Check Point 2560
Desktop firewall with eight Gigabit LAN ports and two 10 GbE SFP+ links for branches with fibre aggregation.
Overview
The Spark 2560 expands branch connectivity with eight 1 GbE LAN ports and two 10 GbE SFP+ interfaces in a desktop form factor. It includes a copper WAN and fibre DMZ, allowing external connections and local segments to be organised without relying exclusively on Gigabit ports. It is an option for projects that need faster optical uplinks, with a Wi-Fi 7 variant available for integrated wireless access. The 2560 does not offer a built-in 5G modem in the current commercial matrix. Selection must distinguish interface speed from inspection performance and account for compatible transceivers, security policy and management approach. Selection criteria: Evaluate this model when two 10 GbE optical uplinks and eight Gigabit LAN ports meet the site's aggregation needs without requiring the physical density of the 2590. The Threat Prevention benchmark is 1850 Mbps in the datasheet dated 22/07/2026, with the services and test conditions described in the specifications. Project capacity depends on the workload and inspection policy. Choose between wired and Wi-Fi 7; if a built-in cellular modem is required, assess the 2570 cellular configuration.
Key features
- 10 GbE optical uplinksTwo 10 GbE SFP+ interfaces for network uplinks, subject to transceiver compatibility. Source: https://sc1.checkpoint.com/documents/Appliances/GSG_T1.2/EN/Content/Topics-T1.2/Back-Panel-2560-2570.htm · https://www.checkpoint.com/downloads/products/quantum-spark-2500-datasheet.pdf
- Repurposing LAN ports for WANLAN ports can be repurposed for WAN according to the connectivity design. Source: https://www.checkpoint.com/downloads/products/quantum-spark-2500-datasheet.pdf
- Variante Wi-Fi 7 tribandaTri-band Wi-Fi 7 variant for projects with integrated WLAN. Source: https://www.checkpoint.com/downloads/products/quantum-spark-2500-datasheet.pdf · https://www.checkpoint.com/quantum/next-generation-firewall/small-business-firewall/
- Centralised policies in R82Centralised deployment in R82 with Software Blades and policies administered by the management environment. Source: https://sc1.checkpoint.com/documents/Appliances/Quantum_Spark_R82.00.X/AdminGuides_Centrally_Managed/EN/Content/Topics/Overview.htm · https://sc1.checkpoint.com/documents/Appliances/Quantum_Spark_R82.00.X/AdminGuides_Centrally_Managed/EN/Content/Topics/Getting-Started-CentrallyManaged.htm
Technical specifications
| Threat Prevention — benchmark | 1850 Mbps; Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection with logging. Edition dated 22/07/2026, pp. 5–6. |
|---|---|
| NGFW — benchmark | 3750 Mbps; Firewall, Application Control and IPS with logging. Edition dated 22/07/2026, pp. 5–6. |
| New connections per second — laboratory | 53000; RFC 3511/2544/2647/1242 section of the datasheet, p. 5. Not equivalent to sessions inspected in production. |
| LAN RJ45 | 8 × 1 GbE |
| High-speed LAN/WAN | 2 × 10 GbE SFP+ |
| Dedicated WAN and DMZ | 1 × 1 GbE RJ45 WAN; 1 × 1 GbE SFP DMZ |
| Radio options | Wi-Fi 7 4×4 at 2.4/5/6 GHz in the Wi-Fi variant; no built-in cellular connectivity |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.
Documents and references
- Complex projects require more than knowledge of a single technology.
- Better decisions begin with a better understanding of the environment.
- The network that connects the business must be ready to support it.
- Cloud is not where the infrastructure is. It is how it was architected to operate.
- Connectivity is necessary. Controlling every communication is security.
- Security designed to protect what keeps your business running.
- Spark 2500 Firewalls — Datasheet (22/07/2026)
- Spark Firewall 2560 / 2570 — Getting Started Guide
- R82.00.X — central management guide
- Official manufacturer page