Support Center > Search Results > SecureKnowledge Details
1500 Series Security Gateways Technical Level
Solution

Table of Contents

  1. Overview 
  2. Key Features - Hardware
  3. Key Features - Software
  4. Downloads
  5. Documentation
  6. Known Limitations
  7. Revision History

Visit Check Point's CheckMates Community to ask questions, start a discussion, and get our experts' assistance.

Important Note: To see the latest firmware release, refer to sk97766.

(1) Overview of 1500 Series Security Gateways   

Check Point's Small and Medium Business Appliances are high performance, integrated devices offering Firewall, VPN, Anti-Virus, Application Control, URL Filtering, Email Security, and SandBlast Zero-Day Protection, all in compact form factors that are simple to configure and manage.

Advanced Security, Uncompromising Performance

Check Point's 1500 Series Security Gateways are now available. The 1530 / 1550 and 1590 appliances include, respectively, six (6) 1-Gigabit or ten (10) Ethernet ports, and are available in Wired, WiFi flavors.

The 1500 Security Gateways deliver enterprise-grade security in a series of simple and affordable, all-in-one security solutions to protect small and medium business employees, networks, and data from cyber theft.

1500 Security Gateways offer integrated, multi-layered security in a compact desktop form factor. Setup can be done in minutes using pre-defined security policies and our step-by-step configuration wizard. 1500 Security Gateways are conveniently manageable locally via a Web interface, centrally by the Check Point Security Management Portal (vSMP), or centrally by Check Point's central management systems: SmartConsole, MDM, LSM (Future), Maas (Future).

Comprehensive Protection 

  • Next Generation Firewall
  • Site-to-Site VPN
  • Remote Access VPN
  • Application Control and Web Filtering
  • Intrusion Prevention
  • Anti-Virus
  • Anti-Bot
  • Anti-Spam
  • SandBlast Threat Emulation (sandboxing)
  • Device Recognition
  • Email Inspection

(2) Key Features - Hardware 

1530 / 1550 Security Gateway

  • Wired and WiFi flavors.
  • 5x1GbE LAN, 1x1GbE WAN.
  • New look and feel, slim fanless design, plastic based.
  • Front panel LEDs indication (4 LEDs).
  • Power button.
  • Dual band non-concurrent 3x3 WiFi.
  • USB Type-C console port.
  • USB 3.0 Port.
  • NGTX performance - 450 Mbps (CPEnt).


1590 Security Gateway

  • Wired WiFi and WiFi+LTE (New!) flavors (see description below).
  • 8x1GbE LAN, 1x1GbE WAN ports, 1x1GbE / SFP DMZ ports.
  • Dual band concurrent 802.11ac wave II 4x4 WiFi (see below for 1590 Enhanced WiFi capabilities).
  • New look and feel, lightweight, fanless, Aluminum-based design.
  • Front panel LEDs indication (4/5 LEDs).
  • USB Type-C console port.
  • USB 3.0 Port.
  • SD Card support.
  • Dual SIM (Nano and Micro).
  • NGTX performance - 660 Mbps (CPEnt).

1590 Enhanced WiFi - Features and Capabilities

1590 Gateways utilize cutting-edge 802.11ac Wave 2 technology, which introduces several major updates in Wi-Fi components. The most significant is a new feature called Multi-User MIMO (MU-MIMO), a radical new technology that supports higher density deployments by servicing multiple endpoint devices concurrently.

In addition, several channel bonding improvements enhance overall throughput by utilizing wider portions of the 5GHz band, as well as enabling more flexible use of the spectrum. Compared with 802.11ac Wave 1, 802.11ac Wave 2 provides higher user access capabilities, a more flexible bandwidth combination, and a higher throughput.

1590 Gateways include enhanced 4X4 WiFi design. 

Wi-Fi Cryptography: supports WPA (TKIP 128 bit) and WPA2 (AES, 128/256 bit) 

  WiFi Capabilities Wave 2 Enhancements: 1470/1490 vs. 1590:

           Show / Hide this section
Feature 802.11n

802.11ac Wave 1

1470/1490/1530/1550

802.11ac Wave 2

1590

MU-MIMO Not Supported Not Supported  Supported 
Adjacent Channel Bonding 40MHz 80MHz  160MHz 
Channel width 20MHz, 40MHz Supported Supported  Supported
Channel width 80MHz Not Supported Supported Supported
Channel width 80MHz + 80MHz And 160Mhz  Not Supported Not Supported  Supported
Non-Adjacent Channel Bond Not Supported Not Supported  Supported:
80MHz + 80MHz
Dynamic Bandwidth Allocation Not Supported Not Supported Supported
Implicit Feedback Beamforming Not Supported Not Supported  Supported
Explicit Feedback Beamforming Not Supported  Not Supported  Supported
Operating Band MIMO Spatial  2.4Ghz & 5GHz 5GHz 5GHz
Streams  3 streams  3 streams  4 streams
Modulation 64 QAM  56 QAM 256 QAM
MIMO Type Single User (SU)  Single User (SU) Multi User (MU)
Antenna gain 3dbi 3dbi 5dbi 
MCS Support MCS7  MCS7 MCS9

Additional Information about 1590 Enhanced WiFi - Features and Capabilities:

SSID:
  • 1530 / 1550 – 4 (2.4GHz)
  • 1590 – 4 (2.4GHz)+ 4 (5GHz)
Concurrent users
1530 / 1550 (dual band non-concurrent):
  • Max clients @2.4GHz - 60
  • Max clients @5GHz - 70
1590 (dual band concurrent)
  • Max clients @2.4GHz - 120
  • Max clients @5GHz - 120


1590 Security Gateway WiFi+LTE model

  • WiFi+LTE model (New!)
  • Embedded cellular module.
  • Embedded modem that supports the latest advanced 4G/LTE, with fallback to 3G HSPA+ networks in North America, Europe, and Asia.
  • Worldwide LTE coverage with just two product variants: one for North America and EMEA, and one for Asia-Pacific.
  • Dual SIM functionality is supported to enable automatic fail over between SIMs.
  • 4G/LTE supports CAT6 while 3G HSPA+ and UMTS.
  • Peak download rate is 300Mbps and and uplink of 50Mbps.
  • 3/4G/LTE Cryptography – supports NAS/AS security procedures and Snow 3G/AES/ZUC security
  • Two external antennas (Main and Diversity) to allow the best RF signal and coverage.
  • Certified for PTCRB (#88237) and GCF (#9109 and #9156).  
  • Cellular carriers certification in USA:
    • The following main carriers in the United States require a special certification process: Verizon, AT&T, and T-Mobile (Sprint).
    • Customers cannot use the networks above with the 1590 until they are fully certified. Certification is on-going and will be published once done.

4G/LTE Radio frequency and bands

Show / Hide this section
Region/Country Frequency (MHz) Band
APAC and Australia 2100 1
1800 3
850 5
2600 7
900 8
700 28
EMEA 2100 1
1800 3
2600 7
900 8
800 20
North America  1900 2
1700 4
850 5
700 12
700 13
700 17
1900 25
850 26
700 29 only Rx
Canada 1900 2
1700 4
850 5
2600 7
700 12
700 17
700 29 only Rx

3G Radio frequency and bands

Show / Hide this section
Region/Country Band Tx Frequency (MHz) Rx Frequency (MHz)
APAC and Australia 1 1920–1980 2110–2170
5 824–849 869–894
8 880–915 925–960
EMEA 1 1920–1980 2110–2170
3 1710–1785 1805–1880
8 880–915 925–960
North America 2 1850–1910 1930–1990
4 1710–1755 2110–2155
5 824–849 869–894
Canada 2 1850–1910 1930–1990
4 1710–1755 2110–2155
5 824–849 869–894


(3) Key Features - Software

SMB Next Generation Appliances are R80 code aligned, increasing performance and bringing cutting edge enterprise grade security to your small and medium size business.

Centrally and locally managed enhancements

  • Automatic Device recognition and discovery
  • Multicore VPN and VPN acceleration
  • Additional ciphers support for HTTPS Inspection (see sk104562)
  • WatchTower application enhanced features

Centrally managed enhancements (will be available in the R80.30 Jumbo Hotfix and R80.40 Security Management Server releases)

  • Policy layers and sub-policy support for centrally managed mode   
  • Unified access policy support for centrally managed mode (Firewall, Application Control, and URL Filtering) 
  • Unified Threat Prevention policy (IPS, Anti-Virus, Anti-Bot, and Threat Emulation Software Blade policies) 
  • Acceleration of Domain Objects, Dynamic Objects, and Time Objects for centrally managed mode
  • Wildcard network object in Access Control that represents a series of IP addresses that are not sequential

Locally managed enhancements

  • New Threat Prevention blade control: Unified Threat Prevention policy, easy and intuitive to set and control.
  • New SSL inspection enforcement: Simultaneously support light SSL and Full SSL inspection
  • Improved High Availability mechanism
  • WiFi Monitoring - wireless active devices: Track connected devices, signal strength, channel used, and more
  • WiFi Monitoring - Access point: Monitor your WiFi environment to identify congested channels, frequency used, and signal strength

(4) Downloads

Refer to sk97766: Check Point 600 / 700 / 910 / 1100 / 1200R / 1400 / 1500 SMB Appliances.

(5) Documentation

User Guides
1500 Appliance R80.20 Release Notes
1530 / 1550 Appliance R80.20 Getting Started Guide
1570/1590 Appliance R80.20XX Getting Started Guide
1500 Appliance Series R80.20 Locally Managed Administration Guide
1500 Appliance Series R80.20 Centrally Managed Administration Guide
1500 Appliance Series R80.20 Locally Managed Administration Guide (Japanese)
SMB 1500 Appliance CLI Guide R80.20 Reference Guide
1530 / 1550 Appliance Quick Start Guide (English)
1530 / 1550 Appliance Quick Start Guide (Japanese)
Related SecureKnowledge Articles
sk159772: Check Point R80.20 for 1500 Appliances Features and Known Limitations
Check Point R80.20 for Small and Medium Business Appliances
sk163612: R80.20.01 for Small and Medium Business Appliances
sk165454: R80.20.02 for Small and Medium Business Appliances
sk97766: Check Point 600 / 700 / 910 / 1100 / 1200R / 1400 / 1500 SMB Appliances Releases
Datasheets
1500 Security Gateways Datasheet

(6) Known Limitations

For Known Limitations, refer to sk159173: R80.20 for Small and Medium Business Appliances.

(7) Revision History

Show / Hide the revision history
Date Description
3 March 2020 Added support for 1590 Security Gateway WiFi+LTE model
17 Oct 2019 First release of this document

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment