Checkpoint QUANTUM SPARK 1530 User manual

Models:V-80, V-80W [Classification: Protected]
10 February2021
QUANTUM SPARK 1530 /
1550 APPLIANCE
R80.20.XX
Getting Started Guide

Check Point Copyright Notice
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|2
Check Point Copyright Notice
© 2019 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation are protected by copyright and distributed
under licensing restricting their use, copying, distribution, and decompilation. No part of this product or
related documentation may be reproduced in any form or by any means without prior written authorization
of Check Point. While every precaution has been taken in the preparation of this book, Check Point
assumes no responsibility for errors or omissions. This publication and features described herein are
subject to change without notice.
RESTRICTED RIGHTS LEGEND:
Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)
(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR
52.227-19.
TRADEMARKS:
Refer to the Copyright page for a list of our trademarks.
Refer to the Third Party copyright notices for a list of relevant copyrights and third-party licenses.

Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|3
Important Information
Latest Software
We recommend that you install the most recent software release to stay up-to-date with the
latest functional improvements, stability fixes, security enhancements and protection
against new and evolving attacks.
Certifications
For third party independent certification of Check Point products, see the Check Point
Certifications page.
Check Point 1500 Appliances
For more about the 1500 Appliance Series, see the 1500 Appliance home page.
Latest Version of this Document in English
Open the latest version of this document in a Web browser.
Download the latest version of this document in PDF format.
Feedback
Check Point is engaged in a continuous effort to improve its documentation.
Please help us by sending your comments.
Revision History
Date Description
10 February 2021 Rebranded as Quantum Spark Appliances
19 November 2020 Updated links
30 June 2020 Updated compliance information.
02 March 2020 Added 1530 models and updated compliance information.
19 January 2020 First release of this document

Table of Contents
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|4
Table of Contents
Introduction
6
Shipping Carton Contents
7
Setting up the Appliance
8
Wall Mounting
8
Connecting the Cables
9
First Time Deployment Options
10
Appliance Diagrams and Specifications
11
Front Panel
12
Management LED
13
Network LEDs
14
Back Panel
15
Side Panel
16
Using the First Time Configuration Wizard
17
Starting the First Time Configuration Wizard
17
Welcome
17
Zero Touch
18
Authentication Details
19
Appliance Date and Time Settings
20
Appliance Name
21
Security Policy Management
21
Security Management Server Connection
22
Internet Connection
23
Local Network
25
Wireless Network
25
Administrator Access
26
Appliance Registration
28
Security Management Server Authentication
30
Software Blade Activation
30
Summary
31
Zero Touch Cloud Service
32

Table of Contents
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|5
USB Drive
33
Health and Safety Information
34
Information sur la Santé et la Sécurité
40
Support
46

Introduction
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|6
Introduction
Thank you for choosing Check Point's Internet Security Product Suite. Check Point products provide your
business with the most up to date and secure solutions available today.
Check Point also delivers worldwide technical services including educational, professional, and support
services through a network of Authorized Training Centers, Certified Support Partners, and Check Point
technical support personnel to ensure that you get the most out of your security investment.
For more information about the appliance, see the Quantum Spark 1500 , 1600 and 1800 Appliance
Series Administration Guide .
For more technical information, go to Check Point Support Center.

Shipping Carton Contents
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|7
Shipping Carton Contents
Item Quantity Description
Appliance 1 Quantum Spark 1530 / 1550 Appliance.
LAN cable 2 1.8m - RJ45 to RJ45, CAT5e, shielded, STP, black color.
Console cable 1 1m, USB type-C to USB-2.0 type-A, black color.
Power adapter 1 AC to 12VDC desktop, black color.
40W for wired and WiFi.
Power cord for
adapter
1 Plug types: US, UK, EU and AUS/NZ, India, China, Japan.
Rubber feet 4 Assembled on the appliance.
Wall mount kit 1
2
2
Includes drilling hole location sticker.
Screws: M4x6, truss screw.
Screw anchors.
Antenna 3 WiFi Antenna RP-SMA type, black color (WiFi models only).
Guides 1
1
Quantum Spark 1530 / 1550 Appliance Quick Start Guide .
Quantum Spark 1530 / 1550 Appliance Getting Started Guide QR
Code.
License Agreement 1 End user license agreement.

Setting up the Appliance
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|8
Setting up the Appliance
1. Remove the Quantum Spark 1530 / 1550 Appliance from the shipping carton and place it on a
tabletop.
2. Optional - Remove the transparent protective sticker from the front panel of the appliance.
3. Attach antennas to the model (WiFi model only).
4. Identify the network interface marked as LAN1. This interface is preconfigured with the IP address
192.168.1.1.
Wall Mounting
To mount the appliance to the wall:
1. Place the wall-mount sticker on the wall and drill two holes for the screws.
2. Insert the 2 screw anchors in the wall.
3. Attach the 2 screws in the accessory kit (M4*6) to the wall.
4. Mount the appliance and verify the 2 screws are fastened well to the appliance.
Key Item Description
1 Holes on the bottom of the appliance Attach screws here

Connecting the Cables
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|9
Connecting the Cables
1. Connect the power supply unit to the appliance and to a power outlet.
The appliance is turned on when the power supply unit is connected to an outlet and you push the
On/Off button on the back panel.
2. When the appliance is turned on, the Power LED on the front panel lights up in red for a short period.
The LED then turns blue and starts to blink. This shows a boot is in progress and firmware is being
installed.
When the LED turns a solid blue, the appliance is ready for login.
Note - The LED is red if there is an alert or error.
3. Connect the standard network cable to the LAN1 port on the back panel of the appliance and to the
network adapter on your PC.
4. Optional: Connect the console cable to the console port on the back of the appliance,
and to a USB port on a supported terminal.
a. The baud rate should be set to 115200.
Set the Flow control to None.
b. To get the console driver, click: https://www.silabs.com/products/development-
tools/software/usb-to-uart-bridge-vcp-drivers
c. Verify the MD5 and SHA256 are the following:
nMD5 - c0b27c9b0f3a3ed53927a4857853a2cb
nSHA 256 -
5d8fa117cd499a50cab895f35d50d108a61e80b6a3f6d2ecbffa8949085b8f2e
5. If you use an external modem:
Connect the Ethernet cable to the WAN port on the appliance back panel and plug it into your
external modem or router’s PC/LAN network port. The Internet LED on the appliance front panel
lights up when the Ethernet is connected.
Note - Wait 10 seconds between power cycles (off and on).

First Time Deployment Options
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|10
First Time Deployment Options
There are different options for first time deployment of your gateways:
n
"Using the First Time Configuration Wizard" on page17
n
"Zero Touch Cloud Service" on page32
n
"USB Drive" on page33

Appliance Diagrams and Specifications
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|11
Appliance Diagrams and
Specifications
This section describes the different features in the front, back, and side panels of the 1530 / 1550 models.
Note - Depending on which model appliance you have, some of the specifications below may vary.
Wired

Appliance Diagrams and Specifications
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|12
WiFi (with antennas)
Front Panel
Note - There is only one set of LEDs. These LEDs show different colors depending on what activity is
occurring.

Appliance Diagrams and Specifications
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|13
Key Item Icon Description
1 WiFi LED
(WiFi models
only)
nOff - WiFi off
nBlue - WiFi on and operates normally
nRed - WiFi error/alert
2 Management
LED
nOff - No management
nColors - See below
3 Internet LED nOff - No internet connection
nBlinking Blue - Trying to connect to the internet.
nBlue - Connected
nBlinking Red - Connection failure
4 Power LED
(Status)
nSolid Blue - Normal operation
nBlinking Blue - Boot in progress and installing firmware. After the
process completes, the LED is solid blue.
nRed - Error/Alert
Note - This LED is red when the appliance is first turned on.
Table: LEDs
Management LED
The Management LED shows the status of the retries mechanism:
Action Management LED
Activity
Zero Touch is running. Blinks red (slowly)
Successfully connected to Zero Touch Cloud Server and saved the
deployment script.
Blinks red (rapidly)
Zero Touch process is completed. SMP activation is not needed. LED off
Activation sleeping time. Blinks blue (slowly)
Reactivation. Blinks blue (rapidly)
SMP is connected. Solid blue.
SMP mode is off. LED off
Gateway failed to connect to the SMP and will exit from the retry script. Constant red.

Appliance Diagrams and Specifications
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|14
Wait times before retry:
Failure Waiting Time
1st 2 minutes
2nd 4 minutes
3rd 8 minutes
4th 16 minutes
Subsequent Retries every 16 minutes until Cloud Services are successfully activated
Network LEDs
The table below describes the network LEDs (RJ45 WAN and LAN ports).
Each port uses a bi-color LED to reflect the link/activity and speed, from 10M to 1GbE.
RJ45 LED1 (Green) LED2 (Amber)
No link Off Off
1G link ON Off
1G Act Blink ON
100M link ON Off
100M Act Blink Off
10M link ON Off
10M Act Blink Off

Back Panel
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|15
Back Panel
Key Item Description
1 USB port 3.0 For software download.
2 LAN and WAN
ports 1 GbE
LAN ports 1-5, LAN 2/Sync.
WAN port 1.
3 Console Plug in the serial console cable here. Baud rate: 115200.
4 Power cord socket Plug the power adapter cord in here.
5 Factory default Press the button continuously for 12 seconds to restore the
appliance to its factory defaults.
6 Power button Push to turn the appliance on or off.

Side Panel
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|16
Side Panel
Key Item Description
1 Anti-theft slot. Insert anti-theft cable here.
Use Kensington and Sunbox TL-623M cable as a reference.

Using the First Time Configuration Wizard
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|17
Using the First Time Configuration
Wizard
Configure the Quantum Spark Appliance with the First Time Configuration Wizard.
To close the wizard and save configured settings, click Quit.
Note - In the First Time Configuration Wizard, you may not see all the pages described in this guide. The
pages that show in the wizard depend on your appliance model and the options you select.
Starting the First Time Configuration Wizard
To configure the 1530 / 1550 Appliance for the first time after you complete the hardware setup, use the
First Time Configuration Wizard.
WiFi models with a special device label only:
If you did not yet run the First Time Configuration Wizard, you can connect through WiFi using the SSID
and WiFi password that appears on the sticker. This is unique for each appliance.
If you do not complete the wizard because of one of these conditions, the wizard will run again the next
time you connect to the appliance:
nThe browser window is closed.
nThe appliance is restarted while you run the wizard.
After you complete the wizard, you can use the WebUI (web user interface) to change settings configured
with the First Time Configuration Wizard and to configure advanced settings.
To open the Appliance WebUI, enter one of these addresses in a web browser:
nhttps://my.firewall
nhttps://192.168.1.1:4434
If a security warning message shows, confirm it and continue.
The First Time Configuration Wizard starts.
Welcome
The Welcome page introduces the product and shows the name of your appliance.

Using the First Time Configuration Wizard
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|18
You can connect to the Zero Touch server to fetch settings automatically from the cloud.
To change the language of the WebUI application:
Select the language link at the top of the page.
Note - Only English is allowed as the input language.
Zero Touch
Zero Touch enables a gateway to automatically fetch settings from the cloud when it is connected to the
internet for the first time.
Note - You cannot use Zero Touch if you connect to the internet with a proxy server.
If the gateway connects to the internet through DHCP, the gateway will fetch the Zero Touch settings
without any additional action. If no DHCP service is available, you must run the First Time Configuration
Wizard, configure the Internet Connection settings, and then fetch the settings from the Zero Touch
server.
To connect to the Zero Touch server:
1. In the Welcome page, click Fetch Settings from the cloud.
2. In the window that opens, click OK to confirm that you want to proceed.
3. The Internet connection page opens. Configure your Internet connection and click Connect.
4. The Fetching settings from the cloud window opens and shows the Connecting to the service
provider status. This process may take several minutes.
5. If you fail to connect, an error message appears. Possible errors include:
nInternet connection is not configured correctly.
nInternet connection is through a proxy server.
nZero Touch is already running.

Using the First Time Configuration Wizard
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|19
nZero Touch service already completed.
nThe First Time Configuration Wizard already completed.
nZero Touch service is disabled.
Where applicable, click Retry now to connect again.
6. After you connect to the server, the settings are automatically downloaded and installed. The status
is shown in the Fetching settings from the cloud window. It may take several minutes until the
installation is complete.
7. Click Finish.
Note - If a collision is detected between an internal network (LAN) and an IP returned using DHCP (WAN),
the conflicting LAN address is changed automatically. If a colliding LAN IP address is changed, a message
appears in the system logs.
When you reconnect to the WebUI or click Refresh, the browser opens to show the status of the installation
process.
After the gateway downloads and successfully applies the settings, it does not connect to the Zero Touch
server again.
Authentication Details
In the Authentication Details page, enter the required details to log in to the appliance WebUI, or if the
wizard terminates abnormally:
nAdministrator Name - We recommend that you change the default "admin" login name of the
administrator. The name is case sensitive.
nPassword - A strong password has a minimum of 6 characters with at least one capital letter, one
lower case letter, and a special character. Use the Password strength meter to measure the
strength of your password.
Note - The meter is only an indicator and does not enforce creation of a password with a specified
number of character or character combination. To enforce password complexity, click the check
box.
nConfirm Password - Enter the password again.
nCountry - Select a country from the list (for wireless network models).
The country where the license is set determines the wireless frequency and parameters, as the
regulations vary according to region.
If you are using a trial license, only basic radio settings, are allowed in all zones. A warning that
selected wireless radio settings are not applied shows on the Summary page and also on the
Device >License page. For more information on basic wireless radio settings, see sk159693.
If you select a country and install a valid license, but the wireless region of the device does not match
the selected country, a warning message shows and you must edit the country information. When
the country and wireless region match, you see the full settings.

Using the First Time Configuration Wizard
Quantum Spark 1530 / 1550 Appliance R80.20.XX Getting Started Guide|20
Appliance Date and Time Settings
In the Appliance Date and Time Settings page, configure the appliance's date, time, and time zone
settings manually or use the Network Time Protocol option.
If you select the option Set the time manually, the appliance uses the date and time from your computer
as the initial values. If necessary, change the time zone setting to show your correct location. Daylight
Savings Time is automatically enabled by default. You can change this in the WebUI application on the
Device >Date and Time page.
nDate - The date on your computer appears by default. If required, set a different date.
nTime - The time on your computer appears by default. If required, set a different time.
nTime Zone - The time zone on your computer appears by default. If required, select a time zone
setting to reflect your exact location.
nPrimary NTP server - The IP or host name of the primary NTP server. The default server is
ntp.checkpoint.com
nSecondary NTP server - The IP or host name of the secondary NTP server. The default server is
ntp2.checkpoint.com