Quantum CHECK POINT SPARK 1500 Series Instruction Manual

Models: V-80, V-80W, V-81, V-81W, V-81WL, V-81WD, V-81R, V-81WLR, V-82, V-83 [Classification: Protected]
12 April2022
QUANTUM SPARK 1500,
1600 AND 1800
APPLIANCE SERIES
R80.20.40
Locally Managed
Administration Guide

Check Point Copyright Notice
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide | 2
Check Point Copyright Notice
© 2022 Check Point Software Technologies Ltd.
All rights reserved. This product and related documentation are protected by copyright and distributed under
licensing restricting their use, copying, distribution, and decompilation. No part of this product or related
documentation may be reproduced in any form or by any means without prior written authorization of Check
Point. While every precaution has been taken in the preparation of this book, Check Point assumes no
responsibility for errors or omissions. This publication and features described herein are subject to change
without notice.
RESTRICTED RIGHTS LEGEND:
Use, duplication, or disclosure by the government is subject to restrictions as set forth in subparagraph (c)
(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 and FAR
52.227-19.
TRADEMARKS:
Refer to the Copyright page for a list of our trademarks.
Refer to the Third Party copyright notices for a list of relevant copyrights and third-party licenses.

Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide | 3
Important Information
Latest Software
We recommend that you install the most recent software release to stay up-to-date with the
latest functional improvements, stability fixes, security enhancements and protection against
new and evolving attacks.
Certifications
For third party independent certification of Check Point products, see the Check Point
Certifications page.
Check Point R80.20.40
For more about this release, see the R80.20.40 home page.
Latest Version of this Document in English
Open the latest version of this document in a Web browser.
Download the latest version of this document in PDF format.
Feedback
Check Point is engaged in a continuous effort to improve its documentation.
Please help us by sending your comments.
Revision History
Date Description
12 April2022 First release of this document

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide | 4
Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series Overview 11
1500 Appliances 11
1600 and 1800 Appliances 11
Getting Started 13
Setting up the Quantum Spark Appliance 15
First Time Deployment Options 16
Zero Touch Cloud Service 17
Deploying from a USB Drive or SD Card 18
Sample Configuration File 18
Preparing the Configuration Files 18
Deploying the Configuration File - Initial Configuration 19
Deploying the Configuration File - Existing Configuration 20
Viewing Configuration Logs 20
Troubleshooting Configuration Files 21
Configuration File Error 21
Suggested Workflow - Configuration File Error 21
Sample Configuration Log with Error 22
Using the set property Command 22
Configuration and Upgrade Scenarios 23
Configuring Cloud Services 23
Configuring a Guest Network 24
Configuring VPN 25
Configuring Remote Access VPN 25
Introduction 25
Prerequisites 25
Remote Access Configuration 25
L2TP VPN Client configuration 26
Configuring Site to Site VPN with a Preshared Secret 27
Introduction 27
Prerequisites 27
Configuration 27
Monitoring 27
Configuring Site to Site VPN with a Certificate 27

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide | 5
Introduction 27
Prerequisites 27
Configuration 28
Trust Procedures 28
Monitoring 29
Managing Clusters 30
Configuring a Cluster 30
Upgrading a Cluster 31
Configuring QoS 33
Appliance Configuration 34
The Home Tab 35
Viewing System Information 35
Controlling and Monitoring Software Blades 36
Setting the Management Mode 38
Configuring Cloud Services 40
Managing Licenses 43
Viewing the Site Map 45
Notifications 45
Managing Active Devices 46
Viewing Monitoring Data 48
Network 48
Troubleshooting 49
Viewing Reports 50
Using System Tools 52
Managing the Device 54
Configuring Internet Connectivity 54
The 'Configuration' tab 55
Prefix Delegation (IPv6 only) 58
Neighbor Discover Protocol (ND Proxy) - IPv6 only 59
DS-Lite (Dual Stack Lite, IPoE) 60
IPIP 60
Creating a New Bond (WAN) 62
Configuring a USB Cellular Connection 63
Configuring an LTE Internet Connection (WiFi-LTE models only) 63
The 'Connection Monitoring' tab 65

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide | 6
The 'Advanced' tab 66
Monitoring 68
Configuring Wireless Network 70
Wireless Scheduler 70
Wi-Fi Quality Analyzer 74
Configuring the Local Network 76
Reserved IP Address for Specific MAC 77
Switch 77
WAN as LAN 78
Monitor Mode 79
Physical Interfaces 80
Bridge 81
VLANs 84
Alias IP 84
VPN Tunnel (VTI) 85
Virtual Access Point (VAP) 86
BOND 87
Configuring a Hotspot 89
Configuring the Routing Table 92
Configuring MAC Filtering 95
802.1x Authentication Protocol 96
Configuring the DNS Server 98
Configuring the Proxy Server 99
Backup, Restore, Upgrade, and Other System Operations 100
Using the Software Upgrade Wizard 102
Welcome 102
Upload Software 103
Upgrade Settings 103
Upgrading 103
Backing up the System 103
Configuring Local and Remote System Administrators 105
Configuring Administrator Access 111
Managing Device Details 113
Managing Date and Time 114
Configuring DDNS and Access Service 115

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide | 7
DDNS 115
Reach My Device 115
Remote Access to the WebUI 116
Remote Access to the CLI 116
Using System Tools 116
Managing Installed Certificates 116
Managing Internal Certificates 119
Configuring High Availability 121
Advanced Settings 125
Managing the Access Policy 158
Configuring the Firewall Access Policy and Blade 158
Firewall Policy 159
Application & URL Filtering 160
Updates 161
User Awareness 162
Tracking 163
More Information 163
Working with the Firewall Access Policy 164
Firewall Policy 164
Configuring Access Rules 167
Updatable Objects 169
Customizing Messages 169
Defining Firewall Servers 171
Defining NAT Control 174
Advanced - Creating and Editing NAT Rules 179
Inspecting VoIP Traffic 181
Introduction 182
Configuration 184
Working with User Awareness 185
Configuring the QoS Blade 188
Working with QoS Policy 190
SSL Inspection Policy 193
SSL Inspection 193
Deploying SSL Inspection 193
SSL Inspection Bypass Policy 194

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide | 8
HTTPS Categorization 195
SSL Inspection Exceptions 196
SSL Inspection Advanced 197
Managing Threat Prevention 198
Configuring Threat Prevention Blade Control 198
Configuring Threat Prevention Policy Exceptions 201
Threat Prevention Exceptions 201
allowlists 201
Threat Prevention - Infinity SOC 202
Viewing Infected Devices 204
Viewing the IPS Protections List 207
Advanced Threat Prevention Engine Settings 208
IPS 208
Anti-Virus 208
Anti-Bot 210
Threat Emulation 211
User Messages 212
Configuring the Anti-Spam Blade Control 214
Configuring Anti-Spam Exceptions 216
Managing VPN 217
Configuring the Remote Access Blade 217
Configuring Remote Access Users 220
Two-Factor Authentication 222
Remote Access - Connected Remote Users 225
Configuring Remote Access Authentication Servers 226
Configuring Advanced Remote Access Options 229
Office Mode 229
DNS Servers for Remote Access users 230
DNS Domain Name 230
SSL VPN bookmarks 231
Configuring the Site to Site VPN Blade 232
Configuring VPN Sites 233
Configuring Advanced Site to Site Community Settings 239
Viewing VPN Tunnels 240
Configuring Advanced Site to Site Settings 241

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide | 9
Configuring a Local Encryption Domain 241
Configuring the Appliance Interfaces 242
Tunnel Health Monitoring 243
Managing Trusted CAs 244
Managing Installed Certificates 246
Managing Internal Certificates 248
Managing Users and Objects 250
Working with User Awareness 250
Configuring Local Users and User Groups 253
Configuring Local and Remote System Administrators 255
Managing Authentication Servers 261
Managing Applications & URLs 265
Managing System Services 267
Managing Service Groups 270
Managing Network Objects 272
Managing Network Object Groups 275
Logs and Monitoring 276
Viewing Security Logs 276
Viewing System Logs 278
Configuring External Log Servers 279
External Check Point Log Server 279
Syslog Server Configuration 280
Secured Syslog 281
Notifications 282
Managing Active Devices 282
Wireless Active Devices 282
Paired Mobile Devices 282
Viewing Infected Devices 282
Viewing VPN Tunnels 283
Viewing Active Connections 284
Access Points 285
Viewing Monitoring Data 285
Viewing Reports 285
Using System Tools 285
SNMP 286

Table of Contents
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide | 10
SNMP Traps Receivers 287
SNMP Traps 287
SNMPTraps for VPNTunnels 287
SNMP Traps for Hardware Sensors 287
Advanced Configuration 289
Upgrade Using a USB Drive 289
Upgrade Using an SD Card 290
Boot Loader 291
Upgrade Using Boot Loader 292
Restoring Factory Defaults 293
RESTful API 295
Enabling and disabling the REST API 295
Request Structure 295
Response Structure 296
Versioning 296
REST API Commands 297
(1) Login 297
(2) Logout 298
(3) Generate-Report 298
(4) Run-Clish-Command 299