SMB Firewalls
Check Point Spark 2500 Series delivers enterprise-grade security for SMBs and enterprise branches in simple, affordable, all-in-one appliances. Threat prevention throughput reaches 5,500 Mbps, with the latest Wi-Fi 7, 5G cellular and 10GbE LAN ports. Powered by R82 security and management technology, Spark 2500 inspects encrypted traffic and prevents even the most evasive AI-fueled attacks without impacting internal network performance.
Key Features
- Comprehensive industry-leading security: NGFW, site-to-site and remote access VPN, application and web filtering, IPS, antivirus and Anti-Bot, advanced DNS security, sandboxing and zero-phishing (agentless); ranked #1 in third-party benchmarks including Miercom and NSS
- Latest Wi-Fi 7: up to 30% added throughput over Wi-Fi 6 models with improved client density and reduced latency
- 5G cellular: use as primary WAN (Fixed Wireless Access) or backup link; Dual SIM Single Standby (DSSS) with 4G/LTE backward compatibility
- Unified management: Spark 2500 Management, Web UI, Smart-1 Cloud and Management Server; MSPs provision thousands of firewalls with interactive dashboards and proactive alerts via SMS, email and MS Teams — included at no extra cost
- Integrated SD-WAN: link aggregation and prioritization by latency, jitter and packet loss; multi-path orchestration for 10,000+ apps; sub-second failover and autonomous link swapping
- IoT protection: autonomous discovery mapped to 200+ profiles with an auto-generated inline zero-trust IoT policy layer
Performance Specifications
| Test Conditions | 2530 | 2550 | 2560 | 2570 | 2580 | 2590 |
|---|---|---|---|---|---|---|
| Threat Prevention [Mbps] | 750 | 1,000 | 1,850 | 2,500 | 3,200 | 5,500 |
| Next Generation Firewall [Mbps] | 1,200 | 1,600 | 3,750 | 5,000 | 9,000 | 11,000 |
| IPS Throughput [Mbps] | 1,720 | 2,300 | 5,170 | 6,900 | 11,000 | 12,000 |
| Firewall Throughput [Mbps] | 2,250 | 3,000 | 6,750 | 9,000 | 17,500 | |
| Firewall 1518 bytes UDP [Mbps] | 3,000 | 4,000 | 11,600 | 15,500 | 20,000 | 25,000 |
| Firewall Latency Avg. [μs] | 90 | 30 | 24 | |||
| VPN AES-GCM 1452B [Mbps] | 1,400 | 4,000 | 4,500 | 5,500 | ||
| Connections/Sec | 16,000 | 20,000 | 53,000 | 62,000 | 72,000 | 75,000 |
| Concurrent Connections | 1,000,000 | 2,000,000 | 4,000,000 | |||
| Remote Access Users | 100 | 200 | 1,000 | |||
Hardware Specifications
| Specification | 2530 | 2550 | 2560 | 2570 | 2580 | 2590 |
|---|---|---|---|---|---|---|
| WAN Port | 1×1GbE RJ45/SFP | 1×1GbE RJ45 | 1×10GbE RJ45/SFP+ | 1×1GbE RJ45/SFP | ||
| DMZ Ports | 1×1GbE RJ45/SFP | 1×1GbE SFP | 1×10GbE RJ45/SFP+ | 1×1GbE RJ45/SFP | ||
| LAN Ports | 6×1GbE RJ45 | 8×1GbE RJ45 2×10GbE SFP+ | 8×1GbE RJ45 2×2.5GbE RJ45 | 16×1GbE RJ45 2×2.5GbE RJ45 4×10GbE SFP+ 8×1GbE SFP | ||
| Wi-Fi 7 | 2×2 2.4GHz+5GHz | 4×4 2.4+5+6GHz | — | |||
| 5G / LTE (optional) | — | 5G (SA, RedCap) / LTE Cat 4 | — | 5G (SA/non-SA) / LTE Cat 20 | — | |
| SD Card Slot | Micro-SD | |||||
| Dimensions Wired (W×D×H) | 210×180×42.5 mm | 210×194×42.5 mm | 210×210×42.5 mm | 430×300×42.5 mm | ||
| Weight – Wired | 0.70 kg | 0.70 kg | 0.99 kg | 0.99 kg | 0.99 kg | 4.47 kg |
| Dual Power | No | Available | ||||
| MTBF | 126 Years (Wired/Wi-Fi) | 33 Years (Wired/Wi-Fi) | 57 Years (Wired) | 47.5 Years | ||
| Operating Temperature | 0°C ~ 40°C (storage -45°C ~ 60°C) | |||||
| Power Consumption (Max) | 26.01W (non-Wi-Fi); 31.28W (Wi-Fi); 35.5W (Wi-Fi-5G) | 70.1W | ||||
Ordering Information
| SKU | Description |
|---|---|
| CPAP-SG2530-SNBT / CPAP-SG2530W-SNBT | Spark 2530 desktop (W = Wi-Fi 7 2×2) |
| CPAP-SG2550-SNBT / -W / -W-5G | Spark 2550 desktop (W = Wi-Fi 7; W5G adds 5G) |
| CPAP-SG2560-SNBT / CPAP-SG2560W-SNBT | Spark 2560 desktop (W = Wi-Fi 7 4×4) |
| CPAP-SG2570-SNBT / -W / -W-5G | Spark 2570 desktop (W = Wi-Fi 7; W5G adds 5G) |
| CPAP-SG2580-SNBT | Spark 2580 half-sized rack mount, dual power supply |
| CPAP-SG2590-SNBT | Spark 2590 1U rack mount, dual internal power supply |
First-year purchase includes the SNBT package (NGFW + NGTP + SandBlast sandboxing, zero-phishing, SMB IoT and SD-WAN); NGFW / NGTP / SNBT subscriptions are renewable for subsequent years. Power supplies, rack mounts, antennas and transceivers available as accessories.
Source: Check Point Spark 2500 Firewalls Datasheet (July 22, 2026).