).
nWire strip length is 4-4 mm.
nFor supply connections, use wires with a minimal temperature rating of 90°C.
nIf the power source requires ring terminals, you must use a crimping tool to install the ring terminals to
the power cord wires.
The ring terminals must be UL approved and must accommodate the wire that is described above.
This equipment is designed to permit the connection the earthed conductor of the DC supply circuit to the
earthed conductor at the equipment. If this connection is made, all of the following conditions must be met:
nThis equipment shall be connected directly to theDC supply system earthed electrode conductor or
to a bonding jumper from an earthing terminal bar or bus, to which the DC supply system earthed
electrode conductor is connected.
nThis equipment shall be located in the same immediate area (such as, adjacent cabinets) as any
other equipment that has a connection between the earthed conductor of the same DC supply circuit
and the earthed conductor, and also the point of earthed of the DC system. The DC system shall not
be earthed elsewhere.
nThe DC supply source shall be located within the same premises as this equipment.
nSwitching or disconnecting devices shall not be in the earthed circuit conductor between the DC
source and the point of connection of the earthed electrode conductor.
Danger
Electrical current from power, telephone, and communication cables is hazardous.

Using DC Power
Quantum Spark 1595R Getting Started Guide|18
To avoid a shock hazard:
nDo not connect or disconnect any cables or perform installation, maintenance, or reconfiguration of
this product during an electrical storm.
nConnect all power cords to properly wired sources.
nConnect to properly wired power sources any equipment that will be attached to this product.
nWhen possible, use one hand only to connect or disconnect signal cables.
nNever turn on any equipment when there is evidence of fire, water, or structural damage.
nDisconnect the attached DC power sources before you open the device covers, unless you are
instructed otherwise in the installation and configuration procedures.
nConnect and disconnect cables as described when you install, move, or open covers on this product
or attached devices.
Caution - Wiring methods used for the connection of the equipment to the DC mains
supply are accordance with the National Electrical Code, ANSI/NFPA 70, and the
Canadian Electrical Code, Part I, CSA C22.1.
Caution
This equipment has a connection between the earthed conductor of the DC supply circuit and the earthing
conductor. See installation instructions.
This equipment has a connection between the earthed conductor of the DC supply circuit and the earthing
conductor. All of the following installation conditions must be met:
nThis equipment shall be connected directly to the DC supply system earthing electrode conductor or
to a bonding jumper from an earthing terminal bar or bus to which the DC supply system earthing
electrode conductor is connected.
nThis equipment shall be located in the same immediate area (such as adjacent cabinets) as any other
equipment that has a connection between the earthed conductor of the same DC supply circuit and
the earthing conductor, and also the point of earthing of the DC system. The DC system shall not be
earthed elsewhere.
nThe DC supply source shall be located within the same premises as this equipment.
nSwitching or disconnecting devices shall not be in the earthed circuit conductor between the DC
source and the point of the connection of the earthing electrode conductor.
Installation manual of field wiring for DC Power connected
Attention - This equipment must be installed and removed by trained skilled person in a
restricted-access location, as defined by the NEC and IEC 62368-1/IEC 60950-1, The
Standard for Safety of Audio/video, information and communication technology
equipment.

First Time Deployment Options
Quantum Spark 1595R Getting Started Guide|19
First Time Deployment Options
There are different options for first time deployment of your gateways:
n
"Using the First Time Configuration Wizard" on page36
n
"Zero Touch Cloud Service" on page58
n
"USB Drive or SD Card" on page59

3G/4G/LTE/5G
Quantum Spark 1595R Getting Started Guide|20
3G/4G/LTE/5G
The 1595R Cellular supports these features:
nEmbedded modem that supports the latest advanced 5G NR Sub-6 GHz connectivity, with fallback to
LTE/4G and 3G networks.
nWorldwide 5G coverage with a single product.
nDual SIM functionality is supported to enable automatic fail over between SIMs.
n5G supports Sub-6 GHz, while 4G supports Cat-20 and 3G supports DC-HSPA+ and WCDMA (no 2G
support).
nPeak download rate is 300Mbps and uplink of 50Mbps - TBD
nFour external antennas (RP-SMA type, Main, MIMO1, MIMO2 and AUX) to allow the best RF signal
and coverage.
For more information on LTE, see sk180545.