Checkpoint QUANTUM SPARK 1500 Instruction Manual

Models: V-80, V-80W, V-81, V-81W, V-81WL, V-81WD, V-81R, V-81WLR, V-82, V-83 [Classification: Protected]
18 April2021
QUANTUM SPARK 1500,
1600 AND 1800
APPLIANCE SERIES
R80.20.25
Locally Managed
Administration Guide

Check Point Copyright Notice
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 2
Check Point Copyright Notice
© 2021 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation are protected by copyright and distributed
under licensing restricting their use, copying, distribution, and decompilation. No part of this product or
related documentation may be reproduced in any form or by any means without prior written authorization
of Check Point. While every precaution has been taken in the preparation of this book, Check Point
assumes no responsibility for errors or omissions. This publication and features described herein are
subject to change without notice.
RESTRICTED RIGHTS LEGEND:
Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)
(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR
52.227-19.
TRADEMARKS:
Refer to the Copyright page for a list of our trademarks.
Refer to the Third Party copyright notices for a list of relevant copyrights and third-party licenses.

Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 3
Important Information
Latest Software
We recommend that you install the most recent software release to stay up-to-date with the
latest functional improvements, stability fixes, security enhancements and protection
against new and evolving attacks.
Certifications
For third party independent certification of Check Point products, see the Check Point
Certifications page.
Check Point R80.20.25
For more about this release, see the R80.20.25 home page.
Latest Version of this Document in English
Open the latest version of this document in a Web browser.
Download the latest version of this document in PDF format.
Feedback
Check Point is engaged in a continuous effort to improve its documentation.
Please help us by sending your comments.
Revision History
Date Description
18 April2021 Updated
"SNMP" on page277
05 April 2021 First release of this document

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 4
Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series Overview
11
1500 Appliances
11
1600 and 1800 Appliances
11
Setting up the Quantum Spark Appliance
13
Connecting the Cables
14
First Time Deployment Options
15
Zero Touch Cloud Service
16
Deploying from a USB Drive or SD Card
17
Sample Configuration File
17
Preparing the Configuration Files
17
Deploying the Configuration File - Initial Configuration
18
Deploying the Configuration File - Existing Configuration
19
Viewing Configuration Logs
19
Troubleshooting Configuration Files
20
Configuration File Error
20
Suggested Workflow - Configuration File Error
20
Sample Configuration Log with Error
21
Using the set property Command
21
Configuration and Upgrade Scenarios
22
Configuring Cloud Services
22
Configuring a Guest Network
23
Configuring VPN
24
Configuring Remote Access VPN
24
Introduction
24
Prerequisites
24
Remote Access Configuration
24
L2TP VPN Client configuration
25
Configuring Site to Site VPN with a Preshared Secret
26
Introduction
26
Prerequisites
26

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 5
Configuration
26
Monitoring
26
Configuring Site to Site VPN with a Certificate
26
Introduction
26
Prerequisites
26
Configuration
27
Trust Procedures
27
Monitoring
28
Managing Clusters
29
Configuring a Cluster
29
Upgrading a Cluster
30
Configuring QoS
32
Enabling VoIP Traffic
33
Introduction
33
Configuration
33
Appliance Configuration
34
The Home Tab
35
Viewing System Information
35
Controlling and Monitoring Software Blades
36
Setting the Management Mode
38
Configuring Cloud Services
40
Managing Licenses
43
Viewing the Site Map
45
Notifications
45
Managing Active Devices
46
Viewing Monitoring Data
48
Network
48
Troubleshooting
49
Viewing Reports
50
Using System Tools
52
Managing the Device
54
Configuring Internet Connectivity
54
Configuring the Internet Connectivity
54

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 6
The 'Configuration' tab
55
Creating a New Bond (WAN)
57
The 'Connection Monitoring' tab
60
The 'Advanced' tab
60
Monitoring
63
Configuring Wireless Network
65
Configuring the Local Network
70
Reserved IP Address for Specific MAC
71
Switch
71
WAN as LAN
72
Monitor Mode
73
Physical Interfaces
74
Bridge
75
VLANs
76
Alias IP
77
VPN Tunnel (VTI)
78
Virtual Access Point (VAP)
78
BOND
80
Configuring a Hotspot
82
Configuring the Routing Table
85
Configuring MAC Filtering
88
Configuring the DNS Server
89
Configuring the Proxy Server
90
Backup, Restore, Upgrade, and Other System Operations
91
Using the Software Upgrade Wizard
93
Welcome
93
Upload Software
94
Upgrade Settings
94
Upgrading
94
Backing up the System
94
Configuring Local and Remote System Administrators
96
Configuring Administrator Access
102
Managing Device Details
104

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 7
Managing Date and Time
105
Configuring DDNS and Access Service
106
DDNS
106
Reach My Device
106
Remote Access to the WebUI
107
Remote Access to the CLI
107
Using System Tools
107
Managing Installed Certificates
108
Managing Internal Certificates
110
Configuring High Availability
112
Advanced Settings
117
Managing the Access Policy
150
Configuring the Firewall Access Policy and Blade
150
Firewall Policy
151
Application & URL Filtering
152
Updates
153
User Awareness
154
Tracking
155
More Information
155
Working with the Firewall Access Policy
156
Firewall Policy
156
Configuring Access Rules
159
Updatable Objects
161
Customizing Messages
161
Defining Firewall Servers
163
Defining NAT Control
166
Advanced - Creating and Editing NAT Rules
171
Working with User Awareness
174
Configuring the QoS Blade
177
Working with QoS Policy
179
SSL Inspection Policy
182
SSL Inspection
182
Deploying SSL Inspection
182

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 8
SSL Inspection Bypass Policy
183
HTTPS Categorization
184
SSL Inspection Exceptions
185
SSL Inspection Advanced
186
Managing Threat Prevention
187
Configuring Threat Prevention Blade Control
187
Configuring Threat Prevention Policy Exceptions
190
Threat Prevention Exceptions
190
Whitelists
190
Threat Prevention - Infinity SOC
191
Viewing Infected Devices
193
Viewing the IPS Protections List
196
Advanced Threat Prevention Engine Settings
197
IPS
197
Anti-Virus
197
Anti-Bot
199
Threat Emulation
200
User Messages
201
Configuring the Anti-Spam Blade Control
203
Configuring Anti-Spam Exceptions
205
Managing VPN
206
Configuring the Remote Access Blade
206
Configuring Remote Access Users
209
Remote Access - Connected Remote Users
214
Configuring Remote Access Authentication Servers
215
Configuring Advanced Remote Access Options
219
Office Mode
219
DNS Servers for Remote Access users
220
DNS Domain Name
221
SSL VPN bookmarks
221
Configuring the Site to Site VPN Blade
223
Configuring VPN Sites
224
Configuring Advanced Site to Site Community Settings
230

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 9
Viewing VPN Tunnels
231
Configuring Advanced Site to Site Settings
232
Configuring a Local Encryption Domain
232
Configuring the Appliance Interfaces
233
Tunnel Health Monitoring
234
Managing Trusted CAs
235
Managing Installed Certificates
237
Managing Internal Certificates
239
Managing Users and Objects
241
Working with User Awareness
241
Configuring Local Users and User Groups
244
Configuring Local and Remote System Administrators
246
Managing Authentication Servers
252
Managing Applications & URLs
256
Managing System Services
258
Managing Service Groups
261
Managing Network Objects
263
Managing Network Object Groups
266
Logs and Monitoring
267
Viewing Security Logs
267
Viewing System Logs
269
Configuring External Log Servers
270
External Check Point Log Server
270
External Syslog Server Configuration
271
Secured Syslog
272
Notifications
273
Managing Active Devices
273
Wireless Active Devices
273
Paired Mobile Devices
273
Viewing Infected Devices
273
Viewing VPN Tunnels
274
Viewing Active Connections
275
Access Points
276

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.25 Locally Managed Administration Guide | 10
Viewing Monitoring Data
276
Viewing Reports
276
Using System Tools
276
SNMP
277
SNMP Traps Receivers
278
SNMP Traps
278
SNMPTraps for VPNTunnels
278
SNMP Traps for Hardware Sensors
278
Advanced Configuration
280
Upgrade Using a USB Drive
280
Upgrade Using an SD Card
281
Boot Loader
282
Upgrade Using Boot Loader
283
Restoring Factory Defaults
284