Check Point 2580
Half-width rack wired firewall with 10 GbE combo WAN and DMZ interfaces and two 2.5 GbE LAN ports.
Overview
The Spark 2580 serves sites with faster uplinks in a half-width rack chassis. Unlike the 2560 and 2570, its dedicated WAN and DMZ interfaces are 10 GbE combo interfaces with a choice of copper or fibre; each pair represents a single operational interface. Local access combines eight Gigabit ports and two 2.5 GbE ports. This configuration suits projects where wired multigigabit connectivity and efficient rack use matter more than a built-in radio. The architecture must define redundant power, mounting and transceivers, while Threat Prevention throughput provides an initial reference for validating the actual workload. Selection criteria: Evaluate this model when 10 GbE WAN and DMZ interfaces with a choice of copper or fibre are required; only one medium operates at a time on each combo port. Select it when eight 1 GbE LAN ports plus two 2.5 GbE ports meet the site's needs and half-width rack mounting helps deployment; confirm the mounting kit. Validate the 3200 Mbps TP benchmark against the expected inspection and session load; this is a wired offering and requires another component if the project needs WLAN or cellular WAN. Manufacturer image; interface configuration may vary by SKU.
Key features
- WAN and DMZ handoffsFlexible WAN and DMZ interfaces for copper or fibre handoffs up to 10 GbE. Source: https://sc1.checkpoint.com/documents/Appliances/GSG_T1.5/EN/Content/Topics-T15/Front-Panel-2580.htm
- USB-C console priorityUSB-C and RJ45 consoles; USB-C takes priority when both are connected. Source: https://sc1.checkpoint.com/documents/Appliances/GSG_T1.5/EN/Content/Topics-T15/Front-Panel-2580.htm
- Rack shelf installationMounting on a rack shelf, individually or side by side, in the orientation permitted by the guide. Source: https://sc1.checkpoint.com/documents/Appliances/Rails/Content/Topics-Rack-Mounting/2500.htm
- Redundant power supplyDual power connectors and power supply failure indication for implementing redundancy. Source: https://www.checkpoint.com/downloads/products/quantum-spark-2500-datasheet.pdf · https://sc1.checkpoint.com/documents/Appliances/GSG_T1.5/EN/Content/Topics-T15/Front-Panel-2580.htm
Technical specifications
| Threat Prevention — benchmark | 3200 Mbps; Firewall, Application Control, URL Filtering, IPS, Antivirus, Anti-Bot and SandBlast Zero-Day Protection with logging. Edition dated 22/07/2026, pp. 5–6. |
|---|---|
| NGFW — benchmark | 9000 Mbps; Firewall, Application Control and IPS with logging. Edition dated 22/07/2026, pp. 5–6. |
| New connections per second — laboratory | 72000; RFC 3511/2544/2647/1242 section of the datasheet, p. 5. Not equivalent to sessions inspected in production. |
| LAN Gigabit | 8 × 1 GbE RJ45 |
| LAN multigigabit | 2 × 2.5 GbE RJ45 |
| WAN and DMZ | 1 WAN and 1 DMZ 10 GbE RJ45/SFP+ combo interface; one active medium per interface |
| Radio options | Wired; no built-in Wi-Fi or cellular modem |
Figures published by the manufacturer. Final sizing depends on the environment, enabled services and traffic profile.
Documents and references
- Complex projects require more than knowledge of a single technology.
- Better decisions begin with a better understanding of the environment.
- The network that connects the business must be ready to support it.
- Cloud is not where the infrastructure is. It is how it was architected to operate.
- Connectivity is necessary. Controlling every communication is security.
- Security designed to protect what keeps your business running.
- Spark 2500 Firewalls — Datasheet (22/07/2026)
- Spark Firewall 2580 — Getting Started Guide
- R82.00.X — central management guide
- Official manufacturer page